Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File: dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier: KVTSX12IPGkRJWT5X2WhBVU74N3liCBdTDuK23x9QFA=
Subject key identifier: C3:E2:03:33:DE:13:8B:2E:F9:3F:1E:75:8B:B0:8B:68:94:F1:EE:78
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 0194BC3BEC1FB8F22E8210BD9702E766D76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 0oXrffU-rSHDpr6TX7IphO7-POk.roa (hash: WbRM1hyDPFlmbx1lM12Y7DHbqSzxb6BFvKIPhKhJrRs=)
2: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (hash: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=)
3: RL1wLq44Bf2ikyDTpOd16y5e10g.roa (hash: X39FqUvCzgp1Twm8EXglBTxwVJ18DwP2RWSMPjQDYfw=)
4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: Wndd4MwFltGBwuzEoQJiqGr/3+PthdGX/vdkslCBpVY=)
5: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (hash: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:1f:b8:f2:2e:82:10:bd:97:02:e7:66:d7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=c3e20333de138b2ef93f1e758bb08b6894f1ee78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:2a:e4:cc:88:79:3e:c6:b1:b1:a1:86:5e:
19:e1:81:f9:0e:9a:f3:4f:7c:18:5d:f1:98:0a:ad:
db:c0:76:e3:25:f6:e9:96:27:18:42:d4:4e:8f:6d:
47:d0:42:7f:a2:2f:84:25:6f:d4:c8:77:c6:8a:a2:
09:5d:da:8a:01:ee:20:6b:4d:17:07:d9:7d:07:16:
d1:99:23:bb:4d:53:2e:50:c0:21:48:7e:61:10:63:
17:a0:70:42:03:56:ea:8c:67:c5:e7:16:a4:c7:f3:
a9:c5:32:0b:b0:22:28:a3:9c:58:1f:71:3e:be:a3:
18:6e:ec:0f:a4:0e:6d:bc:12:82:1c:3c:4f:a1:c1:
20:d6:d7:df:fc:93:86:f5:84:0d:f3:8f:62:3c:81:
c5:ee:ad:c4:3c:e0:77:56:e9:5c:87:06:8f:11:36:
e3:79:43:b9:df:24:cb:6d:e4:ac:ef:0f:dd:7a:b9:
3b:e5:8f:e9:2b:92:9c:50:81:82:d2:f8:c5:1f:09:
f6:3d:06:34:1b:23:ac:d2:73:3b:ac:77:56:8c:6a:
b4:c0:75:b9:2a:b2:9b:e4:05:77:23:c6:05:af:4c:
37:15:57:3e:05:15:19:a3:50:25:54:a8:f7:8e:71:
42:10:5e:c5:d2:23:53:45:4c:88:ea:71:5b:69:3b:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:03:33:DE:13:8B:2E:F9:3F:1E:75:8B:B0:8B:68:94:F1:EE:78
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:58:f2:e5:bd:2d:e9:fb:bf:e7:de:fe:16:0a:4e:51:49:18:
fe:ad:a6:d6:dc:b5:ae:96:31:2a:0b:d9:16:cb:44:93:e2:ce:
99:bc:ba:86:ba:9e:29:a5:90:31:13:72:94:68:bb:fa:b8:6f:
a9:7e:7a:c2:44:2f:db:e9:c5:03:83:3c:ca:57:97:db:4c:0b:
b7:eb:85:2d:4d:0b:2a:d0:38:90:89:bc:f1:06:3c:b5:10:40:
b0:62:83:f6:f1:06:52:df:a1:87:19:47:8e:b5:86:ff:ad:b5:
d2:03:9c:89:6b:09:4b:42:4a:24:1e:ea:36:f5:0a:06:e0:0f:
89:25:14:48:10:71:d4:37:a6:99:1d:28:4d:84:96:ec:8f:33:
15:c5:df:8a:17:de:6e:36:85:65:df:d3:74:52:07:04:e0:3e:
18:18:58:52:e3:7a:cf:6b:73:40:8a:95:8d:85:e5:e8:f7:63:
be:ea:36:38:c6:93:53:f2:2a:a1:d7:94:ab:02:d2:92:fb:81:
e9:9c:46:50:ea:60:4c:f0:cd:4b:5c:d1:05:f1:cd:ac:fd:0f:
02:65:d8:da:e1:3a:19:f4:eb:79:75:3f:2f:d3:cd:f8:ab:68:
5e:ae:bb:7e:5e:27:44:b7:09:d0:4b:23:6c:d9:ac:d6:89:90:
9e:36:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:04 2025 by rpki-client