Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier: mF5hSwClKTiy6+5cEBVZgGiQrYoYGwPOxjfazeRYQsI=
Subject key identifier: B4:EC:97:0A:71:96:23:9E:FF:16:7F:5B:4F:A2:28:F0:81:76:69:27
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0194BD8542FA371369146F3BA5D23BC4E480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number: 116C
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: C50_a2SW4YnUYMJrr5Afw8I0HgI.roa (hash: TNrluYp0TFqbJMcRBRuC5FqOVY7++iFyEZ5HrscnKfo=)
2: V8EZayRv1EqarJe0ehvsMQ_cmXU.roa (hash: ssm0TnuVNJt7joaSTPTZfDleP3w1EUan+qYrHmEdpkQ=)
3: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: +xRUJyVCqRCjIZKKWT7JLeVDCXqhwTKmptgQwKzSQ3Y=)
4: fP9KcS2nAtlzdr_4yXDxYjDynAI.roa (hash: FSiW33FPGzpnEA+aiBD/xZClQVX484dW+n0rQsuAQfU=)
5: w_7-SYv5bHiwdydNGFlWuXsDXgg.roa (hash: KW5l2Z272khkMu93M3YIBl32KtQLTDgrGalDxIjvjZI=)
6: yIqAKJ9ffBRI_JVyvb32ZGXo-Dk.roa (hash: Ncm1UuYwpN7GicMBHimmdKJ9awoqjLXc5cMuP8gJQm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:fa:37:13:69:14:6f:3b:a5:d2:3b:c4:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=b4ec970a7196239eff167f5b4fa228f081766927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:03:b8:73:f2:0b:89:e2:25:f6:d8:57:b7:
4c:db:13:8e:fa:42:d3:78:e9:b7:c5:e9:32:72:d0:
b9:12:63:f5:86:a8:aa:cd:cf:7e:5e:3e:c5:52:70:
6e:57:ae:a2:f6:ea:07:d5:1f:e2:b2:2b:b5:38:7e:
3a:c4:b3:59:65:cb:05:ce:60:30:43:64:b3:80:fe:
0c:fe:26:b6:e3:0e:93:d4:0f:95:fc:22:30:ce:c2:
cf:56:57:dd:ed:a3:bf:6a:7b:82:02:d1:62:9f:88:
b5:3d:e4:01:30:65:a9:dd:a2:a6:0f:d1:c2:f5:1c:
52:e7:f5:38:3e:0a:c0:b9:77:10:99:c6:b7:5b:9e:
58:55:64:13:0b:f1:e1:1e:fb:42:a0:a7:42:cd:c2:
d0:e4:de:5e:3b:e1:f3:24:1e:0c:c0:4c:b3:80:bd:
33:fc:c1:6d:ab:f4:14:e3:d2:96:7c:af:c7:22:0d:
dd:40:f2:4f:4a:33:93:25:55:2d:bb:6f:10:4d:a8:
a3:2e:fb:a7:cf:54:2a:a4:2b:52:c4:65:aa:df:85:
2d:20:77:9a:10:eb:ba:34:11:85:ac:18:8e:af:99:
59:81:78:af:68:55:3d:a4:5a:44:36:7c:1c:ce:0a:
95:b2:fc:25:e6:2c:38:49:d1:c0:1a:3a:9d:f2:e7:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:97:0A:71:96:23:9E:FF:16:7F:5B:4F:A2:28:F0:81:76:69:27
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:64:eb:b9:64:e9:2c:b1:4f:54:8e:93:8c:e1:15:f0:3e:06:
b7:4c:09:87:a9:02:d0:ad:19:a2:c8:d2:30:08:83:cb:48:d6:
75:4a:9f:9d:4f:3c:32:8e:e2:b6:21:df:59:b4:ee:d0:20:61:
cb:a3:de:f0:14:d1:8d:ba:a0:dc:a5:e9:40:c9:d4:42:4a:62:
e7:4b:e2:bb:d9:b8:75:6b:9b:10:38:e8:61:88:78:b0:33:ff:
cb:a0:06:26:53:64:4f:e6:c2:db:af:fa:d0:bb:9a:6c:c0:19:
5a:95:03:d8:c9:2d:e6:f7:a4:9d:87:86:94:bb:5e:a3:68:b5:
6c:37:b2:b2:4a:fe:f2:94:1f:b3:f4:97:e3:1d:35:e0:ce:b1:
e7:93:d8:72:a6:b7:f0:db:70:0b:db:1d:df:ba:22:2a:b7:01:
eb:16:3d:cf:a3:e9:31:6e:d1:6e:e0:c9:73:a7:36:94:4b:d8:
0f:25:f2:5c:9f:ef:72:47:2d:62:dd:b4:0e:32:48:28:cd:17:
7b:ca:4c:01:ad:29:82:42:37:4f:b6:a7:3d:55:25:5d:91:80:
19:7d:cb:4a:1e:6d:21:9b:84:be:c5:ad:1c:18:54:63:b2:fd:
df:4a:2d:da:4f:b2:08:76:21:78:84:b5:17:ed:c6:02:75:a8:
e1:d1:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:25 2025 by rpki-client