Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier: Sou7Pewnrkpt/XxBlEhMALsZ2TzKQ5ZcJH+jUXZODck=
Subject key identifier: DC:9E:D5:FC:15:4B:4C:BF:C9:F2:05:34:DF:CC:CE:36:4B:92:A6:98
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 0194BD85B7318D2EFD3DE6B769BBB76E27FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number: 1403
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: NMSBGdXZ3nNbNM6HmAD11nbjUUc.roa (hash: 8ncSaAlvsGwgwEz4IVnirUboMfpzaj3h+0Dd6V+Vjp0=)
2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: dxvb3ZDuOuW9Y6J2oumtXrDRo6/q2S1+nc9ZOc+is3M=)
3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
4: sQhT4EcSgUdSOJf-IlcAVbhhanQ.roa (hash: yOHMgQvvnUGeXtEo1mVldnI757iV9L6oiBbCrHJFV5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b7:31:8d:2e:fd:3d:e6:b7:69:bb:b7:6e:27:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=dc9ed5fc154b4cbfc9f20534dfccce364b92a698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:5d:da:9a:40:1e:c2:a8:fb:6d:fb:70:4c:
a4:0a:49:cc:66:f2:d8:26:eb:0c:9a:7f:9a:13:9a:
f4:8b:4f:61:e4:7e:91:72:36:f9:7e:c8:c7:c5:f4:
fe:b0:bf:60:e1:c0:90:3d:c4:59:7f:c8:d1:20:02:
a9:69:56:dd:af:f1:0e:bd:d8:2e:cd:12:81:7e:5e:
13:f1:7d:da:c4:c5:63:ee:41:0b:49:28:65:a6:fb:
16:80:97:d2:c0:e6:4c:79:d6:21:66:3a:c4:75:df:
76:c7:0e:bd:bd:61:d1:e8:58:f9:85:92:be:5e:e1:
63:07:8d:9b:f1:8b:73:69:42:40:82:6d:36:92:ed:
ee:24:7c:fb:9a:28:b6:c4:94:d7:40:28:f6:ff:93:
ec:ca:30:72:12:b9:aa:ff:fe:01:ce:37:4d:be:55:
36:bc:5b:84:48:82:a0:ad:39:bc:ac:be:53:82:ee:
90:2d:45:00:70:fe:36:67:cc:6f:e0:19:97:f0:7c:
ee:a4:ad:ed:61:96:0b:a6:d3:7c:71:5b:c3:ad:8b:
5f:e5:fb:f3:2f:07:c3:8f:e3:ea:ef:28:46:e0:02:
33:bb:52:94:7c:a9:cb:93:f2:b5:3f:88:b8:3e:d6:
44:55:bf:2c:86:65:47:d1:05:53:5b:f3:b7:5a:92:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:D5:FC:15:4B:4C:BF:C9:F2:05:34:DF:CC:CE:36:4B:92:A6:98
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:73:f0:b4:17:9f:1e:f8:e8:ea:f6:8d:1a:19:20:b4:22:91:
77:5e:fe:2c:44:b0:21:2e:07:55:b0:bb:91:87:dd:5b:66:70:
d8:99:ef:74:ed:94:a6:e6:a3:eb:f4:6e:4b:ba:c4:85:6a:df:
bd:51:a9:f0:b0:99:10:6f:11:49:a6:f1:cf:1d:1e:8c:97:e4:
05:b8:f6:30:56:33:31:b4:23:90:ee:dd:35:49:d1:e2:76:bb:
84:d7:99:cf:99:f7:6e:98:89:44:a5:ac:b8:21:d1:6e:6f:14:
52:91:1e:bc:f8:9e:70:a4:d2:47:39:96:cb:a0:26:84:ad:d1:
99:49:67:77:0f:5e:2a:69:92:88:5b:4e:f2:60:02:53:c2:ab:
57:f7:02:54:3e:00:3b:03:7c:a0:8a:3a:83:d4:65:43:96:56:
ba:9d:ec:7e:6f:6b:ca:d9:d1:b7:a7:da:e2:29:00:84:81:bd:
ac:25:4a:61:e1:ed:56:b5:07:ca:7e:22:1a:6a:7f:e2:1a:5b:
5a:7a:c5:6d:96:c9:ad:39:4e:0c:fb:f1:8e:dd:4f:b9:df:0f:
db:98:64:d0:c9:82:ce:37:ed:f4:90:65:4a:5a:7c:07:ef:7b:
cc:2b:7d:17:b9:c0:e0:19:91:9d:63:1d:57:69:ac:1e:2a:9f:
84:0a:d2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:32 2025 by rpki-client