Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: WnotbxGcmadbtuK1dKZOB/Buej0bKJNmvB0Y6/aCagE=
Subject key identifier: FD:6D:59:BB:C1:BC:B0:65:B1:10:96:2C:6B:44:78:6F:62:F3:3B:85
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 0194BC72FE4B5D789B6486C7C0521AB68CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: eCRNdICX30Hpg47QEQaecMlTqCZLzbZbqq6Rq4cN0V8=)
2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:4b:5d:78:9b:64:86:c7:c0:52:1a:b6:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=fd6d59bbc1bcb065b110962c6b44786f62f33b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:8d:cc:d3:71:db:3a:68:4a:a7:f9:0e:ce:
b6:cf:7f:2e:9d:84:77:5d:c4:c4:07:c5:0d:19:dc:
45:b9:25:37:fd:23:77:e1:21:57:2f:a0:d3:06:bf:
28:24:ce:5d:31:be:0a:4a:f5:5a:7a:24:89:1a:de:
d1:11:64:17:2a:2b:9a:65:76:c2:79:55:8d:e9:60:
d3:6b:26:47:7f:e2:8b:82:6b:dc:25:1e:cf:43:84:
bc:67:90:c2:1a:fe:d4:7c:b6:6e:f0:18:c9:2c:b0:
ab:dd:9e:f3:39:97:4e:ef:12:1c:77:df:f3:84:67:
e3:58:59:9d:8b:5a:13:05:02:88:da:fd:11:39:25:
e8:d2:6f:e9:44:da:aa:cf:a8:eb:9c:1a:29:24:ee:
42:bd:5c:ee:09:7c:f4:9e:75:f5:48:df:91:5b:b9:
2e:9d:ae:88:2c:7a:82:03:c5:91:92:9d:70:08:73:
c8:7d:e4:48:5d:09:b4:ca:91:86:61:c5:97:9f:b2:
99:6a:39:e5:e0:9a:46:30:f1:d1:4b:75:59:70:85:
94:a5:00:77:1f:4e:5e:f9:97:86:2d:23:84:af:93:
87:ea:57:45:71:6f:22:84:6e:9e:33:94:b0:2c:1c:
9b:3e:9b:bc:9d:60:a4:cd:a3:fa:6b:38:6d:47:2b:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:59:BB:C1:BC:B0:65:B1:10:96:2C:6B:44:78:6F:62:F3:3B:85
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:20:39:d1:a1:c6:fb:27:6d:54:be:c2:4e:58:f8:90:d3:
ac:1e:63:f5:d1:1d:34:93:4b:15:94:3f:a5:61:c7:53:ad:21:
7f:c8:18:e0:02:55:94:f3:33:42:90:df:21:d0:9b:65:0a:af:
53:62:59:c8:ea:22:26:56:54:c5:30:5d:cb:b5:01:13:8c:f3:
dc:4b:04:c7:78:b3:50:88:41:cc:8e:84:ff:e3:52:d4:e9:52:
97:4e:dd:15:c6:0b:4a:b1:f1:9f:87:12:16:ea:51:cb:e2:da:
ce:55:a1:df:dc:b1:37:7f:b1:0e:88:f2:86:95:35:f1:fa:48:
47:9a:65:6e:37:45:5d:8d:ad:91:96:c4:d7:a1:0d:b8:cf:02:
73:c1:dd:0b:85:d8:2b:09:6a:4d:36:41:cb:f8:b2:5e:1d:ed:
a2:1d:d2:cf:40:17:bf:f9:ba:cb:20:e7:16:6a:1f:8e:59:20:
4a:e1:77:51:50:76:b6:4f:7b:8c:18:5d:c2:5c:c9:6b:39:5f:
3a:73:53:fa:bb:10:b8:9a:7e:f4:0c:1f:68:53:f4:54:cb:fa:
01:9c:5a:72:78:4f:8c:8a:7b:41:bc:ec:e5:33:d7:00:52:a1:
fd:fd:9b:72:6e:4c:cb:16:7c:e6:0d:22:f1:ee:ae:0a:92:51:
f5:d5:8b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:03 2025 by rpki-client