Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: 7uCVjVonLQHSqlWHNB3h7cjJODZ5b/9svC5bI7TNg3w=
Subject key identifier: E5:A3:E0:1C:DA:6B:80:2E:39:91:2D:B7:55:E8:D2:EC:61:58:5C:0C
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 0194BC3BE3AEDF8994EA73D926B983AF0F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 107D
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: ZgDwmmcvc1DAcRIct32MKvBXTScvNihubfbncL4pg/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e3:ae:df:89:94:ea:73:d9:26:b9:83:af:0f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=e5a3e01cda6b802e39912db755e8d2ec61585c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:1b:9d:29:2b:1d:5c:67:6d:a1:80:35:db:
47:55:b9:35:82:0f:01:dc:80:cb:a7:3c:7b:66:a3:
09:ea:60:bb:7d:61:74:2f:48:78:f5:e5:f4:a8:37:
17:56:18:c6:16:25:af:0f:e6:a9:d3:c4:06:bc:15:
e7:44:25:63:16:04:ba:b6:78:90:ac:83:d3:4f:f2:
82:19:ff:d6:7d:84:23:a5:0e:14:8c:54:c9:6a:90:
a8:16:a9:2b:b1:4f:4b:ab:61:2c:1b:db:55:8d:82:
b2:9b:72:c8:b0:49:41:a6:99:f2:14:e9:0c:2f:12:
14:0f:69:2a:be:41:10:cc:94:98:d6:17:4e:ec:ee:
06:85:c2:bb:cf:fc:49:25:8e:c6:23:1d:40:2e:5f:
41:ea:d8:e5:4d:02:af:fc:71:ce:fe:6b:9b:12:10:
91:85:ae:de:7f:64:a3:6d:eb:45:52:d0:1b:c2:eb:
4f:20:32:91:71:ed:70:d7:15:f4:5e:86:8e:2c:ae:
e8:8b:ac:13:93:f1:0d:cd:36:2e:4a:ed:47:41:92:
91:3a:8c:f1:2f:21:ab:3a:c9:cd:3e:e1:1f:e0:de:
8e:b8:81:c8:3c:13:cb:48:47:b0:83:d0:c2:e2:dd:
88:ba:18:b5:81:07:8d:4d:58:8e:dd:0b:49:5f:f4:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A3:E0:1C:DA:6B:80:2E:39:91:2D:B7:55:E8:D2:EC:61:58:5C:0C
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:43:53:11:0a:e7:29:6a:3f:d2:07:c1:a0:42:98:10:73:02:
8e:88:39:65:3a:81:90:f8:15:de:a6:4b:fb:b9:71:14:1e:ee:
0e:63:ed:7b:6b:38:1b:6b:7e:36:ed:23:23:f0:08:5c:58:56:
8e:61:a9:be:c0:38:c9:35:d9:32:38:bc:f4:65:50:1b:62:a3:
3d:97:41:8f:5f:fe:d3:08:d1:e4:76:af:25:cc:de:42:fb:a2:
d4:2f:d4:75:84:66:38:fe:b2:75:97:71:7f:18:fe:ad:65:38:
14:20:cc:9a:70:43:2e:d7:19:4c:c7:56:a0:d3:e9:69:ab:91:
75:10:65:08:2b:86:8d:39:5e:08:00:e3:48:9d:9b:6c:1e:e8:
46:89:dd:e0:4d:5d:2b:4f:af:41:83:63:ca:0e:3a:39:47:8a:
fe:ef:1d:d9:a9:07:09:dd:44:5e:87:cf:62:c4:c0:fb:65:f1:
d5:82:9a:c4:c0:25:75:cc:22:5b:e3:ff:fe:b1:b8:72:35:7e:
ba:98:08:8b:8a:60:c7:47:85:3e:ff:1d:a3:1c:db:e9:a9:3c:
c2:c4:48:df:e6:be:17:84:ef:f1:cb:9d:da:e3:cb:70:2c:b4:
37:d4:e5:46:85:2a:82:f7:6c:76:99:56:0f:9c:36:d7:2d:d7:
4b:04:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:51 2025 by rpki-client