Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File: dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier: PIxywuSwJC/8smXg6XLu69bo624pp/v8IfGUkO8QtcQ=
Subject key identifier: 20:37:85:A4:6F:48:64:95:D3:92:FC:23:C2:93:D0:1C:D8:14:F6:C1
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer: /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial: 0194BCA991EF08DF1541E407633744776469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (hash: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=)
2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: bV9udjEZlBrG1NmGpk0fZwLjH5f+B2Tu3IS7pEQhjcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:ef:08:df:15:41:e4:07:63:37:44:77:64:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=203785a46f486495d392fc23c293d01cd814f6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:5b:0d:27:1e:08:61:c4:30:a4:85:13:30:
14:cb:bf:e9:bd:ea:7a:e3:06:76:57:80:db:df:2b:
11:f2:70:5e:ed:8f:b6:b6:ae:08:a9:bb:9c:d6:04:
ef:ce:0b:42:37:83:e0:3b:3f:59:68:ee:e8:bf:7d:
96:35:f4:ba:5d:6b:37:3d:b4:9b:9b:6d:a4:5d:a5:
14:6a:b1:fe:88:0e:08:ae:c6:3b:a3:5a:26:35:72:
a5:a7:ea:67:b2:53:66:c4:4a:00:01:31:01:de:b9:
46:a5:aa:ea:b4:65:04:25:02:43:fe:0f:ad:5d:d1:
99:b9:8b:b4:82:bc:a3:5f:f6:d6:48:7c:38:1d:0d:
6b:a9:d3:f0:18:ee:4c:33:a2:ec:f4:73:0e:e6:e3:
6b:43:3e:e7:8b:c2:2b:9d:e6:24:54:df:8e:b3:03:
c8:f0:71:b1:ae:37:bb:72:67:05:44:10:96:3b:6b:
28:ae:e4:44:83:6b:2a:c6:4d:3a:54:c2:2d:dd:99:
c6:c2:a1:be:ea:dd:05:d7:87:eb:a1:1b:76:ea:83:
8e:c0:4f:70:f1:d5:87:e8:2a:f9:48:9c:ed:a2:33:
b2:6c:6f:46:87:be:79:98:dc:14:70:b4:78:78:54:
df:6e:21:34:15:26:22:54:50:35:7b:86:87:9c:74:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:85:A4:6F:48:64:95:D3:92:FC:23:C2:93:D0:1C:D8:14:F6:C1
X509v3 Authority Key Identifier:
keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a7:d6:03:1f:8a:8c:7a:ae:13:0f:2e:ff:9c:b5:e7:f9:ff:
1b:51:91:c7:76:52:ee:2c:af:da:57:84:d4:8d:81:db:78:e7:
df:56:ce:75:b8:3c:16:dc:a9:cd:8b:5d:79:27:fb:1b:ec:01:
7a:40:6f:18:d8:3d:3e:21:4a:17:ed:0a:71:e5:d0:4d:a2:9b:
70:f9:c1:39:35:f3:d3:4c:fe:e1:63:d1:5c:53:7b:97:fa:31:
fe:d8:86:aa:45:2b:4d:58:f0:f8:7e:d6:b5:2b:69:85:6b:24:
9d:cf:2d:4f:fa:d4:ba:79:e4:e2:60:14:bc:24:10:bb:a0:b8:
b7:52:f6:24:78:a6:02:bb:c9:97:67:4e:cb:98:92:ed:1d:ba:
b5:14:a5:02:02:a2:90:0b:39:1f:96:a6:97:de:82:e4:67:4c:
b7:99:97:6f:fb:39:62:0c:77:d1:73:87:fc:80:d9:f9:9f:ff:
bb:ea:ac:94:c3:9f:f4:48:88:de:b3:a1:0d:1f:bd:96:36:9d:
41:82:09:32:5e:6b:f5:2b:c4:c6:c5:d5:f1:cf:bb:20:ca:d7:
4b:45:07:cc:c1:f0:0c:c7:4b:0f:9f:90:03:62:bd:ba:0d:ee:
c0:38:dd:b4:ee:00:f9:5c:71:77:b4:f4:4b:11:01:b0:c2:04:
6e:f5:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:00 2025 by rpki-client