Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
File: dy9wNcKJOyjNBP0amzys0kKMjf0.mft (raw, json)
Hash identifier: Mpp/F6sm0Uc7ah2/++vjP3qvREZzrtl90O3E+qYuB5o=
Subject key identifier: 97:DF:0B:FC:E0:2A:B7:C0:AB:0A:FE:35:96:1C:70:82:F9:EF:9D:43
Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
Certificate issuer: /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Certificate serial: 0194BBCEDE8FAE65643CF3655C257932A5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: Qb83VG82QGzWbpalRRMPH518SYo.roa (hash: AiyxH3+S5rR7yJjoD/YrQHR/3h9nA1hJpL55scIpUTs=)
2: dy9wNcKJOyjNBP0amzys0kKMjf0.crl (hash: +yECuCRexIxJTw/xN5AU6QR8vnzukbnsqCGeawoRUpE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:8f:ae:65:64:3c:f3:65:5c:25:79:32:a5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=97df0bfce02ab7c0ab0afe35961c7082f9ef9d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:d0:a6:aa:37:42:cc:34:15:cc:a7:20:eb:
49:90:df:67:77:70:4c:0a:32:be:1a:c4:c9:94:e0:
3c:77:d8:04:4b:86:13:97:9b:49:8f:3a:9e:1a:5e:
d6:22:03:b0:3a:76:eb:d2:63:b7:3b:f6:10:05:54:
f1:18:01:bc:8c:42:6e:3f:e2:f2:4e:17:0d:eb:94:
59:5b:6d:57:30:4e:65:09:2d:e9:8b:d2:e1:ac:10:
bb:51:60:a9:84:e0:8b:d7:b9:96:db:d4:58:91:93:
bd:d0:8e:9e:14:7b:76:ce:d9:3c:37:9b:f2:1b:34:
24:43:f8:16:33:3e:c3:50:c3:4c:cb:7d:98:d9:85:
b0:d9:4f:03:47:f1:7e:21:fb:a9:f9:35:b3:27:40:
3a:48:27:9b:ab:3e:af:d8:7d:b3:0e:b9:4d:be:1c:
3f:ce:bf:43:87:34:c6:a8:3a:41:05:b1:61:58:ab:
38:eb:b1:f3:5d:83:69:fb:e7:22:c4:5c:f5:26:47:
36:c9:43:4e:df:2e:20:72:e4:b5:a0:26:6b:c8:dc:
5c:03:3a:92:c9:14:3e:3a:2b:c5:6a:fa:6b:3d:ff:
b7:7b:fa:a4:2f:17:ad:ad:f8:af:b7:c0:18:11:e6:
b6:30:eb:f6:e8:63:cc:25:29:b1:e0:78:74:e5:14:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:0B:FC:E0:2A:B7:C0:AB:0A:FE:35:96:1C:70:82:F9:EF:9D:43
X509v3 Authority Key Identifier:
keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8f:3c:e8:88:ef:fd:15:6f:32:e5:8b:1e:39:2e:0a:3d:fd:
39:a6:91:09:96:a6:1f:c4:f1:fc:2d:51:29:29:4b:06:04:9b:
7e:ca:07:71:74:30:52:fd:b3:e2:d7:3b:89:bb:c2:2e:54:f5:
4f:9c:43:67:c3:72:98:05:eb:47:05:e9:8b:88:8f:8b:0e:e6:
71:ae:cd:2e:8c:81:07:c6:3f:2b:5c:8e:70:d1:bd:ed:58:03:
b8:63:18:4f:f0:3d:69:09:34:61:a7:48:bb:bf:c0:6d:47:4f:
74:1f:d3:e0:1d:cb:a0:f6:e0:19:ad:24:23:bd:5e:4b:07:60:
9f:46:1e:db:3a:2e:91:09:40:67:0c:36:ad:e2:c8:ec:99:5d:
6c:ae:f7:81:8f:da:50:76:f1:02:38:63:85:d0:3c:c8:ce:0a:
52:8c:8d:e0:99:79:c6:2e:b1:c1:5a:67:16:08:73:b8:13:98:
d4:b5:c7:1d:37:8e:e0:18:70:4e:fd:f4:4a:13:e9:8e:2f:60:
ee:c9:c4:fe:05:b8:27:7b:1c:66:ee:95:29:ff:74:fe:6c:ff:
2d:00:55:62:58:1a:69:49:55:27:2e:1a:ad:1b:38:be:7a:fd:
2e:cc:4f:2a:a8:ef:11:71:dc:c5:48:d9:5b:e1:75:c7:24:44:
45:f9:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:04 2025 by rpki-client