Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: 6jTyeo9aXjolaHCKAlpB25QRIApMKbQ6ivJ7BopwS3E=
Subject key identifier: C2:E1:F5:62:7E:07:0C:9F:69:08:45:58:44:36:8E:A0:7E:4E:EC:C5
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 0194BC3BCF6B6E273B14A9EA2C860D33856C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: RDMVRwKWWi/LMyX3vdwHkDarkTEOtVvt61JQ807y1rQ=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:6b:6e:27:3b:14:a9:ea:2c:86:0d:33:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=c2e1f5627e070c9f6908455844368ea07e4eecc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:f7:67:33:87:3f:a6:2e:de:5c:c6:cd:5f:
d6:c9:07:0f:1f:6e:0f:e9:11:c4:51:9f:7d:82:d5:
4d:d2:2c:22:78:d7:e2:ca:9e:b7:bb:8c:68:d9:e9:
26:71:fd:a2:ee:48:18:f2:b3:44:71:66:b3:30:13:
c3:13:52:a6:8c:ed:d2:55:1d:38:21:5a:c3:bb:87:
4b:0a:b8:05:b3:c2:8a:c6:02:57:23:70:53:71:c4:
0a:5b:20:c8:33:26:b8:5d:54:6e:0d:27:53:5d:77:
91:f8:07:91:50:7d:b5:b1:c8:7c:b1:49:d9:31:61:
de:45:2c:29:b1:9f:61:e1:e2:ff:51:7e:d6:24:7a:
8f:82:c5:50:6d:ac:8c:52:05:98:e6:85:00:f2:71:
0b:51:5d:2c:23:01:00:14:4e:05:41:3c:38:1f:a8:
30:4f:b7:ef:b8:04:1d:bc:e3:18:ac:52:0e:d1:e7:
d0:93:7e:12:a3:de:a2:df:19:7b:9b:0e:df:9e:e8:
5b:9f:87:83:c2:66:a2:1e:91:49:15:c3:87:f0:ad:
55:e7:43:14:48:c1:de:f9:4f:df:0b:a1:e8:69:cd:
6d:df:5d:29:89:07:e9:cf:5c:42:d0:f8:52:04:ec:
37:f4:e8:f4:5a:0d:d0:e8:9d:56:95:d2:3e:71:ee:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E1:F5:62:7E:07:0C:9F:69:08:45:58:44:36:8E:A0:7E:4E:EC:C5
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:10:f2:2b:83:9b:cd:e5:3d:c6:db:ab:34:ac:f2:c1:ba:3d:
a1:a4:33:53:79:a8:41:19:d9:78:59:5d:0b:39:d3:ef:c0:d6:
2a:4f:ea:91:00:bf:79:45:23:cc:35:36:d9:53:56:a2:e0:f8:
98:2d:e1:cd:73:b2:cd:2e:98:24:70:87:f4:27:3a:c6:0a:fb:
eb:dc:b0:93:f4:3d:53:b0:5b:4c:ce:ef:5e:df:64:d3:26:9e:
79:7c:bf:29:08:8b:bd:5d:09:10:6a:e0:35:32:d6:20:e4:c7:
6b:ff:b9:ee:c1:32:96:0d:e6:0c:ea:bd:8c:41:da:54:7f:b2:
05:cd:e5:15:9b:db:2b:a8:2a:3b:c0:08:9b:4d:b0:d0:57:83:
c1:26:52:9a:78:88:97:d7:d1:23:fe:2b:15:d3:58:9a:a0:4c:
8a:34:48:72:1c:87:75:0d:40:65:93:6d:a6:0c:63:f6:4d:f1:
63:43:c2:a2:06:88:46:49:11:e9:f4:1e:09:26:18:68:51:51:
99:e6:6d:bb:4c:c1:81:bd:46:64:a2:15:e3:f0:3a:0a:46:3e:
74:da:cd:be:7d:24:ce:34:2a:52:97:4c:9b:10:54:2f:4b:d0:
44:ba:bd:86:3a:ed:cf:ff:b1:01:a1:cb:ee:f8:b7:2d:ff:1b:
c7:46:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:57 2025 by rpki-client