Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: K8b3BpXcQsm1KMegvLTn/ZcjMtktXikQrNS8aUxdWYA=
Subject key identifier: CA:CE:0F:EE:E3:B6:56:20:8B:8F:7C:85:A5:C9:FC:9B:5B:98:AE:64
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 0194BCA96BC8E71D676F1D0EB43EAF58A3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 0372
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: 1TxtfFUWZYEuFIE19iP1YVgCaY+TmDrrRvi6JiTzR/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:c8:e7:1d:67:6f:1d:0e:b4:3e:af:58:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=cace0feee3b656208b8f7c85a5c9fc9b5b98ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:a7:48:2e:93:87:09:41:f2:33:8a:d6:c5:
f6:cb:95:11:f9:cb:09:90:35:a7:31:14:8b:6f:b6:
5f:e9:5c:9d:c7:c3:fa:53:cc:2f:4d:f8:f8:65:5d:
db:e5:c6:07:3e:06:7d:92:df:ed:03:14:6f:21:31:
0e:45:08:f9:f9:a1:e5:f5:1b:32:59:a3:26:92:26:
87:89:07:5a:1b:2a:93:d9:1d:f1:c5:f0:1b:9d:c1:
2d:b0:fc:53:37:31:4f:73:4a:50:7a:7b:62:35:19:
d6:4a:ba:11:1d:08:69:b3:f9:0b:ee:a0:79:0a:43:
d7:a4:fe:9c:43:65:17:49:4a:f9:d4:f5:fc:5d:e3:
7e:fd:ce:45:a6:48:80:dd:4b:1f:10:a8:b9:cb:f6:
b8:cf:ea:6f:75:bf:80:af:44:53:4c:06:23:c6:3f:
30:3f:ba:07:39:69:b7:65:99:11:78:48:cf:34:e9:
67:75:27:29:9a:41:50:b0:84:17:7c:72:84:63:7b:
07:ba:a6:01:c2:e6:7f:a6:c3:09:b6:96:bb:4b:e7:
44:65:1c:18:58:9d:ed:a6:e1:93:99:63:10:70:39:
f8:34:80:ab:e7:94:d5:74:7e:9b:57:fd:1c:b7:9e:
2a:df:9a:d4:54:18:b1:30:0c:53:0b:6a:21:1e:6a:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:0F:EE:E3:B6:56:20:8B:8F:7C:85:A5:C9:FC:9B:5B:98:AE:64
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:44:18:79:ec:f8:87:df:f3:c5:23:74:b8:da:de:6c:af:ce:
c8:e9:c6:d1:27:d2:a2:32:55:76:63:f5:62:d9:3f:4a:54:f3:
76:5d:c3:4d:a9:f4:f6:6a:98:b4:7f:ad:ae:a8:9b:54:14:77:
24:d1:f1:05:6e:8d:80:53:1f:aa:46:ee:b2:20:39:cf:ac:8f:
ff:9e:00:37:6a:05:df:98:68:e6:ff:af:ef:3d:e5:87:f7:6f:
3a:5a:df:8a:a4:e3:9e:6a:59:15:46:f1:2d:d0:3a:3f:52:bf:
1d:6b:df:54:3e:fd:fc:43:f0:ec:ab:78:a8:cd:b2:c1:a3:57:
1f:a3:3a:58:40:68:fc:05:47:0f:a1:f3:c9:a0:86:c0:82:51:
08:a4:21:c3:8f:7e:0f:ce:72:c8:06:cd:27:f3:17:7c:39:2c:
07:17:60:51:97:76:3a:77:07:6d:83:15:b4:64:50:0e:c8:33:
cd:86:4e:05:eb:b0:2b:03:4f:57:6e:1b:93:9f:53:3e:43:d2:
5c:a4:87:43:e0:4d:58:0a:77:6b:3d:b3:d3:43:57:cd:2c:8c:
ab:87:36:19:42:d5:9f:4c:f4:f1:c9:fa:2d:17:7a:f9:f6:91:
19:7a:6f:42:32:7a:24:db:15:e1:31:5b:44:8e:1d:d4:83:84:
a3:13:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:22 2025 by rpki-client