Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier: hsoCOAsZvKBhNGdHRXcHw1Wl/KztB7s2rR+3ebevgQ0=
Subject key identifier: 74:56:C9:CE:29:6B:68:1E:C2:AF:37:D7:80:16:DA:A2:09:2C:5D:BC
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 0194BBCE7CB7BE049AE37342CD0A1B00DCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: gxFl+BTV70eU3MOnvSkWgWm3ME2A0CeboqLGPz39/CM=)
2: r2xenfWR41SW-pcJkK2n6k9oW9c.roa (hash: 9h5yss6Wot3H0ZXysamwxUCIRFlANswYmfwPee5G6HI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7c:b7:be:04:9a:e3:73:42:cd:0a:1b:00:dc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=7456c9ce296b681ec2af37d78016daa2092c5dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:b2:7b:46:79:c8:27:a6:fb:09:6b:a0:37:
e1:0e:16:6f:4d:0c:5d:b6:79:85:a7:52:8c:95:94:
fc:55:d7:aa:40:ae:1b:06:76:ca:3e:9a:dc:40:5e:
e2:e1:4b:b6:d9:66:07:10:52:67:5b:b8:ab:10:32:
58:78:0e:60:c0:c1:bb:ca:d7:4e:c6:19:c6:3d:13:
e8:f2:cf:0b:68:33:7a:12:36:a6:8d:70:d3:eb:ee:
a5:6d:90:e2:ae:60:3a:eb:cc:5b:04:5b:2e:08:ee:
68:24:c5:3b:c0:75:36:b9:d2:ff:87:45:aa:77:83:
2b:b6:03:53:47:b9:7a:76:20:ea:5f:81:83:20:d9:
c4:a2:c9:96:74:3c:1e:60:94:e4:d8:d3:21:ff:73:
17:6c:7a:e5:94:f0:2d:48:04:62:ef:7d:4a:b3:61:
f8:9c:e2:31:f7:99:2c:3b:a8:ed:bf:c3:69:76:91:
e5:e6:a2:75:cc:f9:fa:66:d9:d0:13:a7:34:ca:8a:
55:f0:9a:66:97:fc:9a:6d:ae:a1:17:c9:07:2b:d0:
95:17:77:13:8e:7f:89:71:95:3f:5f:6b:3d:91:ec:
aa:6d:5c:8f:0d:a5:56:9e:c5:9c:10:aa:2a:9a:8c:
28:01:fd:c9:44:c3:9b:0b:3d:12:6a:96:0b:18:43:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:C9:CE:29:6B:68:1E:C2:AF:37:D7:80:16:DA:A2:09:2C:5D:BC
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d0:65:8a:52:6b:1d:b2:66:fd:36:79:43:05:fd:5a:0d:c3:
23:8c:4f:0a:f1:f1:0c:46:7d:eb:e8:95:d3:e6:58:b3:5b:ce:
dd:89:a7:ff:9b:86:8e:de:61:08:90:3e:ab:93:ff:08:84:69:
56:61:97:28:ba:dc:f4:17:fb:c2:a8:8f:28:4d:8c:66:8e:8b:
e3:37:88:6f:01:e4:36:46:fc:3a:fc:de:18:24:d1:f9:c5:93:
f2:c2:cb:f8:f4:19:38:57:1c:3f:81:44:33:a3:db:ef:b6:f9:
b2:f9:6a:cd:aa:46:20:f8:91:46:4f:71:4f:b4:fe:e4:71:f2:
2d:d2:89:71:e3:38:01:84:79:cf:27:37:3f:46:d7:99:cf:30:
2f:11:da:d4:0e:c6:44:66:a4:0a:35:b7:57:8b:23:58:97:5a:
41:93:a9:66:fc:ab:61:b8:fb:4d:f9:aa:ca:22:77:4e:56:48:
e6:83:9d:a2:a3:58:71:92:1b:c0:fc:1b:30:2e:75:ac:49:a7:
71:04:8e:59:46:29:03:68:2f:c2:5d:7e:95:44:2c:1a:6a:31:
19:23:85:5f:6f:43:a3:e9:66:cf:c4:fc:77:a9:5c:bc:dc:9d:
23:3f:15:a3:ab:f3:61:23:2e:a0:59:45:5e:0c:d5:94:6a:d5:
34:67:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:10 2025 by rpki-client