Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
File: dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft (raw, json)
Hash identifier: avsb++S7CFxK4Cui1RYUuUlA9RTE9S9RDKLwU7SF+Uc=
Subject key identifier: C6:DC:89:26:20:52:AD:60:8F:90:24:D9:62:2A:60:EF:5F:4F:1C:6B
Authority key identifier: 76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
Certificate issuer: /CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Certificate serial: 0194BCE090DD07120E00271DC0672D9F1853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
Manifest number: 1175
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: P5ZnswUpMLyVjWj9pVZS-hlIw7A.roa (hash: 3hJsA3Q3EQecJR3hJHgLTYYEIcnWflx0DcKeSfNvhRM=)
2: dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl (hash: 3JNbFRKbU9jNuxLnTYPvtY6sBTVBFCX0t4udUY5XI0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:90:dd:07:12:0e:00:27:1d:c0:67:2d:9f:18:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=c6dc89262052ad608f9024d9622a60ef5f4f1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:80:a3:8b:9b:89:1d:1f:18:04:4a:ae:e7:
7c:51:b1:72:7b:4d:ea:8f:63:8e:2f:e1:4d:d6:bb:
7e:e4:11:82:38:5b:99:01:52:2b:3a:e2:be:0f:1e:
63:39:96:c3:1d:f8:f7:ef:17:f6:2b:6f:d6:41:a6:
9d:c4:c5:e2:02:2a:c1:f3:bd:2f:1b:31:15:d0:9e:
1a:b2:61:1f:91:1b:b1:80:a1:a5:24:e8:d9:5c:82:
c0:61:1a:66:61:ad:42:2b:f9:05:3b:59:e9:e6:c8:
a2:16:ac:bf:80:c8:36:8e:21:00:4c:6f:24:c3:d4:
89:62:33:ad:23:9d:0e:71:dd:26:77:d5:3a:04:31:
06:e6:9d:36:7b:c1:3b:1e:6e:6b:9e:d6:2c:05:12:
ab:1b:54:59:e2:6b:a3:23:3c:2b:44:51:e9:cf:e8:
0b:24:75:b6:c1:48:0b:f8:cc:79:d6:ba:27:02:8e:
ff:e8:ab:74:ff:ec:b2:00:cc:ab:1c:53:56:7b:8b:
44:72:6d:89:67:5a:39:18:cf:01:34:c3:68:2b:7d:
33:77:c7:fc:92:96:5f:11:d6:77:a7:1e:e9:65:5f:
39:89:44:e8:59:f3:0d:b2:27:52:fd:0c:88:7e:eb:
83:c8:1e:72:3d:19:e5:0c:03:a8:c6:de:c4:44:5c:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DC:89:26:20:52:AD:60:8F:90:24:D9:62:2A:60:EF:5F:4F:1C:6B
X509v3 Authority Key Identifier:
keyid:76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:f9:d5:b0:43:5b:61:ba:39:f7:61:7c:ba:f2:39:df:c1:
9a:30:5f:eb:36:b0:74:67:2f:db:eb:b9:01:ed:49:ee:bd:ef:
26:0a:1c:db:53:c0:6c:0b:59:2b:bc:db:9f:ac:2c:3b:a6:ba:
03:de:4e:25:4f:e7:13:1d:2c:76:57:0b:51:ee:eb:be:d3:e2:
2c:40:66:ea:12:22:9b:81:cd:7c:fb:2a:9f:a0:79:03:84:9b:
45:b8:17:60:6c:25:41:bf:d3:ab:e5:8d:a3:d0:f6:8c:63:5e:
d3:36:84:60:df:02:dd:10:bd:f7:55:3a:39:56:60:0b:b4:b0:
99:cb:bf:55:c6:93:4b:63:88:d4:67:a7:c8:03:33:1e:85:ca:
f3:2c:b8:65:c3:be:77:a1:1a:b6:21:2b:69:62:5b:52:22:8f:
80:0d:3b:ee:d4:ff:32:6f:1c:a0:99:6d:6c:6b:f2:39:22:f5:
96:f9:55:1c:1e:1e:0a:50:de:d6:cc:d6:d6:f0:03:95:15:17:
f4:49:f6:fd:2d:f2:4f:59:fd:bc:cf:5e:14:de:9c:2b:d7:ec:
3d:99:ee:6b:1d:5e:e3:38:c6:b9:6d:73:c2:e9:af:0d:5e:4f:
19:eb:ad:73:62:e8:af:d6:ad:ed:de:6f:37:46:52:ba:ef:34:
36:9c:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:08 2025 by rpki-client