Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: AXT1n0gYo+T+FRJC0KPmvtHLhI5Iikehrn7YY+cwd9Q=
Subject key identifier: E2:3F:52:0D:5A:89:4B:B1:AE:7E:3C:0B:C3:F4:05:45:47:E3:12:DC
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 0194BC04C3C0C0163DB6D6E6A74FD437EF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: 0JL4UAvPU0qWn9XgVW5NIeRmh7S379mFO8rmj3dX2dU=)
2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:c0:c0:16:3d:b6:d6:e6:a7:4f:d4:37:ef:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=e23f520d5a894bb1ae7e3c0bc3f4054547e312dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:be:7f:29:db:7d:00:84:54:42:6c:74:42:
70:6a:0b:24:3b:c9:a5:80:e2:5f:96:cb:63:09:6a:
ea:22:c9:a2:11:79:a4:3b:9d:19:79:a6:b3:73:11:
2d:86:8f:e4:ab:63:04:e4:ba:9c:ae:cd:95:51:43:
dd:4b:de:71:9d:cf:53:a5:63:b9:45:73:31:a4:ad:
24:0d:c0:1b:e5:ee:a3:66:2f:de:b2:31:50:f8:e0:
54:5b:1e:b5:97:1a:7b:f2:aa:2c:6b:62:40:40:d8:
d6:ed:09:e5:77:76:c4:29:d1:52:75:b1:95:43:aa:
e5:44:33:60:4b:79:c2:41:aa:a4:c9:5c:16:99:46:
ae:8a:63:c6:0d:79:fc:88:d1:3e:72:28:46:bd:f5:
65:1d:de:83:05:9e:67:81:52:d1:09:35:6a:92:07:
f0:b0:4b:0f:72:bc:bf:14:8b:73:27:42:9e:eb:90:
5c:fd:1a:a9:07:50:0f:54:d2:bf:69:2c:07:ca:95:
e1:a2:f2:a4:27:2c:66:94:ee:e2:cf:e4:63:6c:08:
26:8b:72:b8:e7:56:37:31:d8:9c:33:68:bf:ff:8b:
b8:d0:ef:ed:6e:20:e2:15:c7:1c:1c:e2:64:64:61:
10:46:b0:fe:aa:22:b7:d9:07:93:17:31:ad:68:73:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3F:52:0D:5A:89:4B:B1:AE:7E:3C:0B:C3:F4:05:45:47:E3:12:DC
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:78:9d:4a:81:9b:12:35:bc:1b:e1:b7:fa:5f:33:e4:23:30:
81:76:2e:ff:21:45:77:77:ef:b5:e1:d8:5e:cc:fb:a5:8d:6a:
34:53:53:4b:6e:86:d1:9b:d9:2d:ed:5b:04:4b:2a:b1:3b:ed:
e2:06:af:61:8a:43:ef:db:0e:ce:db:2c:5f:1b:85:67:98:45:
ef:57:d5:48:d1:06:1a:bb:17:fe:f4:37:da:25:9b:55:c8:b4:
de:c0:ef:c8:dd:0d:80:2a:d5:68:85:93:0f:65:a9:52:6a:db:
65:d6:a1:d2:37:54:b6:ac:cf:e9:62:3a:5f:d4:ab:42:9d:4b:
4e:5c:a0:7f:18:41:4e:47:f5:5d:57:df:42:dd:20:c8:c8:96:
08:b5:82:ea:f9:c9:ea:aa:f3:94:dd:31:a0:16:42:78:21:c5:
d7:39:2f:af:3b:5d:67:e3:8c:b8:a8:37:ea:0d:5c:4e:39:a5:
c5:58:a2:3b:24:22:7d:50:62:02:94:bf:fc:9c:da:20:62:08:
52:8e:ce:72:4a:38:68:2e:4d:94:ef:5f:54:c1:38:48:76:e0:
c4:71:90:29:91:ce:5e:30:c2:2e:d3:72:20:17:a4:88:8c:25:
40:d9:83:7f:8f:f7:4a:5f:1d:d6:e2:c6:2f:9d:de:8f:b7:ea:
aa:fd:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:11 2025 by rpki-client