Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: qL3TdLPJSPc5OK+wSRr/PcOn/5wqsPBXFc9K/F1BvPg=
Subject key identifier: 1B:96:95:36:EA:05:8B:6A:F1:D5:9E:B9:16:27:60:F4:42:53:F3:AD
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 0194BCAA2B800F6F1962BDB14785C18EDFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 0F0A
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: 4Bjw8bJg4XtBp7/pQxxthjnT7arpPXq3dU7nX+ezRmQ=)
2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:80:0f:6f:19:62:bd:b1:47:85:c1:8e:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=1b969536ea058b6af1d59eb9162760f44253f3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:30:c1:3c:a3:40:9e:6e:4b:b1:bd:6b:d7:
6c:b8:0b:b4:b4:32:bc:70:ec:d3:a6:d2:cc:12:44:
bc:b8:9e:08:41:97:65:18:ab:97:57:18:ae:d0:c7:
f5:b1:de:9d:19:da:29:b0:a0:ab:c7:ce:57:bb:fb:
03:a1:7c:06:5a:54:13:e3:c3:88:70:64:28:5b:f9:
1f:91:d9:d2:11:ec:14:72:24:81:10:3a:61:5b:09:
14:0c:e7:23:93:6e:81:e8:39:3c:ea:bc:63:6b:af:
43:4f:43:21:3b:ef:4b:19:41:49:da:63:92:85:a0:
a6:b0:f3:d2:9e:4b:9a:c8:94:ce:d6:3d:7b:74:d1:
27:fa:f1:f5:3b:9e:af:5b:c8:d8:43:c5:18:3f:8d:
c6:d3:84:ca:3a:68:ff:fa:0d:4c:36:3f:db:4f:34:
c5:05:97:4b:b4:96:6f:c5:ea:22:52:10:dd:1d:6f:
ce:20:d4:b4:06:37:af:06:1f:f1:6c:4f:8f:7c:b2:
e7:7f:af:6b:7b:50:53:88:3a:27:8a:c4:e1:fb:66:
c1:e8:c6:11:b4:0c:a5:f5:8e:82:40:85:cd:89:81:
40:7c:c3:7b:ea:06:ce:5e:23:fa:97:fd:ae:23:7b:
62:38:bd:b8:15:89:df:48:ae:37:9b:e4:86:ae:0b:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:96:95:36:EA:05:8B:6A:F1:D5:9E:B9:16:27:60:F4:42:53:F3:AD
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:10:26:5d:9d:3e:8b:66:ab:f6:ad:bc:f0:21:25:fa:1b:90:
09:35:04:8a:6d:0a:90:b2:ad:b9:06:8b:32:0e:a1:58:fd:bc:
08:e2:e6:86:39:cc:2b:7a:b5:fb:24:54:f2:b8:6d:a3:5a:9f:
2b:12:b7:72:60:74:44:b6:5a:4a:c2:12:62:03:d8:30:1e:f9:
90:dc:a3:38:e5:f5:2c:cc:46:e8:36:96:cd:5b:c3:53:ac:71:
07:bd:02:65:48:9f:a6:77:3f:9f:58:26:1a:cd:eb:da:de:16:
82:3a:03:bc:bc:72:28:f9:88:1b:69:64:4e:04:99:e5:3b:09:
5c:74:cc:1e:70:42:2b:33:c3:fa:b1:79:2a:bf:c0:14:c9:36:
eb:0b:53:b9:35:4a:6f:d8:38:b3:32:57:b0:1e:26:e0:62:16:
87:0c:19:4b:6e:e4:be:35:e5:e7:33:ca:0a:a0:b8:0b:fd:01:
58:4b:f3:9d:72:f5:6c:94:a5:c5:dc:4a:1f:8a:29:54:de:2c:
a4:12:c5:70:94:ba:86:70:a4:de:d8:90:ad:76:31:9e:c2:57:
ab:a2:ff:27:78:98:f5:33:50:e1:32:e8:a8:89:bb:2c:cb:d0:
da:7a:f8:b8:79:b1:d4:a4:8a:a3:b8:4c:9e:95:4d:32:e6:23:
48:9e:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:39 2025 by rpki-client