Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
File: doZr5p83cHIKbcxHkuaA_H9zIaE.mft (raw, json)
Hash identifier: 0RLFMzVE4jrm1VI0pWjuE0yEfUxnWtG7XyXmN7Ck3/0=
Subject key identifier: B9:F2:D9:5B:B0:D4:38:60:05:1F:50:E9:7F:87:8E:1A:9E:2D:7A:27
Authority key identifier: 76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
Certificate issuer: /CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Certificate serial: 0194BD4E87925B8F7ADC6DE6619ED770DD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: VGNUuwe-hqqAy7oOkHM2nEayK1o.roa (hash: PbhbER0ewQHcNx+5Jye/cmyEemdCt4HhzE4je62M8OM=)
2: doZr5p83cHIKbcxHkuaA_H9zIaE.crl (hash: wSCKSaItbOI1lhjT2mm8d/xkXmV3M4a3dSCvxFgnoEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:92:5b:8f:7a:dc:6d:e6:61:9e:d7:70:dd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=b9f2d95bb0d43860051f50e97f878e1a9e2d7a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:ce:e4:cf:02:c4:fa:2c:0b:aa:55:4e:3a:
ae:7b:6f:59:cc:d0:39:64:b9:36:89:f3:a5:a2:88:
d0:e4:72:ec:53:2e:da:29:45:b0:40:48:2a:6a:05:
48:b2:8b:09:01:f4:c6:38:fb:ec:b6:c9:53:e9:c3:
1a:24:14:5f:ad:35:ff:bc:c5:23:33:e0:73:52:a4:
d3:7a:4c:d3:0a:db:db:ac:f3:67:f3:41:dc:f7:ec:
65:78:1f:6c:2d:3d:ce:1f:7a:5a:7e:d8:6f:36:62:
07:b6:e4:12:a8:62:19:fb:6f:45:b3:8a:11:28:c4:
19:72:30:c3:5c:cb:43:01:42:43:17:b8:8b:58:42:
2e:54:df:82:47:0f:d3:24:d1:10:0a:1c:10:87:37:
ca:58:d6:a3:46:a0:e2:f5:fa:f8:58:c4:97:a9:8c:
48:8f:80:3d:7c:2c:f8:bc:24:79:2a:56:86:1e:17:
64:f3:d3:6f:b8:d8:be:f2:5e:3f:55:59:30:35:ac:
32:05:d6:ed:94:4f:95:4b:18:98:a6:0a:79:0f:37:
a0:c5:36:fe:bb:ca:d0:6b:9a:e3:9c:da:4f:50:e4:
7b:49:62:82:ac:b8:28:be:71:e7:e3:d9:9a:fe:ba:
00:74:f9:18:f8:4b:8f:b2:c4:0a:7f:4d:7f:1e:88:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F2:D9:5B:B0:D4:38:60:05:1F:50:E9:7F:87:8E:1A:9E:2D:7A:27
X509v3 Authority Key Identifier:
keyid:76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d3:7a:b5:19:42:25:19:22:33:f1:09:fb:9f:09:b8:c1:69:
59:44:ab:b9:d3:1f:ef:0a:22:6a:0e:12:0b:f7:27:3f:26:d4:
1e:a5:37:74:15:a2:c1:89:c9:0c:8e:88:7f:0d:b1:95:bd:0a:
21:e5:03:5e:c6:2a:2d:b0:1c:1c:06:e7:bf:e7:b2:0a:0f:d3:
2a:c3:e0:be:ba:b7:0a:d1:d4:84:26:05:10:f0:d3:5b:97:a3:
bc:9c:f7:cf:83:ad:d7:96:2c:76:34:b9:f7:27:4c:49:19:07:
45:48:ba:94:15:29:a6:65:bf:9d:4f:8b:09:fd:8d:31:ef:f8:
1c:22:f5:4e:b2:1d:ca:73:75:be:5b:16:6e:02:8b:d5:f5:9e:
84:05:7f:e1:3b:cf:07:0f:2d:49:01:ec:1a:f4:22:4c:c5:b2:
d4:00:78:f4:11:50:d3:a4:8c:66:54:bc:56:94:b7:49:1f:81:
26:6f:b4:9a:2c:47:94:53:e5:9d:79:7c:5c:ac:96:ea:4b:c7:
8b:c0:82:74:72:fd:29:49:c8:1e:8e:bc:fd:74:74:8e:1a:68:
d6:8d:18:6a:2f:15:df:74:92:57:6c:b6:df:04:cb:00:3f:91:
38:e4:33:01:84:9d:f8:75:49:30:6d:07:05:61:c6:35:7d:bc:
02:c5:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:25 2025 by rpki-client