Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: WNMZdiq0w4hwobvPH0o1pZhOmSNo6ocP1RnmELb6S0I=
Subject key identifier: D8:70:FC:68:B2:CA:ED:58:54:19:50:22:EC:08:BC:4E:0D:1C:45:29
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 0194BD85AC59A47D68C5B501B1146517518E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: neMYQNmg/dWQuFvt8KpTqmtB6Iwe7YTxG9M7jtKIifM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ac:59:a4:7d:68:c5:b5:01:b1:14:65:17:51:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=d870fc68b2caed5854195022ec08bc4e0d1c4529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:fd:97:11:33:4a:59:39:0c:5a:2a:2f:98:
f7:0a:b5:3f:d2:11:a9:8c:ec:78:49:41:65:2a:dc:
80:2d:0f:40:b4:cd:99:f8:00:ab:f0:e7:69:95:0d:
8b:ea:64:72:3c:0c:91:af:54:7d:17:19:5d:87:28:
f8:2f:9c:d5:e3:a3:cd:ec:9b:75:51:29:4e:e3:71:
20:c6:6c:47:f1:35:2e:5c:bd:a2:af:21:fd:dd:fe:
61:75:89:97:f3:02:68:45:f7:00:57:c9:76:7c:31:
02:3f:5d:1e:9b:50:43:7c:a9:2d:11:a8:6e:a0:f7:
c0:df:03:0e:91:bb:59:9c:c2:14:65:83:8b:05:ab:
38:e7:eb:28:5b:02:08:8b:26:d4:71:6c:76:2e:ed:
dd:73:a5:ac:c6:52:72:6b:16:4b:a7:d2:03:b3:d8:
44:4b:f3:4a:99:63:79:a0:7b:ce:2b:b3:a7:fd:45:
63:2c:b0:a0:51:c2:fc:5c:71:3e:ab:ac:1e:42:96:
03:e0:45:ce:f7:f2:67:7e:70:ec:95:3c:0f:f9:8e:
cd:55:17:9e:87:69:4d:71:32:f7:b4:3f:6f:f5:68:
a5:e6:a6:f9:09:c4:6d:cd:00:e1:b9:e2:f8:83:39:
b5:48:d6:f3:e7:e2:c8:06:de:dc:59:1c:19:b1:a2:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:70:FC:68:B2:CA:ED:58:54:19:50:22:EC:08:BC:4E:0D:1C:45:29
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:8c:59:7b:a0:3f:8d:56:6e:e9:57:ba:bc:c7:a0:87:ff:
ec:37:a0:66:2d:ad:10:3a:55:47:af:10:e6:4d:d4:a3:63:e3:
3a:ad:1f:58:74:26:4a:b1:af:ac:8d:d3:5f:9d:61:38:0c:da:
c7:a4:c2:7a:e8:4f:11:f7:7e:77:24:56:36:9b:d0:72:13:43:
cd:fc:3c:05:2c:f6:04:31:5b:ec:d9:c3:6b:c2:bd:e8:9e:9c:
62:c5:dc:e0:b4:3e:de:43:28:d3:a0:63:87:13:f0:82:c5:e8:
64:41:56:94:e9:55:6b:6e:76:bb:dd:c4:83:a5:fe:ab:33:3d:
4d:dd:ff:75:4f:54:ee:c6:a5:35:69:2e:e5:ff:59:cd:ad:0f:
56:81:f6:50:b9:78:a0:26:3f:f0:52:5f:de:e3:60:13:9b:07:
84:df:1c:71:88:d2:1f:f9:c7:16:47:43:b8:83:62:81:39:1b:
6e:7e:13:4c:08:8c:ec:43:31:15:da:27:0c:93:08:c3:03:69:
12:04:38:b3:e5:1a:20:c5:52:45:71:06:0d:33:76:20:a3:24:
0c:6a:64:fa:7b:4a:8d:a4:e8:f5:b9:4e:12:3c:94:72:36:8e:
2c:03:f4:8a:3a:8f:0f:b6:e9:27:af:4d:06:4b:4d:41:71:c4:
b4:3f:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:04 2025 by rpki-client