Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: EUnqxt2PwbAMe6u/KLn5YAQ43lgFLaZr5GXySZeaSTA=
Subject key identifier: 74:45:77:81:E5:5D:38:4B:58:E9:F5:29:01:DA:59:39:DF:DE:BC:63
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 0194BC3BBA5CFAB0103EDF6F7848280F3754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0D82
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: rNY8TJYsznod7WyKSoJ85uouOct2xIkVfC/bcQYwXOs=)
2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:5c:fa:b0:10:3e:df:6f:78:48:28:0f:37:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=74457781e55d384b58e9f52901da5939dfdebc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:ba:45:2a:62:dc:bc:32:7d:17:af:7f:89:
e1:44:2d:ba:61:89:3a:6c:d1:a8:24:e1:62:33:13:
6a:5b:f5:cc:91:1f:db:e7:f3:c7:be:d7:dd:da:e1:
18:e5:00:50:54:0a:13:c9:ee:08:ff:a2:9b:3d:af:
96:3f:40:d9:65:ec:a0:a9:99:93:49:65:3a:fa:0c:
cd:bd:0e:ba:75:a9:11:0e:be:be:11:53:b8:eb:32:
1b:59:c0:d7:a0:85:d2:b7:4b:51:b3:52:29:2c:40:
39:47:cc:ae:b6:f8:78:79:91:dc:ca:bb:a6:0d:73:
76:0f:7d:b1:59:a0:01:91:4b:2c:05:80:40:83:1f:
46:d5:3d:23:7a:06:5b:e5:40:8c:6a:65:04:3c:be:
57:82:c8:52:e5:ae:10:7a:74:1c:68:7e:f2:b7:43:
2c:bb:c8:29:b2:b7:88:57:a1:2d:2c:7b:d3:b1:e5:
7f:a1:f9:bf:76:e5:dd:5d:d7:1c:b5:6d:4c:d0:ad:
00:71:ba:e7:9b:fa:f4:7f:4e:4f:7b:80:bb:1a:6a:
29:29:4e:c5:c5:29:e5:ec:f1:4a:af:9e:42:f9:e2:
8e:50:43:4d:1a:09:4a:29:7d:c0:ad:bc:40:5b:cd:
3a:45:35:88:19:18:7a:aa:d3:d4:f4:6b:57:7e:79:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:77:81:E5:5D:38:4B:58:E9:F5:29:01:DA:59:39:DF:DE:BC:63
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:f2:ea:4a:cf:f9:0b:28:e4:9e:26:22:23:fe:8a:24:48:
ec:e2:c5:d1:ec:76:7f:be:b7:74:90:78:28:7c:f8:f9:8e:25:
dd:61:d4:b8:27:9f:5a:59:fc:60:a3:d4:04:b8:06:e1:31:5b:
aa:f3:8f:4e:e9:3a:9d:d8:84:f5:79:19:31:79:57:f5:cf:69:
b9:29:1c:64:10:5a:e4:fe:ee:db:62:dc:86:79:10:16:42:cc:
14:54:0e:c0:61:31:f5:fc:7e:dc:bb:ba:12:82:66:4a:96:da:
c3:dd:f0:30:1b:28:50:d5:67:51:ca:49:de:37:01:3a:25:cb:
7c:d1:c3:a9:d1:76:17:7e:d8:f2:3b:f7:30:97:33:14:98:0d:
d9:da:09:82:33:fb:9e:65:98:e8:72:e2:57:a2:f1:44:d1:9b:
0a:67:35:00:d3:4b:4c:49:b5:0f:93:2d:cf:ab:65:bb:80:de:
2c:73:bc:e9:ca:64:3b:36:4d:34:29:eb:d8:71:70:43:6b:1c:
ff:84:65:74:ae:8f:9e:8e:8b:90:79:a5:3f:4f:31:f7:e0:c4:
29:71:cd:34:7e:a0:e7:4a:e4:b5:d5:2a:a3:a9:ef:06:cb:88:
ac:68:c1:0a:7c:aa:71:f5:4c:16:a3:54:e4:6e:f9:85:ca:c9:
88:34:d4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:28 2025 by rpki-client