Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: k8GsXXNtbcK37KhMFTGBszzC5vFxS0oKioqyQO7hdOs=
Subject key identifier: D0:F3:8F:3A:57:D8:17:AA:9F:A4:89:AD:63:66:84:BE:E3:60:17:75
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0194BC72BB40903916CB8EB81BC4462F8E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: iiUhGtkQ6fS44kS0HDrit6VAUTbG+CHSOdWydVfljbY=)
2: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (hash: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=)
3: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bb:40:90:39:16:cb:8e:b8:1b:c4:46:2f:8e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=d0f38f3a57d817aa9fa489ad636684bee3601775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:55:96:a8:da:23:67:d6:a0:0b:f0:0a:2c:
1e:7a:ec:1a:3f:04:4a:74:dd:10:8b:c0:cd:f0:f2:
a9:39:6c:db:57:a8:27:91:6e:11:4d:0b:7b:a8:c5:
df:dc:ca:19:b0:0c:41:3f:ec:ee:7b:b2:a1:01:71:
ce:3c:52:4e:6f:02:ab:4d:2c:93:11:c7:73:36:58:
21:d6:2f:df:25:46:1e:67:ae:8e:fe:9f:07:b8:06:
a5:02:96:ba:83:60:8e:7e:f5:43:70:58:f6:be:ea:
ea:17:48:77:22:42:b2:44:b4:0f:2d:7d:bc:d2:75:
a1:60:65:84:ca:54:5a:64:c9:4e:a1:55:dc:a0:6e:
1f:c5:96:30:5a:8d:97:52:6a:aa:50:a1:e1:a9:ba:
a5:ee:66:4e:48:11:57:7b:96:e9:41:09:e6:ee:b2:
51:e7:89:a1:0b:06:e4:9b:2d:b2:6e:6e:bf:ea:7d:
91:1f:a1:b8:0a:d3:79:63:ce:86:d8:45:e6:53:88:
79:dc:ef:c4:ad:cf:21:91:ce:79:b0:1a:7b:14:c8:
4d:4c:91:9f:e7:64:69:f4:92:11:ce:18:c2:10:b0:
3c:1f:69:af:4f:7e:f1:91:53:b6:d9:27:c7:7c:57:
2f:4f:f6:60:c3:62:ab:34:15:b1:da:3b:10:26:42:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F3:8F:3A:57:D8:17:AA:9F:A4:89:AD:63:66:84:BE:E3:60:17:75
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:90:55:f7:bd:b0:7a:8c:d9:a6:28:dc:48:30:63:3a:65:53:
e8:b8:2b:62:ab:28:a8:e3:ba:f3:fd:55:64:1e:38:38:a7:57:
6b:75:2d:57:a0:50:35:a2:31:82:03:d2:36:5f:16:6b:45:d9:
f9:9d:e9:bc:ad:c3:52:25:b6:cf:cb:16:2a:d6:6e:33:22:87:
17:fc:e8:c8:bc:67:ed:24:40:1d:cf:60:c3:bb:72:e8:f1:99:
20:1c:ae:44:67:56:ea:b4:f5:57:5a:dc:a2:3c:c5:dc:f9:83:
a5:5b:7c:20:39:c7:a9:b2:97:23:85:8f:3b:b9:06:fd:68:44:
f2:60:ee:ae:f5:c7:16:61:57:31:8e:6a:07:1e:3a:a7:cc:ea:
a8:be:bc:b3:28:2d:52:a0:7c:71:2f:f9:d0:25:c7:71:a2:1b:
63:d0:86:1b:0c:e1:f0:13:fb:d2:58:87:e9:2c:a0:05:bc:fd:
ee:75:2e:cc:c2:b2:c8:8a:25:e0:77:89:5c:04:ae:bb:dc:14:
f2:f1:45:65:8e:0c:62:85:5a:88:91:d3:ad:f1:f7:f2:13:31:
4d:82:96:46:64:4b:8b:2c:1c:dd:36:d2:5f:bd:19:51:95:6c:
b4:f2:58:46:55:70:54:0a:08:24:0a:e2:74:c2:ae:8d:34:00:
44:70:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:43:57 2025 by rpki-client