Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
File: dOTD4A_D7u6TartSfjUuSvA96Js.mft (raw, json)
Hash identifier: Kifq05b/EwiLex194VK5SA2qxZWA4M1TFoPIB5SJSrA=
Subject key identifier: 14:E3:81:A7:3D:EA:C3:1F:19:39:97:B9:58:97:43:DC:76:2B:15:BB
Authority key identifier: 74:E4:C3:E0:0F:C3:EE:EE:93:6A:BB:52:7E:35:2E:4A:F0:3D:E8:9B
Certificate issuer: /CN=74e4c3e00fc3eeee936abb527e352e4af03de89b
Certificate serial: 0194BBCEFB46AF851D9F7B1A8D5D534D0EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
Manifest number: 0501
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: 4iizaOWv92HAURMQhMzwpM2GEpo.roa (hash: rW6XLFbBeUapd8kmjyoQ2PnXovsPjc0B/QhXcyyX2cs=)
2: dOTD4A_D7u6TartSfjUuSvA96Js.crl (hash: L5wDytGAUMB29NKQfKKYrzV1+rh44JTLF4VP4GZDm2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fb:46:af:85:1d:9f:7b:1a:8d:5d:53:4d:0e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e4c3e00fc3eeee936abb527e352e4af03de89b
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=14e381a73deac31f193997b9589743dc762b15bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:c3:04:cb:ec:ee:36:0e:65:6a:a0:29:ff:
d7:40:40:e9:b4:a2:1f:da:46:bd:00:0d:17:82:4a:
10:e5:06:12:5c:29:72:23:49:88:4b:d7:b0:7b:c4:
88:51:13:08:1c:50:f8:50:47:de:56:56:8d:85:13:
23:80:ea:88:24:42:ff:98:a4:f7:3f:77:32:f3:72:
4b:d1:af:57:41:56:16:bc:1c:6e:ba:bc:fd:31:48:
1f:c6:5c:6c:fa:3a:6c:e9:fc:b0:52:2a:11:fd:04:
5a:49:6c:ce:5a:07:1a:73:cb:ae:09:64:66:fe:e6:
c6:4e:ae:69:97:75:d5:a7:18:50:a1:76:25:b9:1f:
95:46:63:8e:91:ee:c6:76:ef:b7:59:aa:48:3a:b0:
02:cd:30:55:a7:16:c5:30:d5:5f:88:10:ac:f2:5c:
b2:5b:74:dc:67:df:db:e6:49:0c:ad:8d:c8:db:0e:
72:3e:54:3a:83:84:bb:08:a4:c2:ca:0c:a4:2c:5c:
48:f2:78:d7:01:4b:04:60:3e:fb:cc:8e:5d:1d:be:
18:fc:5b:0c:b7:89:72:70:8b:14:f9:68:e0:0f:96:
bf:97:5a:52:99:e1:d4:89:c2:41:c1:92:38:89:56:
67:08:79:e9:c0:21:97:3f:ad:ea:b3:10:ac:26:e5:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:81:A7:3D:EA:C3:1F:19:39:97:B9:58:97:43:DC:76:2B:15:BB
X509v3 Authority Key Identifier:
keyid:74:E4:C3:E0:0F:C3:EE:EE:93:6A:BB:52:7E:35:2E:4A:F0:3D:E8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:c2:fa:27:6a:f7:ca:68:c9:cd:3a:0d:7b:83:0e:b6:08:
ae:4a:88:eb:84:e6:02:2d:c1:cf:1d:8e:a7:1b:a4:69:24:7e:
cc:d3:01:52:5d:ee:55:19:06:48:5d:b6:92:3a:b5:28:2b:94:
0c:bb:b1:1a:64:4b:37:40:1b:25:b9:bb:08:91:69:29:6c:be:
ce:4f:f9:9b:e3:02:30:6d:8d:ec:7b:10:30:f6:d8:6d:09:70:
59:16:79:4a:1a:b7:1b:01:0c:31:7d:62:ef:ab:da:fa:ca:b1:
3a:e9:c2:a0:4f:3b:f9:df:c7:46:b8:21:61:d6:e0:12:2d:b8:
64:1f:5f:0e:3e:d0:c9:07:69:5c:57:4d:7a:da:07:d6:71:8e:
a6:3f:8d:c8:59:ed:92:38:4a:7b:e5:2e:e0:69:28:f4:71:42:
6a:69:50:0e:55:25:23:4b:f1:6c:1d:ee:97:be:d7:26:40:b7:
c1:ef:40:65:81:ba:15:93:20:a8:47:3d:06:bf:4d:00:61:fe:
c6:c4:c5:ea:04:fd:bd:e9:2a:87:9c:32:b8:9a:e9:ba:9d:31:
46:9b:66:a6:0f:16:4c:d8:fc:99:cc:8d:57:30:4f:03:d9:ee:
8f:11:0a:29:10:20:65:03:b6:9b:18:3e:38:a9:3d:b0:66:69:
c6:14:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:06 2025 by rpki-client