Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
File: dLOekBkiWjsP_gWoNW6-8zwnvpc.mft (raw, json)
Hash identifier: wEX5RZvu5mr2GWKGloZGRdbwBnw6/IEvJRgPzXb58+Q=
Subject key identifier: A1:8C:6A:A8:6A:23:B0:E8:36:28:7D:06:21:9F:E0:D2:E8:29:B7:B7
Authority key identifier: 74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
Certificate issuer: /CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Certificate serial: 0194BBCDBD1463F79AC875DB19C5F2E9AC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: ZRVv1QEy1kLLZIQQzKY3v_cBQvM.roa (hash: dP4rVEZl+sj+rbeXk/M+iHEaNgIv2c4UoqRTeljUbU8=)
2: dLOekBkiWjsP_gWoNW6-8zwnvpc.crl (hash: WMtA6HVnpEvZpHduZ4EjppwYtSlWzL8PQ8OEUqSG2xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bd:14:63:f7:9a:c8:75:db:19:c5:f2:e9:ac:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=a18c6aa86a23b0e836287d06219fe0d2e829b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:8b:21:d6:a6:88:d7:bd:95:cc:16:4f:ee:
bc:26:fa:87:0f:05:d3:24:38:b3:50:fb:50:8a:2f:
9c:e4:3e:cc:74:0d:4c:9e:48:17:3b:5b:06:53:b6:
31:14:5e:19:07:6c:38:2b:5c:94:ec:b3:eb:7d:ca:
80:cf:50:f9:45:61:c3:03:27:ea:c0:6f:4c:00:a6:
99:dd:07:a3:f3:50:d6:d3:a6:e9:e2:2a:cf:42:d3:
47:14:fe:53:c9:3f:b8:c7:ec:d0:c4:1e:fa:b1:1b:
7f:51:13:e2:8d:cb:4c:11:cf:44:4b:92:94:09:20:
66:34:69:e5:a5:5c:01:79:06:20:d3:31:d3:16:d3:
e1:8d:5d:23:27:1e:7e:a6:95:0e:d8:3f:8b:c0:99:
7f:45:be:fb:ee:9d:6d:5e:ad:89:35:e5:94:bd:bd:
9f:5f:e4:d3:05:75:f3:9f:a5:8b:9c:24:3e:b6:f4:
8e:e4:80:93:bd:ac:ec:ee:aa:c4:f9:6e:98:45:c4:
97:63:70:0f:0a:c2:d2:c5:96:66:88:4b:07:76:5c:
27:ee:ba:10:6d:5b:da:cd:75:45:0f:ce:6b:49:e6:
e0:2d:1d:7d:e9:52:38:46:a7:52:f3:9f:72:b1:54:
4f:6b:f0:a6:aa:9f:76:1e:0e:25:38:3b:2a:bb:2c:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8C:6A:A8:6A:23:B0:E8:36:28:7D:06:21:9F:E0:D2:E8:29:B7:B7
X509v3 Authority Key Identifier:
keyid:74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8f:af:57:e6:d1:35:ca:78:7e:d7:b1:0a:92:ce:c8:f6:1b:
f3:0e:01:e1:f6:6f:28:0a:ee:df:79:e5:2f:b2:58:24:b3:24:
27:38:aa:cf:51:51:a1:c7:07:fa:79:89:b1:dd:bb:cb:29:7d:
57:6a:4a:bf:54:69:c8:4f:ec:f2:3d:95:40:66:f2:f9:c2:5e:
01:4f:e9:9d:e9:08:03:44:18:08:9b:4c:9c:b3:82:25:c7:8f:
bd:16:6d:12:71:32:91:ea:bf:84:7d:1d:7a:18:11:f4:c1:a7:
19:05:d4:3e:c1:25:5c:21:91:7a:24:f9:31:cc:f1:ea:5d:58:
0f:92:64:e6:33:51:ea:bf:5c:f1:a4:33:2f:82:36:80:51:20:
b8:b4:77:50:ff:7a:d1:f5:7b:81:34:1e:a7:a5:b2:52:e1:7e:
e4:31:d7:43:ae:5a:93:e5:d1:13:05:c5:e4:f2:d4:cb:b0:ca:
c5:47:be:01:c0:74:c2:0d:db:ce:6a:16:39:7c:5d:32:15:fe:
51:4a:e0:d7:31:7f:e9:10:10:cd:84:48:d8:f2:50:d6:2f:97:
50:56:1f:bf:89:37:fb:fd:ba:d0:4a:f8:29:22:31:0b:95:72:
20:a0:26:03:a3:18:63:c2:09:42:5e:94:47:9e:fd:52:ba:cf:
25:d5:2b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:49 2025 by rpki-client