Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: FLqB6nSu7RgnG3G/UOjYj//CNFkVvrvMJOx/MNkACf0=
Subject key identifier: 0E:D8:81:E5:39:7D:AE:02:59:C0:02:86:2C:D8:C5:C8:C5:DF:60:70
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 0194BD177AC2BA1809817915A4C063515FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 05C0
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: 6gu92EMkC4cYeQ0CzN4G2AnKk4XMqm+cmLa/slI6hYE=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7a:c2:ba:18:09:81:79:15:a4:c0:63:51:5f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=0ed881e5397dae0259c002862cd8c5c8c5df6070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:3b:9f:84:f3:8c:b7:81:f3:05:43:3c:7c:
57:2e:29:91:6a:57:20:b9:b2:f8:a3:d2:08:89:02:
38:24:ed:8e:0e:be:68:fe:88:66:9f:01:88:bf:52:
f3:cc:b5:a8:98:19:49:2f:25:bb:8b:6b:55:c8:0b:
52:89:90:64:42:81:52:c7:bf:a8:03:e0:b6:3a:d3:
c0:53:57:19:ea:76:ae:17:08:4a:b2:0d:a6:fa:1c:
d0:c6:22:a8:0d:d7:77:cb:39:05:4d:db:6c:af:17:
68:26:04:81:d7:35:9f:c9:1b:08:37:b7:17:be:b4:
c4:a4:20:47:1c:07:ff:63:2b:a9:72:68:cd:86:a3:
f5:68:3b:c8:1b:1f:12:54:1c:ec:69:f5:e5:09:96:
f2:3f:93:68:3d:05:52:6f:be:4c:33:48:e5:e4:44:
0f:c7:e8:e1:0c:14:d6:48:26:90:aa:7f:38:59:cf:
75:8b:12:7e:d2:08:8d:ed:0f:f3:98:53:d4:a7:d3:
9a:05:1d:60:15:16:21:78:5c:50:0b:0d:20:5a:b9:
78:4c:f1:5f:c2:23:38:50:d0:a2:97:36:a7:3a:9c:
45:26:18:07:d5:d3:52:b5:c8:c4:a4:b9:05:4f:06:
d7:31:03:b0:7f:97:7f:cc:21:34:4d:6d:02:df:8a:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D8:81:E5:39:7D:AE:02:59:C0:02:86:2C:D8:C5:C8:C5:DF:60:70
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:56:b7:33:60:99:de:44:15:5c:a3:53:eb:3d:6c:b9:08:44:
71:96:7b:00:73:86:14:93:18:b5:93:d4:b6:d5:3c:54:f7:1a:
16:c0:e0:fa:34:c9:3c:6c:81:4f:22:46:21:ca:0d:e6:b0:ad:
2e:ec:2e:2c:a5:6b:49:a1:ef:b9:03:e2:76:cd:3d:c1:54:07:
7f:cb:28:01:1e:7b:4d:42:8f:2b:3a:68:f3:ee:6b:ce:0f:1c:
c0:3d:7a:92:30:b1:57:63:9d:06:98:29:f9:d1:48:91:b7:4a:
81:e0:ae:35:7b:a3:bf:9a:41:66:b8:0e:42:7d:d5:19:c2:53:
7b:13:05:85:02:ce:90:16:45:09:85:e9:f3:45:ba:45:8b:06:
f8:05:8e:24:71:10:b2:66:01:e7:9e:1a:1e:01:de:eb:3d:ac:
ce:3e:e7:19:ec:9e:25:01:0e:48:23:7c:3e:2d:d7:67:79:ee:
20:4c:77:65:c6:7c:2c:6a:ac:79:b5:86:e3:16:b5:90:9f:3c:
bf:cc:d3:73:53:68:fb:ff:51:a8:1b:70:80:c4:d7:4a:d5:5d:
6b:c0:46:36:9e:31:90:a0:2f:98:29:64:b8:e6:11:b4:40:02:
71:26:f3:9f:c0:8b:ec:3a:bd:af:6e:c5:27:28:01:32:c3:26:
23:03:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:46 2025 by rpki-client