Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: Y3Q9d9MEdPxmlbDGbpeDFbygR3UZym5lhFr40CROfuY=
Subject key identifier: 13:04:AE:30:5D:51:FC:41:BE:83:09:79:F4:20:6F:C5:CA:C6:D7:95
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 0194BBCE6FACA44FA48C5CB262AB2DF44407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 13A6
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: 8jcSGUhd2TEMR0nfEXxvOFB7RHLcocDC6iu+hOjjrKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6f:ac:a4:4f:a4:8c:5c:b2:62:ab:2d:f4:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=1304ae305d51fc41be830979f4206fc5cac6d795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:d5:65:eb:d9:d6:da:2f:39:5f:bf:e2:18:
74:e0:9c:ee:17:04:ef:4f:ca:7b:be:5b:4e:40:7d:
f9:f6:a9:b4:7e:35:30:78:1c:be:8e:52:0a:3f:ca:
83:44:86:5c:77:05:a1:66:ac:b7:8e:22:80:b5:9f:
f6:fc:18:e2:05:d5:57:53:f8:34:20:27:90:37:06:
0b:90:a9:e5:72:0c:a0:90:76:0e:ec:e1:04:3d:81:
32:d3:35:94:e0:11:10:e4:c5:30:93:3e:8a:ef:83:
89:2d:d5:39:69:f7:5e:a0:a5:74:a6:72:3a:ef:64:
a1:11:b5:e4:db:ca:ef:10:c0:d4:13:d7:f0:0e:d3:
db:b6:e2:30:42:61:e3:f6:80:67:31:70:0b:cd:e7:
6e:8d:7d:cb:a7:02:61:f1:29:e8:fd:c9:a9:41:85:
42:7d:f1:c9:f7:ec:7d:d9:19:ae:0a:7f:b6:c4:5b:
a1:80:79:51:ea:df:be:7b:4e:da:fe:f8:d1:1d:6d:
86:1e:a1:7a:dd:66:3d:87:a2:34:5f:80:6f:3c:86:
ca:ee:dd:ea:41:27:7b:65:40:30:91:a6:f6:4a:c0:
39:0b:07:e4:15:19:95:ac:69:bd:e8:ef:e5:87:b7:
c7:f5:c5:eb:64:70:52:73:49:a3:8d:6b:ca:04:30:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:AE:30:5D:51:FC:41:BE:83:09:79:F4:20:6F:C5:CA:C6:D7:95
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7d:70:bc:bc:75:84:10:91:ee:53:b7:5b:fe:d2:40:0a:86:
1a:1b:e2:3e:16:1d:95:d4:ce:a1:16:59:23:57:9a:3e:ca:d9:
39:94:fd:f1:e1:56:4d:73:f5:22:a4:fb:c1:bf:04:71:b7:8b:
c0:fd:47:f9:2f:94:eb:f5:18:08:1f:ed:0a:60:d0:37:c4:18:
33:ef:ad:f4:12:bd:1b:af:a4:f2:25:b6:c7:c9:20:7b:fc:2f:
c1:31:63:c9:fd:6f:d2:43:b8:56:12:38:ed:f1:ad:ed:b4:8b:
6d:8a:ca:f0:7a:b4:ea:55:4c:5d:12:44:c2:bc:b9:81:d6:1e:
ab:d8:8d:cf:d6:9f:e4:de:f4:09:7e:c9:de:5c:e2:03:74:4e:
84:c9:b7:05:89:7f:3e:0f:fd:b9:64:da:ec:7f:3a:cd:12:2e:
64:33:b4:a9:3f:a6:d3:b9:4b:81:52:11:df:95:a3:19:bc:12:
da:6f:e2:66:f2:aa:2f:4c:bb:4b:20:19:d0:dc:17:dd:6c:38:
34:2a:77:3e:08:67:a6:42:f8:5f:90:87:8d:e4:67:82:79:9b:
61:1a:b5:cd:96:93:21:4e:a0:94:fc:78:9b:7b:f3:43:12:6c:
bd:08:bd:05:27:7b:80:7e:e2:39:12:6c:b4:15:84:16:a4:a1:
d7:e8:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:22 2025 by rpki-client