Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: XuTFGnO1/580E/Qf5lTKlEU27+pU7ABf05EtM6NwNSg=
Subject key identifier: C2:9C:86:9D:C2:0A:52:D3:0D:E3:8A:52:3C:00:9D:66:59:E8:91:96
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 0194BCA9E7C153D9B86A7A47EBFF7846872A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 10DC
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: hrChwM4JATiSeQLUAno2Mu8Z0M/NCnah3rzTkVzgKDU=)
2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e7:c1:53:d9:b8:6a:7a:47:eb:ff:78:46:87:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=c29c869dc20a52d30de38a523c009d6659e89196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:7c:87:29:26:51:08:7d:c7:08:d4:43:05:
58:52:bf:c9:00:b5:d5:59:28:b8:8b:35:40:a7:00:
27:a8:60:e0:cb:c9:eb:ea:5b:77:80:c9:95:76:65:
1a:be:dc:8b:38:d3:6e:70:ba:bd:6c:de:23:34:38:
22:74:90:59:45:43:5c:6d:ac:94:76:16:f4:4b:6d:
8a:7d:21:00:2b:f4:93:dd:a8:df:c7:66:fa:b1:07:
13:e7:3c:d3:54:76:27:a1:9f:d4:60:ba:72:90:03:
e2:70:b3:14:f4:ea:85:cb:61:bb:93:08:ed:95:18:
7e:ec:bc:90:7e:93:ad:9c:e2:5c:dd:91:df:bb:0c:
9c:72:29:e7:db:77:1d:e6:ff:8f:20:41:89:04:7d:
34:b9:0e:07:f3:8f:49:ed:2d:e8:97:91:89:a5:1e:
af:03:7a:00:1f:48:04:25:3c:c4:5a:28:91:b6:7d:
92:71:a8:44:19:a2:76:e3:e2:18:11:7f:df:ba:38:
78:b6:0f:04:5e:4f:ee:4e:31:fc:ad:34:ef:f4:42:
16:5c:4f:81:d0:ce:31:a2:a9:26:44:08:f5:fd:57:
b7:17:9b:63:b9:dd:13:04:67:dd:b3:fe:eb:0c:97:
c9:45:42:11:76:81:41:b9:7d:06:ad:62:a4:2d:42:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:86:9D:C2:0A:52:D3:0D:E3:8A:52:3C:00:9D:66:59:E8:91:96
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ca:2c:16:ee:e2:cf:db:79:9b:fc:db:14:3f:94:fe:0f:43:
18:9a:a0:fd:43:12:7d:9a:78:5a:bf:38:1f:9c:3c:c4:e9:43:
23:5d:4a:3f:49:1d:00:2c:7d:df:aa:e0:b0:54:81:cc:8a:b6:
71:50:56:8e:1d:57:43:9a:a3:30:4e:b0:02:18:8f:30:1e:84:
c5:78:62:93:6f:b5:ee:52:2e:6a:d4:6e:0a:73:2b:53:a4:c4:
e6:8d:8f:8e:38:fb:23:3f:d8:64:54:4f:3a:be:04:6d:ac:07:
1c:eb:fc:95:ca:1d:b8:22:f1:fc:83:f4:66:c9:fa:cd:bd:46:
66:bc:04:95:c0:35:18:35:4b:2e:03:d0:ad:9d:7c:32:d4:49:
14:30:79:ac:6b:2e:4a:b5:45:15:2e:5e:76:89:bc:21:97:e2:
26:25:8b:c8:ec:bf:62:37:41:03:88:76:d1:ec:16:22:9f:76:
ed:fd:15:62:f2:ad:1d:40:5a:6d:ec:e7:35:7e:b5:5b:78:d4:
c2:dc:5b:57:f2:9d:fc:2c:3f:b7:1d:a6:9c:3c:19:e0:8e:b2:
db:53:58:72:1a:f9:ce:7f:7d:94:33:b9:17:02:6e:c9:c0:13:
17:78:57:6e:e5:3d:4d:49:2f:5c:b6:0f:76:a6:6d:f6:d4:3c:
5a:d7:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:49 2025 by rpki-client