Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: fgGhhA21hdCXBs2U7KUjUlk3iy92b3JcP+dh941OLts=
Subject key identifier: 67:6D:5A:B4:37:F0:95:0D:A7:D9:41:19:01:CD:51:F1:0C:15:DE:45
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 0194BD4E5CD58CFC0C666EE5A16905750C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 10DD
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: NjNSSfxJcMdokDqXIhX4uY4tB+x3XdtpP2m2PNJ31wM=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:d5:8c:fc:0c:66:6e:e5:a1:69:05:75:0c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=676d5ab437f0950da7d9411901cd51f10c15de45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:72:78:fc:c6:15:57:32:ca:71:c0:a7:39:
04:71:6d:34:36:86:e7:e5:d3:68:46:c4:ee:2f:57:
f1:35:21:ec:cc:c5:dd:68:5b:8c:fb:e5:30:b8:fa:
be:dd:da:4e:44:59:e4:6a:c8:7f:7e:1b:fb:77:79:
49:a2:05:7f:d6:2c:05:96:00:fa:ad:d6:55:48:41:
7c:71:48:f4:35:71:89:6a:72:38:2a:58:da:45:37:
d8:18:d6:e5:26:16:85:23:39:d5:72:66:2a:65:0a:
93:55:85:82:b1:77:3a:68:3d:7d:f8:60:b1:ba:f4:
5b:8a:5a:b9:29:96:7f:31:34:da:17:7e:da:04:c4:
1b:d7:59:b0:91:8a:b6:64:c6:ad:bc:8e:a7:82:b1:
ff:ac:b2:62:b5:58:9c:9e:60:f3:18:f8:d4:23:8c:
18:df:a0:1b:d9:3e:5d:b0:e2:3c:10:03:c6:1f:5e:
9d:14:8b:7d:73:be:a3:5e:95:5f:37:1c:33:f3:49:
96:fd:82:fa:ef:38:5e:97:0e:b2:01:d0:95:c6:44:
63:4f:be:9c:43:f4:20:be:13:37:37:66:16:db:5c:
fe:e9:a4:41:a3:a6:1d:46:3b:ec:2b:56:e8:1e:4b:
b4:6e:13:96:65:75:e4:fe:cb:57:49:69:2e:b5:0e:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:5A:B4:37:F0:95:0D:A7:D9:41:19:01:CD:51:F1:0C:15:DE:45
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:57:85:fd:20:e0:f4:62:50:b0:14:71:af:f3:53:e4:1e:
f8:5d:7b:6e:49:ff:1e:3c:be:ce:79:d5:66:9b:74:a2:97:ab:
f4:08:d5:82:46:8c:f0:58:e9:4e:e9:85:d1:b1:53:ee:07:64:
0c:93:95:97:88:09:65:b8:9e:80:3e:a9:0e:62:ae:0f:f4:90:
05:4f:bc:a2:b1:dc:27:89:9a:c8:3e:f0:00:dc:26:95:6e:bf:
72:00:46:97:8c:bc:e8:ba:0e:be:67:ef:86:7c:fa:ec:6c:8a:
6a:6a:44:1a:18:25:a3:0b:c5:01:d1:5c:2a:74:b0:1b:8b:68:
30:76:19:62:1d:b6:8f:6b:2e:2f:d0:c1:98:54:2d:28:b6:dc:
88:4c:c4:c9:77:7e:51:77:1b:b8:8c:5b:01:5c:23:b8:53:3e:
1b:2b:21:b9:49:4c:e9:8e:4c:10:e6:c0:8f:a4:76:12:38:65:
7a:5b:f7:03:c4:4b:d6:06:8b:e4:b6:87:fa:f7:24:5e:da:90:
2a:8a:5c:78:35:d6:ee:a8:88:fb:82:98:a7:ce:df:83:da:18:
5a:17:a3:f4:08:5b:2f:1a:83:6e:cb:9d:33:76:e4:8a:6c:ad:
90:16:a5:0c:05:c0:1e:db:81:92:83:66:92:39:3b:9a:5f:04:
33:5c:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:48 2025 by rpki-client