Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: Rq+QUYTa1ddeB/aGtB4RjMdkQycAFJB9elnDjAw+aow=
Subject key identifier: 8A:F2:DA:8A:53:87:11:0F:94:06:9D:7C:32:92:4C:34:3F:DF:70:C0
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 0194BBCE9E596D9DD160CBA3D39ABA9B2317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 067F
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=)
2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: 8SsjNX0V4rBAQFo+mOb20Z16yDFibif4I96Z7lZXWiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9e:59:6d:9d:d1:60:cb:a3:d3:9a:ba:9b:23:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=8af2da8a5387110f94069d7c32924c343fdf70c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:69:4e:e2:8b:80:d4:7c:6a:23:08:25:4e:
92:55:b3:96:17:6e:1e:2f:66:a8:3c:38:f9:9c:a9:
74:ab:e1:68:98:2f:43:dc:f4:1a:d3:92:e2:d3:44:
35:1f:bf:4f:88:e2:cd:c9:bd:ef:70:5b:15:58:da:
7b:37:5f:2f:6d:d2:09:2d:8d:c2:c1:d8:16:89:31:
33:3d:c4:1d:0e:90:26:e7:9a:d9:f7:d2:ba:2f:56:
b4:f7:a7:b3:d8:15:cc:1b:55:6b:c1:38:79:f9:a3:
32:43:28:9d:c0:d4:f6:dc:71:c2:f8:29:b1:2f:d4:
53:ff:48:44:b1:c0:a9:13:31:6a:89:41:41:66:16:
ab:60:b8:0c:f6:ab:6b:c7:ce:da:bf:8e:9f:fd:72:
6e:25:6b:3a:8e:92:9e:27:03:58:19:24:92:4b:c3:
26:d2:59:1a:69:0a:13:b1:a3:12:d8:27:74:3e:e8:
1a:f4:01:5a:6b:24:12:0e:59:34:36:82:8a:32:7f:
a2:25:85:81:bb:27:8b:8b:26:06:89:d0:3a:20:59:
69:65:ae:65:e4:cc:20:8f:76:f3:60:b0:58:1c:42:
09:53:c3:76:a0:a3:40:8e:83:70:d8:4c:40:30:48:
82:f2:af:0e:e0:a7:96:87:98:c3:8d:38:db:e1:de:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:DA:8A:53:87:11:0F:94:06:9D:7C:32:92:4C:34:3F:DF:70:C0
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:b6:5f:e3:3d:8c:3a:cd:da:6b:8f:99:20:28:da:4d:d6:86:
3f:3e:ab:1f:09:2e:1e:17:65:b8:ea:af:da:bf:50:ee:07:0d:
63:7d:2f:c8:f9:38:77:40:80:ce:d7:ed:fe:f8:90:7c:c6:78:
10:58:93:51:44:dc:97:9d:ab:68:72:c5:f2:8e:36:3c:12:c4:
f7:21:d4:09:aa:bc:c2:21:7d:b2:b7:b3:e5:34:b2:84:ae:60:
08:94:72:b3:90:01:49:bc:3f:89:1e:4c:3d:e0:d1:cd:70:4f:
d4:df:fa:dc:34:09:e3:97:1e:bf:30:80:5d:40:5d:42:8d:03:
7e:89:bb:bb:70:b2:9a:22:8d:3d:89:8b:9e:c5:74:da:01:1e:
b3:53:f5:1a:27:26:04:3b:97:b3:5c:27:95:b9:57:8a:70:2b:
92:94:33:44:69:1c:fc:88:16:09:5d:d3:a3:81:c7:52:5f:00:
a5:36:7c:c4:6e:43:ed:81:dc:1d:9d:28:a4:ad:94:90:4d:c1:
32:4a:7f:4b:cb:b9:76:0b:71:57:ef:c3:c3:c5:7f:b3:6b:d0:
d6:52:01:a2:31:1f:08:12:47:a8:ee:a9:df:b6:1d:75:65:3a:
a2:30:21:8e:32:7d:6e:63:a4:9c:2f:47:07:ba:16:ee:7e:4a:
f8:e8:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:09 2025 by rpki-client