Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: nMvFqatkwYRJRX8MQw8ADbk45qvYIe7N+sEPR34V7Wc=
Subject key identifier: 1D:05:2D:5F:09:34:1D:B9:EF:00:0B:B7:F7:47:6C:94:B4:82:70:3B
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 0194BCE0A3D3FD82D72DB1A5160344970CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0486
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 23TVA-2OL8ERCOX_dzgjoyDr7ic.roa (hash: HMZHd+55+IMt+Dclhou8M1RYJTwGL8XVXHQpPA4hFCU=)
2: 4-TbcXFa8SESUNpbTLtHqKnqP4k.roa (hash: rfh4ZMQFADgVlOUe/tULyDtfhvBafCEIjiEbbsuqihs=)
3: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
4: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: NPewMxLMbgBD6rk/xxJLT0Ad0XX6JgYYRy7AZNz0gxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:d3:fd:82:d7:2d:b1:a5:16:03:44:97:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=1d052d5f09341db9ef000bb7f7476c94b482703b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:18:7b:77:17:52:ec:d1:5f:5f:f9:14:0b:
7c:dc:f5:b5:9c:b9:54:1d:22:13:eb:98:6d:21:ec:
fb:69:29:4e:44:f6:66:da:0d:fc:1f:4a:65:07:e0:
fc:ad:f5:f3:a2:14:61:0e:77:99:7e:78:e3:c9:1e:
37:17:d5:71:8a:3b:63:8f:a2:cd:ce:e2:6d:ca:aa:
01:68:2c:8e:14:46:9c:26:87:9e:45:d5:bb:a6:4b:
3f:7b:87:91:f2:af:5f:76:b2:55:34:b5:c0:7a:7f:
94:99:ce:3c:84:75:de:d1:ae:ef:f2:72:ab:a8:26:
0f:c5:c7:09:79:bd:f1:10:c0:47:f8:be:08:a1:99:
f9:43:09:d4:78:19:c2:7c:0e:6e:63:fb:d0:14:da:
67:f9:9f:9d:fe:44:c6:89:8e:2d:38:1d:46:1d:b8:
c2:45:9f:27:34:7a:e7:d7:bf:ed:fe:a4:54:0e:4f:
fb:dd:d5:1f:75:f5:5a:cf:c6:20:61:a1:43:5d:88:
81:64:ed:4f:75:3e:c2:a4:1e:0d:8f:ea:34:44:03:
e0:80:4c:ad:8d:58:f5:84:19:4c:95:1f:e9:3e:6a:
1d:18:13:c6:f3:cd:74:5c:45:3d:a4:ec:bf:91:f0:
0e:f2:e8:5e:fa:9f:da:5a:5b:b6:9c:56:13:d8:89:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:05:2D:5F:09:34:1D:B9:EF:00:0B:B7:F7:47:6C:94:B4:82:70:3B
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b2:d1:94:a1:ef:0f:1d:da:07:a7:e2:65:16:d5:32:bf:22:
2a:3c:6c:50:42:f1:3a:da:a4:30:d5:dc:b6:91:78:6d:f9:a7:
b0:ed:ba:87:a2:d0:24:71:35:6d:a1:f2:30:ae:78:8e:01:40:
22:5b:fc:fd:c4:62:f1:49:42:f8:6d:de:3b:c3:c1:10:9f:15:
1b:10:83:65:46:b3:e8:70:84:10:f9:d8:24:ef:df:24:36:cb:
4a:28:f0:2c:3b:9f:1f:70:74:cc:47:4c:05:9d:98:2d:8a:ca:
04:fb:5e:9a:3a:ce:c0:ed:dc:82:15:9e:d6:1d:ee:0f:ae:cb:
4a:59:ca:08:19:7d:26:0b:c8:a4:3e:eb:64:cd:0a:5f:34:7d:
ef:67:03:1b:ce:04:46:f5:6d:bb:19:99:80:30:5c:52:25:0a:
d3:8a:7b:87:f0:99:61:09:8d:54:45:50:dd:68:54:c0:2b:c2:
f2:e4:d5:2a:72:1e:b1:b6:d2:e6:98:01:7d:fe:d1:bb:b4:5a:
a7:af:07:e5:e5:13:38:b5:e1:de:84:96:fd:1d:e9:cf:ed:8f:
b8:75:bc:0f:ad:bc:b1:1e:07:47:e2:1f:b6:be:c7:e2:23:f6:
23:e9:4d:30:94:ed:4a:4a:1b:a7:1b:a9:d6:c5:34:32:59:f4:
e9:05:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:17 2025 by rpki-client