Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: k+LokUbPBXdJ6o6X0ehT6WwCFjSvH392fUPGYQ0CpiA=
Subject key identifier: 58:9D:C7:49:22:77:A7:14:4A:6D:B3:3F:8D:FF:02:94:43:B3:A6:64
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 0194BD85A5F1E1121EE58DB3765C22336B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: JppXtc35lMseOZyjcXrOn3jxrO+aipp1EzA9xMn0jr0=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:f1:e1:12:1e:e5:8d:b3:76:5c:22:33:6b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=589dc7492277a7144a6db33f8dff029443b3a664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:41:74:ec:2f:f9:58:41:2c:9e:69:d1:e4:
6b:1b:68:10:bc:5b:74:18:0d:e4:25:eb:42:5d:f7:
d8:ce:a4:27:cd:31:58:e4:5e:83:32:08:81:bd:39:
13:89:61:82:be:57:22:f0:38:e8:0c:0f:80:b7:3e:
3f:ab:76:9e:e8:2f:ae:8d:36:59:4b:f2:69:6e:03:
4d:c7:eb:8a:9b:f0:c7:85:ae:30:7f:6f:4b:99:58:
48:98:de:67:b6:84:17:d7:37:e5:c2:54:fa:35:b5:
2a:b3:71:2c:82:0e:0c:75:80:f3:55:67:71:2a:f5:
95:06:b2:a6:40:1a:3c:d7:bb:c1:be:de:9b:6c:67:
c3:e3:63:d5:5f:84:a5:97:47:d3:f7:6c:ff:ec:78:
87:60:4b:87:2e:a1:88:cd:43:dc:b1:0e:b6:d6:77:
66:1e:92:c0:86:29:1a:fb:63:a9:1d:2b:23:21:b9:
57:37:f8:79:71:0d:bf:b5:fe:11:0d:74:d2:22:ec:
a4:b3:72:76:27:42:ab:ca:7e:40:c1:67:f1:17:9e:
8f:a4:9b:d6:74:55:34:39:2e:e6:51:6a:5c:6b:a4:
1a:d2:6f:4b:1f:31:9c:d1:d7:0d:ba:68:3f:1c:07:
05:35:7a:c3:51:0e:14:cc:00:f6:ba:22:11:d0:28:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9D:C7:49:22:77:A7:14:4A:6D:B3:3F:8D:FF:02:94:43:B3:A6:64
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ce:a5:0f:b7:4e:46:39:9d:ec:b9:78:96:7b:e3:01:05:34:
ff:4d:45:4b:e3:a2:84:06:51:57:7a:0b:80:01:15:c4:04:a6:
80:99:08:34:6c:01:54:b5:b3:5b:40:59:6e:74:2e:4f:03:a9:
43:1a:83:6b:52:ec:82:3e:1f:27:2e:66:96:11:aa:f7:74:6f:
3c:02:6f:c5:65:1e:90:98:b3:07:fa:aa:14:bf:ba:5f:f5:15:
53:75:53:b1:b2:9d:6c:09:2e:17:23:d5:eb:16:dc:9f:84:c6:
8e:3e:70:58:11:16:e9:b4:34:f8:c9:a3:d3:21:12:dd:42:f7:
f6:7b:9e:07:41:7c:72:9e:5c:7d:51:5f:16:a1:c6:c7:4d:b5:
88:d3:8e:dd:0e:22:db:14:ad:37:1f:16:63:08:08:48:31:56:
41:5d:cc:cc:92:f6:39:cf:29:e9:82:86:fd:2b:98:a0:4a:2d:
98:73:a6:08:b6:30:f0:3c:0d:66:3c:d8:07:a3:06:ce:4c:88:
45:ef:c6:34:70:7c:3b:94:d1:73:f7:84:ec:d1:44:ad:83:5b:
ac:67:0c:f7:95:c9:1c:ce:34:64:e3:41:e2:38:49:87:93:1b:
53:eb:d8:51:48:db:d5:a9:0b:30:e9:24:42:8a:6c:27:8f:7f:
a4:a6:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:04 2025 by rpki-client