Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: Mh9WwzlycUDOVWLMn7/eXEIzaNNah2kFBZ6AyOnIwrU=
Subject key identifier: 6E:9D:AC:5E:87:2F:5F:FF:A5:06:F7:17:EE:B1:8D:AF:6B:9C:27:83
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 0194BBCE63671AD240114A31A7BC70C51912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1166
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: 2Xy3F0XEpunwddGoJK79HwXMHLydkMdadCCqwajBlqA=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:63:67:1a:d2:40:11:4a:31:a7:bc:70:c5:19:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=6e9dac5e872f5fffa506f717eeb18daf6b9c2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:4c:5d:ee:fa:66:3f:3f:5e:2d:00:00:3d:
7c:6a:8c:39:b3:70:4b:8f:a4:6e:a5:25:78:1b:b6:
b7:55:97:5d:86:49:8d:51:4c:9a:91:bb:98:45:0d:
b8:78:ab:ff:76:df:2c:7e:e4:cc:fd:db:11:5e:fd:
b7:20:77:ab:ff:ce:5c:55:14:8c:89:65:7e:0f:94:
d8:1a:95:8f:12:71:3b:89:f2:5a:3f:0e:24:75:d4:
35:ce:dd:39:3f:0b:b9:b7:63:dd:03:53:b0:3f:b4:
5c:96:33:29:68:51:26:22:ef:4a:26:38:4c:9e:d0:
50:5b:b2:1e:29:7f:a4:06:ab:e1:c7:04:bd:26:30:
54:fa:be:17:2f:d9:44:69:3c:49:5d:50:23:db:df:
a3:6f:d6:ec:c4:8e:d7:67:b3:38:90:4b:45:59:81:
06:55:7b:b2:cb:7c:77:c6:1e:a1:a2:52:25:32:82:
fe:52:e6:b1:0d:d8:02:46:a4:6b:13:70:30:29:7c:
37:27:a3:0c:3c:48:e2:b2:09:43:e2:f5:5b:70:23:
d9:3f:f0:06:72:ed:aa:17:21:97:89:42:b9:ef:c2:
cd:0c:5d:24:86:76:d1:50:f2:76:0d:59:24:92:12:
e7:93:5f:a2:83:79:ed:0b:4d:80:1e:78:78:0d:90:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9D:AC:5E:87:2F:5F:FF:A5:06:F7:17:EE:B1:8D:AF:6B:9C:27:83
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:95:18:38:04:31:93:a3:8e:82:86:a1:a3:16:b8:88:13:ee:
94:42:80:a5:44:d4:be:40:ff:7d:4d:76:80:60:58:14:08:b1:
dc:99:7f:14:52:89:ef:99:bd:b9:79:9d:0e:60:92:ed:f7:de:
80:62:5f:33:a3:bd:38:5b:bf:22:40:30:39:45:92:43:6d:44:
b6:97:a2:e8:36:47:5a:90:55:35:e5:2e:f6:7a:63:f0:2a:c5:
c2:e0:43:c0:d6:c7:f0:f1:c7:01:bf:be:87:3d:af:0c:d9:84:
68:d7:07:22:5e:5b:e0:96:d0:b3:46:ea:6d:88:92:d0:ce:28:
77:a6:20:b2:26:42:79:ea:75:f4:15:e1:ba:32:b2:6f:94:24:
6d:08:c9:f7:87:5d:6c:c7:fb:1c:f0:72:5d:0a:97:b7:aa:3d:
dc:99:10:be:1d:a3:7c:37:ca:11:9d:2a:97:ca:8f:8d:4d:d9:
db:70:a4:d9:11:e0:db:9f:01:b5:7c:d5:f0:2a:9f:19:e3:60:
a8:9e:6a:79:81:3e:b0:11:01:b0:10:38:4a:28:cd:a6:78:9d:
23:dd:5b:63:f7:b4:92:e2:74:90:26:f6:71:61:34:9d:42:5a:
d1:70:ea:d1:f8:cd:92:03:0d:4f:4b:b8:d0:76:2e:fd:17:d0:
37:50:1e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:00 2025 by rpki-client