Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File: dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier: q2Sb1ZOEvJyNTVFbm7ZxFI9LwAkBw9DKTsWDGpVkw8Q=
Subject key identifier: 21:F3:AD:45:23:27:43:DA:25:FE:24:F9:AE:24:E6:F0:D1:28:99:B0
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial: 0194BD4E6F0C6079CE7544368DE6E784D250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number: 0786
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: WdGkSZl2fYwiw72nNAQKzTNBgN4K56H7wfO1EyIeK5I=)
2: jgYJrOBGpxmFCRX1q-MlycW-osQ.roa (hash: zjiQPJ4SZc/bB7c5P+iOwvUmdfPHzDJrUsMFIzmnB8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:0c:60:79:ce:75:44:36:8d:e6:e7:84:d2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=21f3ad45232743da25fe24f9ae24e6f0d12899b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:c7:66:75:9a:21:4b:6f:c1:30:93:35:04:
13:ac:d6:1c:a9:7c:b3:fe:cb:50:00:bb:77:fb:62:
9e:75:dd:96:fd:3d:f4:3b:34:15:7a:97:58:d6:2b:
6c:15:77:58:cc:8f:23:ee:8f:2a:c6:a7:47:e6:b1:
19:58:b6:b2:24:bb:0c:a3:58:8c:9f:30:66:d5:14:
f7:c9:86:d7:67:72:b3:8e:fd:03:f9:b3:7c:b5:46:
15:9f:55:ab:53:d1:bc:8f:12:e9:30:6a:ce:bf:84:
e7:e0:bf:8c:0d:27:fa:e2:b3:ad:93:56:e9:bb:97:
7b:8d:c5:a6:d6:7e:c1:1e:4f:79:d4:35:10:b4:52:
fb:4e:c8:20:44:c8:82:bc:b9:58:49:70:16:42:c5:
f4:de:4e:49:c5:42:ee:25:d8:51:58:d1:5f:48:95:
d6:73:67:9e:ad:b3:32:f1:ce:8f:6e:f3:3f:00:50:
22:4c:54:b7:15:95:46:49:fb:63:d2:23:a4:fb:69:
49:79:a6:ee:0a:5a:06:56:18:52:b2:c2:b2:e6:16:
ac:eb:77:54:ee:ae:b7:51:9d:43:7d:0b:84:8c:ef:
a8:98:f7:cc:ac:dc:ee:51:4c:80:b9:9d:3e:0b:91:
c0:a1:6c:2c:e9:2e:ee:cc:5a:77:8a:89:c3:2b:c2:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:AD:45:23:27:43:DA:25:FE:24:F9:AE:24:E6:F0:D1:28:99:B0
X509v3 Authority Key Identifier:
keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:92:3f:10:6f:c4:59:59:40:e1:ad:7b:92:bc:6a:97:bd:39:
da:36:cf:e6:67:5b:43:71:ef:1f:3e:4b:61:77:65:ff:d3:30:
28:7a:db:51:af:2c:ad:40:16:d0:a6:a3:6b:15:fb:60:6b:93:
83:0f:6a:74:42:5a:93:0f:0d:fd:6f:09:e1:6d:90:fd:66:cf:
e6:1b:f6:84:4f:77:91:a5:e6:ce:cd:6c:a0:7e:c2:b7:77:5f:
5b:ce:a5:2c:b5:55:65:e2:64:b1:c4:82:b6:30:3f:8d:7a:e5:
7a:95:21:3b:49:09:37:60:05:2f:40:5f:a1:51:a8:b1:09:57:
fc:ac:17:a2:36:2b:fe:b4:1f:0b:cc:c0:f3:5d:3b:3b:75:e0:
d9:cb:bf:37:5b:b7:8c:4e:73:ae:8e:54:07:76:62:91:0b:65:
f0:4a:19:4e:f4:92:0f:23:3a:c1:6b:69:28:39:dc:a9:5d:f5:
95:b0:f0:76:a3:44:80:6f:c9:7b:ed:d8:a1:84:cc:0f:b1:b4:
6f:44:98:69:51:10:df:57:bb:b6:99:56:53:5e:16:e2:d5:0f:
51:f0:55:15:e0:88:f6:0c:c4:8b:ed:90:2e:b3:60:8b:d9:8f:
27:e8:13:f5:c5:7e:11:9b:f7:cd:1a:a5:db:73:f8:9c:79:6d:
03:93:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:47 2025 by rpki-client