Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: x1pLba9LEyJpXKg8JyayJSHt7gCAxZkqg43W5wogAXQ=
Subject key identifier: CF:6A:04:C8:81:9E:01:64:84:6C:C9:D3:94:8B:CF:EA:B4:5F:A4:61
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 0194BCE089CB925CA310D4173F165723311D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: ThUTD7WqGZh5LNdM9Up/nfSgs7unWvwN0b/bhrrfkdA=)
2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:cb:92:5c:a3:10:d4:17:3f:16:57:23:31:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=cf6a04c8819e0164846cc9d3948bcfeab45fa461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:76:8d:39:c6:33:c3:8e:7f:93:12:0c:22:
1b:94:e9:d5:37:3b:50:81:60:29:58:e9:95:d6:dd:
28:4f:14:78:5b:c5:f9:e2:ad:95:9c:88:0b:0a:ee:
76:da:3b:ec:09:7e:09:66:ef:9a:9e:18:7d:fe:60:
8f:8b:b4:24:8d:35:0a:0b:22:03:f6:bf:c4:aa:af:
82:97:38:b4:cb:e3:2e:d7:ff:b5:e2:02:70:32:10:
95:a1:76:46:ee:21:0f:39:2e:fb:14:cb:41:27:77:
fd:2c:28:98:c4:d4:6a:76:5a:81:dd:e4:09:31:29:
b6:78:e8:86:b6:54:07:12:ef:bc:90:e3:2b:30:43:
2b:32:aa:b1:90:18:03:fa:f7:94:b2:a8:75:20:50:
79:bd:2f:42:9c:6a:17:97:ca:46:3e:ff:8f:4a:63:
cd:10:b6:20:d8:52:51:fc:80:74:49:23:17:5a:4e:
d9:c8:dc:aa:83:c1:79:93:84:17:6b:84:f9:db:e6:
23:57:5c:49:00:9a:4c:6f:a4:de:84:be:75:99:a0:
31:43:7b:7e:61:d4:8f:0f:20:b1:21:b0:db:bb:ab:
7b:cb:c4:49:7a:b6:07:90:fc:09:7f:b6:6f:18:14:
8d:64:27:de:3d:51:68:d1:b1:8c:c1:db:2e:d7:69:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6A:04:C8:81:9E:01:64:84:6C:C9:D3:94:8B:CF:EA:B4:5F:A4:61
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:93:55:31:b7:85:d3:a5:dd:b9:cd:33:61:05:64:8e:ba:57:
6f:d9:04:38:3c:68:3c:2c:e0:0b:d8:8b:f2:93:6b:10:4f:f8:
21:80:e4:c5:71:e2:a0:a3:03:bc:b6:2e:4d:c5:20:de:27:89:
db:a3:d8:38:78:ad:70:5f:44:a7:37:cd:a4:4e:f0:76:c8:5e:
35:cb:8f:5c:98:d4:63:a9:84:da:ed:9b:09:d5:1c:0d:86:4c:
78:c8:92:19:38:a0:c3:e1:e4:09:4c:12:ab:20:56:fb:17:0e:
31:8c:8e:8d:09:18:f8:2b:7e:36:ac:c1:d7:03:62:4e:73:96:
8c:d6:40:96:f3:3e:f4:51:33:fc:d8:f8:80:99:38:58:72:69:
42:69:a3:56:b6:8d:7f:38:51:f1:e0:12:4c:30:2d:1e:fb:ae:
8e:15:e4:cc:14:f9:8c:61:c9:9a:d3:d8:98:74:ca:2c:b1:78:
f0:6d:67:a7:91:96:c4:87:f8:9a:12:1b:55:6d:b6:35:3b:c1:
9c:99:57:9b:93:1d:eb:1a:a2:61:9b:8f:b1:aa:b3:50:c6:e3:
e9:f7:d9:4a:db:f3:3d:01:66:e3:0c:da:c5:89:92:c6:84:8b:
55:e1:66:52:1f:90:9e:bc:90:65:40:e5:22:26:2c:b4:5d:f6:
31:99:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:36 2025 by rpki-client