Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: 1IKJYzXgkk9BVJEX8AQQIY9X3E8G6hN89y416ICv/Ac=
Subject key identifier: 0A:89:56:9F:9F:B2:28:52:8F:C5:19:18:E6:5B:04:D4:A1:B0:87:09
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 0194BD853663711E7114C0794313DCCFF369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: AigU20OBrGFeixa1kGI/NG7CNZpKzTszx9QlpitGS0o=)
2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:36:63:71:1e:71:14:c0:79:43:13:dc:cf:f3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=0a89569f9fb228528fc51918e65b04d4a1b08709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:9e:e6:ac:13:e5:58:7a:90:cb:ae:1e:47:
45:d5:65:47:f9:70:05:9e:ef:57:dd:d4:e7:b5:10:
9b:4d:0f:04:7f:a2:8e:67:06:44:4b:49:03:5e:37:
ab:f4:e9:38:35:2c:03:d8:b4:97:64:f8:6d:15:af:
cc:ce:09:7a:07:7c:da:e3:1b:20:a5:31:8a:89:45:
e8:2f:db:d9:24:4d:42:49:a9:f1:6a:3d:f9:86:d3:
b4:9c:75:d1:92:35:36:4e:73:b8:90:19:73:b7:97:
1b:70:19:4a:75:e4:00:06:4e:39:57:f4:5b:6f:fb:
2a:34:39:e9:8e:b0:ec:fd:bd:62:86:ab:59:6a:16:
ea:d5:76:3b:93:c4:bc:3b:af:b1:eb:d5:25:47:ea:
be:e4:d8:0f:33:53:37:e9:fc:07:b0:65:0d:f9:66:
36:cb:35:94:8b:5f:4f:73:4b:77:ee:49:eb:81:9c:
ef:aa:e6:37:82:66:a8:ff:a6:4d:df:93:da:8e:f4:
5b:ac:a6:ac:e5:38:e3:00:81:c4:5d:91:94:7a:cb:
6f:a7:18:f4:06:c8:19:3e:07:74:a5:ad:45:cc:3f:
f1:09:55:d0:b5:60:e4:6c:a2:9f:57:70:1e:2d:c1:
3e:54:8f:60:ee:8c:23:4e:da:fa:ba:2e:e0:91:68:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:56:9F:9F:B2:28:52:8F:C5:19:18:E6:5B:04:D4:A1:B0:87:09
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:92:0c:6f:b6:77:0c:42:b8:2b:13:28:06:d2:fa:f5:6e:6d:
76:19:66:62:f6:73:b0:87:78:2d:3b:70:8d:0d:90:aa:b4:ac:
ab:63:9f:a1:65:5e:1a:e5:3a:de:e3:de:1f:ff:d4:65:6b:eb:
1e:d2:9e:35:b2:df:4b:d3:12:10:9d:51:16:18:1f:10:f1:7e:
f8:af:f6:2f:cd:ad:33:45:a4:1f:13:e4:ef:ab:40:80:6f:10:
62:0a:98:86:fa:7a:c9:48:1c:0c:ba:21:10:90:29:cb:b9:ad:
d3:07:18:4c:df:3c:ac:ec:61:2c:3d:c4:bc:c3:41:f1:82:49:
b3:b4:e3:64:bc:64:e4:7d:5e:6c:ea:18:cd:42:19:06:13:99:
d6:49:17:a1:a9:b4:65:82:27:45:05:40:c9:5f:dc:e2:74:83:
8e:fb:f2:b2:b5:4d:7a:8b:53:94:0f:64:7d:6c:83:52:03:24:
7d:58:40:da:5f:86:bd:50:30:ce:15:d4:5d:ba:30:e4:10:9d:
c8:2b:91:87:89:a4:1d:02:64:c2:9e:81:dc:d5:d3:0d:5e:3c:
c1:44:2c:8b:71:f5:80:b8:1a:3d:d4:bf:83:d6:31:1f:de:fe:
b2:08:0d:b3:47:50:a1:c5:bc:aa:93:8b:c6:ff:17:f4:1f:da:
94:55:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:56 2025 by rpki-client