Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: boJ6kDXBy37CyFNPw6RYilggh1fKYPtduPfX5emhkE0=
Subject key identifier: 90:E1:10:91:83:57:D2:AC:DB:E4:81:40:83:02:A5:09:EE:B2:D7:7E
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 0194BD175C8A41ABD315A9F736EA36A38AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0BC8
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: AeyK3UnPo7Ez7bzgnWXSkqQ3uiGPKgKxR1k5K0xrTAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5c:8a:41:ab:d3:15:a9:f7:36:ea:36:a3:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=90e110918357d2acdbe481408302a509eeb2d77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:86:e9:b9:d8:85:32:6c:22:dc:5f:0a:34:
b0:bb:9a:a7:4d:1f:18:22:b3:be:53:a8:40:21:22:
34:1f:1c:ef:db:d5:b4:08:cb:ad:1f:5c:6b:27:d8:
f3:6e:ec:8b:9f:64:21:3a:1e:6f:e1:b6:bd:8b:35:
c2:ab:60:8f:58:bc:75:82:23:a8:6a:05:32:9b:4b:
51:9b:6a:e1:19:80:50:a7:d9:99:c7:07:f5:a9:c4:
7a:3a:56:09:14:fc:77:1f:c3:2e:3c:5b:02:3b:e9:
3c:92:d2:0d:4e:c9:b2:15:ab:89:90:dd:b6:9f:e0:
0a:bf:c1:5e:82:d7:75:2b:f7:67:a3:05:58:17:42:
89:62:a1:ca:56:5b:9c:a3:8f:45:dd:48:43:27:67:
2e:30:e4:d8:5a:a8:fc:57:64:52:fe:a7:08:18:41:
4d:ff:95:fa:05:48:d7:91:3f:0f:ed:cc:4a:46:0d:
f7:6a:b5:ad:1f:af:d2:3d:a9:fe:dd:8a:76:a9:6e:
be:e1:43:72:7a:6e:bb:84:70:2f:c3:f8:d0:d5:e3:
68:2b:b3:47:14:0b:70:15:c8:41:a5:b3:e8:b6:46:
db:56:67:c2:c2:73:34:9e:9a:c5:9e:91:d3:04:55:
a5:3e:3c:0d:4c:70:52:cd:a5:32:5d:0c:c6:c9:1f:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:10:91:83:57:D2:AC:DB:E4:81:40:83:02:A5:09:EE:B2:D7:7E
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5f:af:61:c3:8b:fd:b2:c4:34:69:8b:7e:1a:26:cd:bf:b5:
7d:17:ef:b8:b4:72:67:6e:df:39:8e:ae:cb:22:a4:99:e6:54:
7e:9e:66:76:b2:f3:78:da:19:84:d0:c5:c1:a7:63:45:73:7c:
0e:89:0d:ae:b9:fd:18:67:dc:23:e3:c3:2b:d8:8b:db:53:82:
7d:7f:50:7c:7b:89:8b:18:3d:ac:1a:2e:0b:0b:89:97:96:a1:
2a:a5:62:1f:c0:0b:39:ba:bf:57:61:b2:5e:f2:a1:59:92:4e:
b7:74:2a:ab:fb:02:64:c6:75:f8:01:68:7c:ac:8b:06:0c:a4:
cb:30:a3:70:80:29:36:72:0f:85:87:c9:06:c0:03:f6:87:fe:
ec:2f:91:af:de:ef:45:76:43:73:98:61:0b:b8:3a:9c:2d:cc:
12:f1:81:bd:cc:f9:ee:50:b3:2d:b4:d9:03:73:1c:ca:ed:26:
b9:23:cb:35:b9:16:9e:a2:71:4b:d7:e0:b9:5a:bd:f9:7f:70:
7f:18:d8:62:46:38:fb:77:93:89:ba:ea:f0:a2:e9:ae:bc:14:
55:16:92:5e:a9:d0:77:e6:56:12:5d:cc:c2:11:b8:2d:9a:0f:
f8:89:17:38:66:7a:b8:1e:e4:eb:4a:08:a7:eb:dd:2b:d5:d9:
11:7c:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:29 2025 by rpki-client