Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File: dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier: 400taNFrYqxITY937BMVdkwkMB+24jLaBwxZy6EOhfQ=
Subject key identifier: EF:CE:F1:11:AA:8B:5D:27:95:C7:C6:C8:78:FC:C8:36:5B:17:DA:6D
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer: /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial: 0194BC04E44831F8E8010794FE7E5636AE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: Rw3BYoyXYSEo6V5vN0qo3508qkM.roa (hash: sKlzeUwowKBMHyUl3VaDBvqX0srdSepcxCjN2qsXkZI=)
2: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: a9qJ0Ub3Ekn3lFOFR+EqOBG9f61Lf/2lErTiFP94350=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e4:48:31:f8:e8:01:07:94:fe:7e:56:36:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=efcef111aa8b5d2795c7c6c878fcc8365b17da6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:40:42:05:2c:e5:10:38:36:1c:c4:a2:89:
0e:20:c3:e4:1b:a3:3a:99:33:a7:29:12:5a:34:4b:
03:1f:2b:7d:b4:72:e7:fb:26:0a:17:a8:7b:31:16:
50:63:8e:8d:8f:91:6b:6a:cd:d3:2d:fc:b2:74:96:
47:1d:06:27:d0:5d:05:cf:52:18:7d:67:54:9a:f6:
6d:77:0f:a8:60:ce:b0:c7:42:60:57:24:6d:02:15:
05:69:af:b9:6b:60:15:8a:21:96:d0:b1:67:30:15:
dc:8a:97:63:1e:c3:33:c3:f3:dd:c6:07:0f:94:88:
d9:df:f6:86:19:3f:f4:0c:62:29:3c:ec:f3:79:42:
d2:b9:5f:51:42:ee:29:21:b8:3f:65:97:21:0a:cc:
15:6f:16:b9:17:80:7a:1a:63:06:84:c1:19:55:54:
2c:65:96:cc:0e:d5:4f:88:f9:81:6d:49:2e:35:60:
73:d4:c4:80:b9:e2:1c:73:e5:00:94:b4:3c:cf:f8:
97:e4:e5:4b:7a:52:07:2a:30:76:ca:19:5b:2d:5a:
3a:c4:8f:b5:2e:48:b0:18:b0:c5:ca:b5:bd:5c:b4:
c5:8e:75:be:92:a7:65:63:65:b7:e7:20:3e:82:e2:
ce:79:f4:ea:86:44:14:86:e0:a4:6c:fd:e5:c5:8b:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:F1:11:AA:8B:5D:27:95:C7:C6:C8:78:FC:C8:36:5B:17:DA:6D
X509v3 Authority Key Identifier:
keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:aa:aa:b7:04:f8:8d:f9:6d:ae:f5:6b:c9:62:d0:a2:8c:65:
cb:5b:14:8b:6d:c3:84:00:0c:40:d2:ee:e0:7e:4e:4e:e0:02:
1c:21:de:13:c7:f4:ac:1e:93:86:59:dd:dc:12:f8:5c:4f:8d:
8a:b7:d3:67:79:8b:7f:aa:47:51:0d:1b:df:70:a0:72:25:f4:
6a:ce:1f:62:e3:52:0c:df:fc:de:79:3a:12:fd:e2:1e:a9:e6:
22:52:c1:2f:2b:6b:b0:2a:32:42:93:15:eb:bd:ea:1f:6d:9a:
b7:0f:8a:ee:f0:9c:68:0c:1d:d7:cf:e4:c8:39:06:43:95:e2:
48:f3:2a:a3:9f:a6:7a:2a:f9:83:77:3b:84:9b:06:7a:c6:71:
f5:fd:88:5e:0e:c3:16:48:8e:30:db:23:1d:a5:f4:e0:66:fc:
af:6e:f0:05:97:78:79:49:58:a4:57:2f:5f:da:c4:8f:40:f9:
3a:f8:2d:a3:af:57:02:63:69:a1:0b:3d:46:ae:68:bb:d6:a0:
81:7b:e0:52:e5:c9:9f:70:d1:f6:ea:4c:3d:a2:85:3c:95:e7:
80:31:8b:5f:6d:f3:49:c6:9e:47:a9:8a:07:9b:d7:e9:1b:7e:
a1:c7:a2:f7:4e:b6:de:56:cb:f0:b8:b5:e7:15:7a:ef:35:fc:
00:8a:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:20 2025 by rpki-client