Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: GlnbtYTHxjToggMNdh9alDdnchzOfsiVADAVkhl1TyI=
Subject key identifier: EF:9B:1D:FA:56:D3:13:25:DD:C8:A4:72:A6:76:D8:F2:CA:FB:B9:A7
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 0194BD178A7CCC5F5CB0EF22BD35034459BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: aCRcgHX/W6t1cu9US9n6K4qhulh25uTYsb6/i5zww/U=)
2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8a:7c:cc:5f:5c:b0:ef:22:bd:35:03:44:59:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=ef9b1dfa56d31325ddc8a472a676d8f2cafbb9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:99:1d:da:d1:84:41:79:bd:19:7e:1d:3b:7a:
99:2f:24:cf:d2:1d:d1:3b:70:16:db:c2:d6:e8:47:
a7:8d:e1:1f:fe:b6:0f:85:37:a3:85:2e:cc:a7:cb:
50:eb:7e:e1:8e:8b:36:ee:83:ba:fa:36:8e:d9:0f:
09:02:ff:94:3e:27:22:09:e2:c0:05:18:54:24:10:
74:e4:a1:6c:4c:31:70:35:e9:4b:26:0a:0a:f3:a8:
46:ba:cc:fc:b2:27:2c:0e:47:07:d6:3e:d4:66:e7:
54:77:41:96:53:93:e5:42:2b:91:3c:be:e2:47:d9:
5b:58:14:67:7e:84:d4:10:5d:f8:d0:f0:01:a2:27:
40:e9:e0:2a:a0:a2:9a:85:be:b7:de:1d:77:4f:cc:
da:7a:36:9c:7a:02:64:6b:bd:7f:04:f2:82:cb:f4:
f4:cc:24:f2:ff:f8:b0:bd:59:16:ce:24:bc:13:d9:
f3:81:53:6b:9f:12:fb:32:df:38:26:40:1f:df:9d:
95:70:17:20:a2:0f:b1:08:c4:27:30:b0:9b:26:4b:
93:8f:db:b9:23:34:e8:fa:97:ba:d7:d7:3b:4b:fc:
c5:f5:2c:d7:21:ab:3d:9b:57:5e:3b:36:a8:30:a4:
3b:55:5c:9b:4d:76:00:e3:0e:98:5a:60:da:f3:1c:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9B:1D:FA:56:D3:13:25:DD:C8:A4:72:A6:76:D8:F2:CA:FB:B9:A7
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:36:13:d1:6a:7e:ad:47:f9:1d:6e:95:81:7b:13:6c:f3:9f:
2f:ca:37:b8:f7:d5:43:d1:60:a5:1b:f7:ca:36:c3:69:27:68:
5c:0d:ee:c7:9d:18:50:03:38:3d:47:39:a7:e9:aa:c4:ca:91:
da:c9:e3:d4:fd:3a:4e:44:ce:0c:6f:1c:d7:f8:65:28:a2:8b:
4f:00:f9:7a:42:44:5b:c1:ef:f4:e9:c3:b7:33:27:e7:f6:cd:
a5:c4:e0:ea:6d:ce:cb:20:ce:30:4a:4a:66:c4:4c:8e:9d:62:
6c:81:a2:10:cd:d7:53:49:6e:a8:43:31:f0:39:d0:76:ba:8c:
9d:f0:36:25:0e:09:77:1c:ce:35:fb:62:bd:82:56:e7:d0:6c:
55:54:ba:85:dc:bc:07:b7:38:e1:01:d8:aa:9d:ac:c9:bc:00:
c1:45:a3:b3:70:8a:56:59:bf:19:0b:78:ee:ab:af:0d:59:d5:
ea:af:4d:f1:95:6c:d2:e4:44:c3:23:f5:94:02:9a:73:d6:fe:
00:d9:96:4f:c2:6f:dd:47:82:a5:04:4e:5b:11:62:14:e6:0a:
dc:de:08:ca:cb:be:1c:ab:bb:ba:8c:c1:8b:d1:5d:50:33:e4:
9a:cd:d6:0d:18:99:d2:a6:07:42:39:52:9b:3e:0c:3e:83:a7:
af:a8:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:03 2025 by rpki-client