Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: nSwJuezCRmzjTuG1LCnLBAhEJYvnjmO9tJh6D1PcdzU=
Subject key identifier: 4E:FA:B3:7F:D4:AE:B3:06:95:73:03:F9:65:79:8F:83:9E:0B:6C:06
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 0194BCE0BC58F7FE0E8D131614BD11F30E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0976
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: Zg2Uh/aoBK++SnHatkeFkaMCnBaLbBaSwc7UBQGiZK4=)
2: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (hash: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bc:58:f7:fe:0e:8d:13:16:14:bd:11:f3:0e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=4efab37fd4aeb306957303f965798f839e0b6c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:cf:f3:5d:62:66:1b:37:a6:3f:4c:ec:70:
4b:97:a2:ca:01:31:85:e5:47:84:cd:a6:a6:d6:0b:
91:21:74:cb:e7:b2:d8:b3:32:d3:0d:0b:a2:67:25:
c9:5b:50:31:0e:21:b1:79:5c:51:11:81:7a:29:75:
45:1d:06:70:d0:b6:0d:04:5e:0b:37:a7:02:1d:e2:
70:c4:ef:a9:a8:ac:ee:bb:71:38:3d:08:5b:5c:c5:
6b:fb:17:64:5c:f1:08:7a:33:7d:71:12:38:51:d6:
b9:69:b8:a0:f3:50:c2:e5:14:fa:3c:ec:b1:5d:36:
90:b8:7b:6c:e6:18:5a:ca:d7:f7:19:1c:e0:87:b6:
0b:c2:ed:04:b8:1e:7a:5a:a1:cf:94:ac:83:6e:71:
96:71:8b:f6:b7:7e:36:cb:db:eb:69:ac:03:d0:04:
7d:10:11:39:00:91:5b:0a:35:90:d0:02:79:5f:9e:
08:d0:35:1e:fb:cd:5c:58:1b:b0:c1:f6:f3:9e:1f:
f6:63:ef:1c:92:f1:d2:ba:9c:69:5d:3c:97:36:54:
72:87:77:95:e5:b2:c1:60:57:81:f9:70:9b:2f:ed:
4b:5e:a5:ad:8b:1f:64:71:aa:be:4b:f1:8e:9c:38:
91:df:99:00:8f:1e:eb:84:eb:5d:f6:f8:2d:75:60:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FA:B3:7F:D4:AE:B3:06:95:73:03:F9:65:79:8F:83:9E:0B:6C:06
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b1:e5:36:09:a1:74:cb:38:35:d9:ae:5f:21:c9:09:eb:89:
97:29:6c:ca:1c:5c:d8:20:2c:ee:1e:65:a8:87:92:87:c8:83:
a8:4e:53:5c:2d:ef:b7:af:ae:57:dd:66:21:d1:db:d2:c0:e5:
53:80:10:e8:79:dc:f2:ff:9f:1e:ac:41:31:ab:69:04:ef:02:
30:07:2a:27:3c:c6:66:4e:82:fe:59:5b:26:e0:29:55:2c:cb:
a0:8a:9a:a5:46:8b:15:b2:c1:42:9d:d7:06:9f:e8:39:53:50:
0c:b9:16:29:2c:77:93:13:02:f0:d1:a1:fc:2e:9b:08:de:a8:
33:ed:39:94:01:9b:14:d7:fb:d1:d1:5d:f8:04:06:73:6a:21:
23:7d:45:2a:1a:8a:6e:a9:c4:70:24:c9:3a:6d:38:22:5e:4a:
20:ff:f8:c2:85:e6:a1:f7:8d:ad:79:bc:79:40:4b:47:86:8a:
8b:5b:65:6a:ae:4c:d6:64:8a:3b:d7:5e:09:9b:82:61:f0:29:
cc:e4:a7:e5:1c:03:2e:db:39:84:a8:e9:ed:73:56:09:14:0f:
7d:0a:ef:8e:4c:ba:2c:1a:01:ba:a4:7e:ea:61:d3:b7:33:a6:
62:be:fb:10:68:a1:65:ca:41:2a:f0:26:71:9c:4e:fb:6f:4d:
c4:4a:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:35:45 2025 by rpki-client