Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier: ht7D6pGLWLnZozNmx3bZ5W0SJFlsHnH3WiBEuAR1tS0=
Subject key identifier: BD:53:C3:5C:D3:85:A5:7F:1F:7A:C4:A6:DC:A2:0F:01:F3:EB:11:F6
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 0194BC3C134D9E9B40112D10460F5DCB3677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: 3KbNmAUg5Vu8bAyEIm67tjHVwVaBnblOZukh/sqj080=)
2: kT96Syix82Ksegk49TAUeSUGMVc.roa (hash: d9BAb8ybDMu+8NvAhemfJFOhiARZSFEf5iHfB6YfEWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:4d:9e:9b:40:11:2d:10:46:0f:5d:cb:36:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=bd53c35cd385a57f1f7ac4a6dca20f01f3eb11f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:a5:cd:77:f3:63:4c:66:d4:e9:da:af:83:
5d:98:e2:7b:de:49:23:1a:5c:6a:35:b6:b2:6f:88:
90:d2:75:f3:bd:72:cf:88:67:ff:c4:e4:d8:c5:4e:
a5:34:3c:85:fa:f7:6e:31:37:f3:7e:dc:cc:7d:49:
13:2f:8a:78:35:4b:d1:fd:cf:09:ff:dd:66:6b:63:
a4:b1:bc:a4:95:86:69:db:99:af:f7:f6:3b:21:d1:
15:76:61:bb:2c:e3:92:6e:1f:57:b3:04:26:48:bb:
25:8c:f4:33:28:db:d9:a4:dd:96:c9:5a:dd:e8:e7:
67:c4:ea:93:fe:1f:c5:c9:98:60:c2:c9:e0:d7:9f:
73:62:20:be:56:af:d7:4a:c5:2d:05:78:6f:f4:00:
4d:f3:63:63:8e:02:bc:df:61:2e:7b:62:51:04:1c:
09:28:81:6e:99:b9:9b:c2:3f:ca:59:0c:60:0d:91:
65:fa:c1:41:c3:9c:7f:b3:50:5c:1d:31:f0:c6:30:
c6:83:78:ec:0e:d7:ac:d9:fc:d9:a4:e5:75:f7:4e:
9e:17:06:81:d3:a0:26:de:a3:95:77:01:b0:ab:9e:
d6:ec:ae:0c:c3:47:b2:59:ee:0b:1f:99:8c:f4:87:
7a:7f:68:12:22:4a:85:4f:2b:38:3c:8f:be:6f:b5:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:53:C3:5C:D3:85:A5:7F:1F:7A:C4:A6:DC:A2:0F:01:F3:EB:11:F6
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b4:43:c6:1c:62:fb:c6:bf:36:b8:94:08:49:2e:fb:fb:26:
b0:a3:ad:e2:95:50:a6:60:6d:1c:b0:67:b3:4d:7d:4a:d7:32:
23:b2:d7:20:71:e5:84:0b:2a:37:d2:92:b2:9b:ca:c1:be:49:
11:31:ae:fa:fa:c9:72:26:79:bb:fd:b4:2c:99:2a:2d:fd:b6:
cf:68:b7:68:1c:4c:15:d9:81:0b:d3:6c:19:36:8d:75:0c:42:
1b:d2:10:bd:2e:c7:f8:dd:61:68:74:c3:a7:85:af:01:8e:da:
61:75:2d:29:77:90:d7:fa:e5:e9:e8:00:95:cf:64:4a:ea:ee:
83:89:32:65:81:1a:ff:7c:44:0a:c3:43:8c:7b:2a:78:2c:ba:
39:8a:9b:7b:bc:25:59:ea:98:cd:ba:49:2c:f3:f4:93:82:a3:
37:e6:4c:6d:64:1f:a7:9f:2c:6c:1e:9f:8a:f2:18:a9:50:5a:
c3:27:c6:a4:ac:b7:eb:67:c3:93:b6:2f:eb:2d:1a:41:9d:ac:
de:ec:e0:cf:2a:40:76:38:7f:a7:42:63:26:12:58:4e:cb:c7:
57:ab:7d:54:02:8b:53:23:0f:d5:a9:0e:8f:d2:c0:80:7f:b9:
8a:61:02:e3:e6:44:ec:fb:79:da:35:d8:dd:8d:77:2b:6d:ad:
f6:96:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:52 2025 by rpki-client