Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: 15xibPB53QzUMr8iV9e2OGgYQUASlJ2hsv19l2VaoOM=
Subject key identifier: C3:6E:D0:58:86:D0:26:39:C0:6D:9F:AC:8C:03:8D:F5:57:3F:36:73
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 0194BBCE79F01918CDC5A1C61D46EB725B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 13F8
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: /0eanXf1VjFeZRyjA1gfjsIxTwuA5SAtZd+3MpKT2GA=)
2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:f0:19:18:cd:c5:a1:c6:1d:46:eb:72:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=c36ed05886d02639c06d9fac8c038df5573f3673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:db:51:8e:63:c3:ed:33:f6:5a:7e:28:4c:
de:55:06:62:ac:b8:e3:f2:95:4a:85:82:86:82:95:
39:5d:43:90:9d:d4:5f:13:0f:01:69:69:17:c2:70:
32:7b:91:9f:85:64:7f:e8:61:98:53:ca:c6:1b:0d:
10:d9:b9:8e:19:44:5a:ac:f2:3a:d4:38:fb:98:d7:
be:e7:88:17:03:a0:a1:4c:e7:33:af:88:ff:56:aa:
35:ba:dc:d7:b0:64:e8:ae:13:9f:4a:99:70:59:ea:
1d:cd:a3:b5:fa:8b:b1:24:0e:fe:28:04:50:dd:17:
01:14:f7:9f:3f:0a:24:6c:f4:d3:e8:b7:d8:74:c0:
a8:c2:d4:1c:42:e0:e4:4e:4c:17:0c:76:fa:f3:64:
c2:ac:97:e6:ab:2a:49:50:8e:e1:b3:34:0d:ff:0c:
93:32:dc:bc:90:83:bb:af:5d:3b:06:44:a0:25:cc:
da:27:af:ee:36:3f:a2:7e:c7:f4:67:86:ed:54:a6:
d4:51:ca:00:b9:66:41:39:81:ff:1b:c8:83:e1:ef:
4d:b4:84:71:e3:39:b7:cb:2e:af:ed:3b:86:2e:34:
6f:f2:e4:7d:86:2d:39:b2:f6:69:5b:39:40:ae:f7:
bd:f9:8c:3a:33:47:45:a6:87:50:c2:45:5c:49:ed:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6E:D0:58:86:D0:26:39:C0:6D:9F:AC:8C:03:8D:F5:57:3F:36:73
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:87:eb:48:53:3d:1d:ed:80:4b:7f:6e:0d:eb:29:7f:e4:
e0:bf:3c:a8:db:b0:1f:31:5c:ee:a2:d2:84:ae:98:19:5a:a3:
71:a9:b0:49:23:bd:d0:ce:9d:c4:8e:90:b4:9f:d4:d5:89:4f:
5f:fe:77:2c:8d:fc:eb:79:1e:46:8e:ca:70:ed:a3:d1:4d:68:
3c:99:34:5f:11:82:d6:64:4a:eb:a9:a2:2d:f4:61:b5:3a:fa:
58:61:9a:30:75:26:9f:13:f9:51:e3:e4:17:b5:ef:85:4a:66:
f2:de:69:49:c1:16:24:eb:d7:86:f7:5f:0b:dd:76:5e:5c:ff:
de:11:9a:e9:3b:2b:d5:8c:7f:a9:86:d7:77:a2:3f:3b:d2:3f:
cc:14:65:86:fa:6f:c3:2d:bc:3c:78:91:32:f0:0c:85:a4:0a:
1e:51:ba:f9:ef:99:62:2c:58:bd:8c:b9:2e:3a:3b:cf:53:d2:
82:2a:e2:ec:e8:a3:79:58:c2:62:d8:f4:99:bf:32:9b:de:ef:
e0:ad:6c:5e:e7:7c:c7:ed:9d:b3:b8:68:b2:46:ba:c4:70:15:
9c:9b:3d:a4:49:dd:f0:86:26:c0:59:31:39:e5:66:d0:72:24:
b3:60:da:22:34:54:e1:e6:f6:55:79:c4:74:a5:32:b5:25:28:
cf:d4:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:04 2025 by rpki-client