
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: xkQiEY2E3oSrwfBf7GbhEKVW/dDnm7G2CT0Jo1VQOHE=
Subject key identifier: 56:6F:AB:8D:C1:2C:AB:C2:A1:92:A0:99:C6:01:F5:F9:35:CB:EA:39
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 0194BC72EF67D62389DFA92B8033495B3487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: nIFrJ/2B/9HVk+SW8L3/64R/1Bkj+EudXqDnZvaFmFY=)
2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ef:67:d6:23:89:df:a9:2b:80:33:49:5b:34:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=566fab8dc12cabc2a192a099c601f5f935cbea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:f9:15:ab:3b:ea:9f:82:02:d4:4f:99:7c:
0d:0d:05:68:5f:9a:22:9b:22:40:99:7b:18:21:f3:
01:08:0a:d2:24:e4:9a:f6:e8:40:68:c2:77:b1:0c:
12:8b:52:11:24:51:76:19:83:8c:e3:21:6c:79:8d:
3a:f5:dc:42:63:01:79:fe:f5:d5:7e:9d:10:46:94:
5b:92:16:6b:8f:42:9e:64:b0:e1:cf:2c:6d:6d:f3:
ef:b3:46:79:c9:20:c2:af:d1:1a:1d:96:f2:30:56:
38:a6:ea:df:9e:c7:37:2c:4e:be:67:8b:e2:e5:f6:
df:f5:9b:5c:fd:ec:9f:c4:f4:dd:06:8b:15:6d:aa:
ba:b3:f1:17:77:3e:ca:27:22:6e:40:bd:e2:ae:93:
6b:ec:9c:b5:03:4d:95:19:9f:c9:8b:1e:ce:df:fc:
e0:4d:8b:4f:bf:c9:cb:d7:6a:b3:13:21:b7:56:0f:
ed:72:b3:b3:db:53:9a:f6:de:97:81:de:ab:82:dc:
9c:e1:6f:8d:f4:44:ea:2e:f4:c9:18:42:32:66:50:
52:75:7f:d0:80:d7:55:de:40:60:68:9b:64:79:73:
80:1a:6d:67:c6:c0:c9:5a:5f:52:98:fc:93:f2:72:
ab:7c:4b:f3:8c:c8:4b:00:2c:ec:db:cf:bb:3b:9c:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6F:AB:8D:C1:2C:AB:C2:A1:92:A0:99:C6:01:F5:F9:35:CB:EA:39
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:72:5b:9e:0a:8a:35:cc:08:90:b2:de:4e:27:51:fb:fb:
26:43:9e:ad:3b:c2:1e:d1:7f:29:44:89:b4:40:50:f8:17:00:
fd:ee:55:7f:27:94:84:81:ec:ea:3e:25:52:65:e3:68:96:4c:
44:c8:6c:7d:56:2c:46:bc:34:f5:88:db:71:96:53:b7:df:9c:
66:9c:1c:f9:ee:ad:b8:2b:ee:89:a4:e1:6a:e6:26:4a:11:86:
df:c7:45:a1:a0:20:01:39:0e:a0:ea:67:24:11:2f:aa:84:10:
3b:1a:c8:b3:c3:49:7a:e6:46:43:c2:27:94:df:7d:56:ff:5f:
2a:22:42:01:7e:f2:7a:a6:33:72:03:e7:13:b7:14:7c:7f:df:
06:bc:70:bf:fc:e7:03:be:fa:0f:0a:4c:81:78:ea:21:8e:0c:
ab:c8:db:d3:21:4e:86:29:82:79:32:e4:c6:17:31:6a:75:e6:
12:ad:48:5b:39:36:b7:a7:b4:8d:72:09:dd:2b:77:19:cd:ea:
e9:31:87:08:c4:8e:52:b7:0a:0e:0b:72:94:f4:98:24:78:18:
bb:05:92:66:dc:07:94:bb:c7:13:b6:25:4d:a3:c2:c6:13:ba:
1f:83:a7:d7:cc:e9:34:d7:ae:1d:ce:6a:44:46:a6:3a:25:96:
2b:35:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:06 2025 by rpki-client