Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: VgB8/y1NU5Modc/MGkmW5uBU9Hh8O6D4ClvHgyyi2SU=
Subject key identifier: 09:06:F4:66:22:EE:3E:61:05:5C:4F:F6:C3:4A:45:35:80:BC:C4:97
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 0194BD853678574C9FF5115C0424686E5C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: nUwNr4qQ6Q66Kc//QQAMPiimviLdxV4P0ATWUrdJLp4=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:36:78:57:4c:9f:f5:11:5c:04:24:68:6e:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=0906f46622ee3e61055c4ff6c34a453580bcc497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:45:12:64:e8:b7:64:f1:a4:d8:7b:bf:6b:
ea:1f:a1:91:59:21:7c:2b:16:9a:7f:ec:79:97:90:
b0:fe:51:56:79:8d:e5:28:59:7e:4b:07:92:d3:ff:
6d:22:d5:13:93:22:e8:e6:dc:74:37:aa:80:78:08:
28:22:a0:0e:59:b2:81:14:3d:46:8d:84:4e:e7:cf:
89:b8:0f:f1:18:8e:3d:bf:8d:37:d2:2f:22:87:b2:
a3:76:e7:54:43:1a:4d:fa:6c:8c:cb:98:1f:33:12:
7c:84:d5:8a:4c:45:36:72:b7:e3:c4:97:cc:28:93:
c5:73:c9:b0:44:f4:10:3c:6f:6b:f4:ca:65:06:50:
e0:3a:d9:5f:49:59:56:a4:5e:3a:49:a0:d8:09:5a:
6b:04:bc:fd:99:e9:97:7d:8e:ae:2b:46:51:62:8e:
3e:c5:b5:36:51:a2:06:42:06:61:73:ca:25:ce:f9:
06:84:ce:ff:16:56:3a:15:73:5b:57:5c:77:09:85:
67:7f:cd:93:80:1e:e6:25:b0:3b:37:bc:0b:d8:94:
c8:05:a3:ef:b2:af:4f:f7:6c:11:6c:36:d4:7d:59:
3f:2c:ed:ef:69:2c:7f:a3:6c:4c:28:bd:c7:6f:71:
70:2d:1a:19:13:c2:73:1a:46:01:18:bb:88:b6:51:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:06:F4:66:22:EE:3E:61:05:5C:4F:F6:C3:4A:45:35:80:BC:C4:97
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8d:6e:e1:23:37:48:94:2b:d0:21:c3:4f:a9:45:b7:6f:60:
3f:f6:57:78:3b:99:30:1d:d9:fe:67:43:f9:54:5e:b2:96:52:
7f:08:96:16:fe:41:ef:29:82:06:9d:23:ab:c3:e2:bf:38:66:
ef:a8:9f:3d:cd:e4:41:5e:76:99:2d:32:af:b4:5e:6c:9f:30:
c9:69:b4:bd:97:1d:e5:b1:23:93:8d:56:d8:e1:7a:3c:6c:be:
c6:37:64:eb:4a:76:cb:19:40:78:17:dc:54:18:50:3e:73:bc:
c4:2b:80:31:2f:49:1c:5d:14:57:00:c2:ee:68:70:bd:ae:5c:
8e:45:2c:e4:3b:c0:21:72:51:8e:91:b9:63:41:dc:21:ec:a8:
04:29:3f:fb:7e:e0:08:ec:4c:30:59:7e:1c:a2:97:ce:2f:fc:
c2:79:f7:a1:a0:eb:75:bd:c9:50:72:f6:cc:8b:c9:15:33:f4:
f2:70:f4:a5:65:6e:f0:3d:d3:61:4e:57:d8:5e:d6:3c:df:8e:
b1:5e:05:e5:01:23:c9:89:64:18:97:56:73:a4:98:ea:61:92:
e4:0f:84:d5:f2:be:10:c1:60:7f:ef:00:30:af:e6:e0:ba:cf:
31:67:b7:31:c6:ca:1d:f5:27:84:ee:0b:2c:61:5a:e4:bc:f0:
ea:b2:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:38 2025 by rpki-client