Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: IUoUMTGk4sloSOVpL1ngLjSFBSKmiJbPgrMt4jaSMM0=
Subject key identifier: 93:F2:8E:04:BF:DE:35:F3:11:91:5D:02:4F:73:FE:B6:A2:55:40:D8
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 0194BBCEDA021D6156361A586C25B7DB5ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: lUsPJUUNHH3M1TX7gLEcMcZgFjbXIESf3wXFH1KuwoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:02:1d:61:56:36:1a:58:6c:25:b7:db:5a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=93f28e04bfde35f311915d024f73feb6a25540d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:59:4b:58:e6:d1:b4:13:5c:38:2a:41:f2:
a2:2e:d9:06:64:70:3f:de:73:84:a3:27:87:2b:41:
e9:e0:1e:52:ba:29:3b:6b:e7:95:1e:7d:34:45:f6:
ef:ae:d0:2d:f4:7d:98:ba:40:ac:1b:76:e9:c9:48:
43:01:39:4b:ec:3d:a3:33:eb:d5:af:33:ce:1d:bb:
4f:a5:6f:45:a3:c8:8b:a3:05:81:67:9e:85:3c:14:
3e:3d:d1:33:47:d8:5f:c2:2f:b6:0b:31:3b:12:63:
60:03:03:ea:db:4d:aa:8e:1d:df:ce:a8:4c:12:24:
8d:b0:dd:34:c1:9b:6e:90:ba:b2:d8:16:22:c0:70:
6c:b0:2e:d0:07:18:e6:a2:02:45:fd:3a:58:d2:96:
70:dd:d1:46:4a:a4:b1:a1:bb:76:a7:bb:a5:7a:5c:
17:2b:e7:88:9c:5f:29:8f:68:5c:ba:dd:5e:bc:83:
50:42:bd:95:c7:61:16:8c:3c:57:ee:78:58:79:ae:
0d:e4:b4:e3:0a:bc:dc:e7:98:5c:37:33:30:85:78:
f0:a3:2d:97:50:ea:5e:b3:18:fb:c8:2c:2a:41:d6:
62:2f:22:44:d6:89:e4:74:1f:b3:93:80:16:f4:c2:
c6:62:e6:3c:57:79:34:12:0a:70:d9:04:c0:d6:97:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:8E:04:BF:DE:35:F3:11:91:5D:02:4F:73:FE:B6:A2:55:40:D8
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1b:58:59:f2:50:52:22:95:e2:8b:f2:a1:a3:da:6a:37:ad:
df:f8:a2:ed:63:22:a9:3e:89:88:99:03:42:fb:1c:17:28:34:
a3:32:19:85:55:06:9b:4b:97:0c:74:69:ea:eb:72:88:91:b5:
92:9f:58:a8:93:ba:3f:a9:39:99:20:e1:45:c3:28:55:d0:36:
39:7f:c6:ab:dd:db:e5:cb:ff:c3:1a:84:9d:ac:34:f3:6b:65:
6a:fd:23:57:47:c8:79:6e:6c:e2:94:5e:23:9b:0d:64:55:f3:
68:a1:57:39:2e:27:1f:51:c0:31:32:e1:1e:82:37:82:b8:6f:
c6:f6:83:7e:e9:75:42:c4:d5:2f:c8:60:d8:14:c9:39:a9:31:
bf:c4:6d:fa:06:91:2a:95:dc:67:09:84:95:83:d7:cc:9f:bd:
54:52:db:78:db:31:0c:36:42:00:ac:e9:6b:3d:1a:67:96:60:
93:ca:ce:13:98:75:3a:b4:5b:4d:34:3c:4b:b6:77:26:40:ae:
2f:5d:f4:1b:bd:74:ec:52:f3:eb:df:f1:b7:ab:c1:54:d1:bb:
96:43:cb:4b:78:3a:28:70:18:08:93:75:90:5f:be:4f:f7:b3:
c9:c3:47:24:74:f2:d8:7a:95:5f:d6:c1:fa:4f:cb:65:8c:47:
71:af:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:53 2025 by rpki-client