Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: S/09bH3WIsj9K+F4ei7sBo6SHi/tNQxyGlqFTDGTXHI=
Subject key identifier: BE:AC:F2:49:C1:15:40:39:78:F2:16:2D:5F:3F:C7:B5:C8:BC:23:55
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 0194BC3BE745AD0887E808E5E04B13597278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0720
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: cnSw6Lgk+ON/xKKf/5VcxUfwAcGA3V+xLfsw4165D2g=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e7:45:ad:08:87:e8:08:e5:e0:4b:13:59:72:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=beacf249c115403978f2162d5f3fc7b5c8bc2355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:e6:00:0e:b4:b9:3c:c0:a7:7e:9f:43:9b:
ac:8a:e1:c0:07:62:ab:5e:1a:db:31:13:ce:b5:a9:
ca:68:2d:d4:ac:b4:fe:34:f0:77:cf:a6:88:13:a1:
23:99:68:22:7f:54:03:a5:d8:ec:02:b7:91:72:e4:
ec:70:50:88:24:02:bb:31:9d:9d:5b:04:18:32:2f:
01:98:90:71:13:4e:08:98:96:6b:11:30:0c:db:5b:
84:16:89:fd:a4:a1:e7:0d:4f:1b:c3:f6:1d:61:17:
28:d8:07:e5:1a:e6:eb:46:0a:04:b5:cb:0a:1b:b2:
61:01:37:50:25:2d:fa:ff:d9:96:ba:27:67:5f:c1:
31:7b:0b:bc:81:5c:f5:93:36:ba:df:b5:ad:4b:75:
7f:7d:f3:a1:b0:57:0c:e8:e4:90:7b:e5:bd:b4:9d:
0e:eb:d2:61:33:a5:bb:0f:5c:ed:06:11:c5:73:35:
8b:84:83:d2:54:97:67:d3:e2:a3:eb:15:0c:53:6c:
d2:93:06:56:d0:ba:1c:e1:62:3b:3f:b6:71:6a:d9:
c2:12:65:b8:d9:4b:18:8d:22:ef:03:ab:6b:ac:b9:
92:8b:b4:ee:54:b3:c1:2e:30:73:64:dc:14:b9:99:
69:50:33:c6:d1:dc:85:a2:79:c6:48:1e:90:50:21:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AC:F2:49:C1:15:40:39:78:F2:16:2D:5F:3F:C7:B5:C8:BC:23:55
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7c:86:08:da:ca:14:40:30:f0:df:01:0d:66:55:ff:a7:99:
d3:3a:ec:f5:18:74:60:2a:d3:30:ed:a0:91:31:e2:c9:71:8e:
96:4e:84:f3:15:7c:36:24:09:fc:bd:ec:f6:79:fd:a8:61:db:
2c:26:00:ac:a4:8c:6c:07:7f:24:a5:e4:76:2d:04:19:2c:99:
fa:af:fc:8c:72:73:d9:24:7d:01:36:66:80:01:b2:fc:87:40:
67:47:12:2e:5e:cc:ef:cd:ad:eb:0f:52:9e:96:8b:7b:16:70:
b1:1f:e6:7c:20:0c:d7:d2:3a:e8:61:1e:ef:3c:c7:25:f4:76:
b2:b6:7b:cc:1b:89:0b:37:98:72:33:af:94:3c:a8:21:44:84:
80:fc:eb:48:4e:f9:b3:dc:12:af:94:a4:6a:9d:ad:c6:45:88:
d2:4a:e8:8a:4e:b9:95:d9:1f:ea:fa:44:ad:37:4d:dc:f2:f2:
95:58:65:6a:70:c7:78:da:81:ce:9e:54:b2:d5:87:14:40:ef:
5f:84:b7:57:bb:ab:77:fc:12:22:f0:d6:1b:39:80:2b:aa:5a:
ac:10:27:92:13:2a:61:5d:ca:4d:d5:80:77:f8:a6:fa:b7:aa:
a7:26:82:37:0d:0a:60:de:4e:3c:be:35:6a:22:ad:e3:3a:b6:
3d:26:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:37 2025 by rpki-client