Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: TmZcGOOxIZmD6G+jKrK3Zu+1Y40Ns83PzJ6RUcA8FyM=
Subject key identifier: B8:04:04:55:21:FD:48:46:67:6C:77:BF:39:F4:CF:6F:34:77:08:45
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 0194BD4E74E3A833350CA7AFFF6E48F0827A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 03D0
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 7ZY1Q8mS5q8z2UfLPJc5K6uKZQo.roa (hash: jj4WM2xy5po+h+orIYLAd72AyCd84wAZcTm4AiOOtow=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: XbdkcFOEs8Fii4t/ufGhBirHIuJaM0mie+WTw6wTNx8=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:74:e3:a8:33:35:0c:a7:af:ff:6e:48:f0:82:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=b804045521fd4846676c77bf39f4cf6f34770845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:67:c9:de:f1:0d:52:ad:e4:8b:09:95:65:
c2:e6:b2:91:c6:90:5c:8a:5d:9a:14:52:01:7f:fe:
c7:ff:00:7c:cd:37:b4:0a:69:b1:9e:34:e7:5a:34:
7d:0d:c0:91:5c:be:e8:fd:32:f5:2d:21:c7:c5:fb:
64:d0:97:c5:85:70:47:56:b4:d4:13:7f:3a:31:4d:
3e:a3:a5:50:68:07:9f:5a:89:27:f0:eb:a4:8c:a8:
86:5d:e8:26:bd:dd:a7:1c:af:58:54:a0:1d:71:c3:
b3:4b:17:32:4b:d4:28:1d:47:68:a6:a9:e2:15:b3:
42:4a:1a:57:31:23:08:f3:51:2b:01:d1:01:12:6f:
2e:c9:2d:96:74:86:6c:0b:2e:c8:2d:4a:45:ca:a6:
12:83:75:d4:d9:6d:ea:72:49:a8:f4:ec:67:c7:c4:
80:ce:1e:ef:9f:55:7c:53:90:bb:1f:bb:1d:ca:52:
1f:1c:51:9e:af:1a:bf:0f:ad:56:6c:ab:0e:45:23:
49:39:5d:6c:35:9d:4f:ca:04:f7:c9:13:cf:19:8f:
17:e3:b4:bd:f3:d7:7e:8a:b0:48:62:7a:5a:1e:b8:
18:58:8a:cb:9b:df:f0:06:05:e8:96:da:12:ef:fe:
e4:66:d3:96:68:3c:d1:cb:96:4e:87:4e:11:46:9f:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:04:04:55:21:FD:48:46:67:6C:77:BF:39:F4:CF:6F:34:77:08:45
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8d:46:5a:f7:39:73:19:90:ca:bb:bf:f3:9e:16:f4:5c:b4:
f3:8d:2f:e6:de:d3:5b:29:3b:0d:46:27:ec:93:94:25:0d:44:
42:21:f4:7e:29:73:cc:65:ba:79:43:b9:38:e9:aa:51:ac:7a:
3d:c6:ff:8a:4d:d5:3b:59:60:02:00:ac:1f:65:b7:c8:41:29:
1d:27:66:a0:cb:74:03:67:20:d6:8e:ff:73:78:ad:49:16:c0:
45:4c:74:57:7a:b4:8d:fe:7f:a5:b7:67:bb:ba:66:da:0b:3f:
18:cb:fe:f5:ee:1a:77:08:12:6d:ee:37:7e:b4:02:90:e7:f2:
3f:79:d6:84:17:90:8c:ef:e0:88:ac:b9:43:91:f0:bd:49:4a:
04:24:c1:26:40:c8:5d:d2:aa:26:cf:7c:09:04:33:2d:87:97:
ac:33:af:34:5b:94:e5:12:6a:ae:a0:f2:5f:28:b1:6a:5c:0b:
33:79:90:ce:ec:aa:36:a9:5c:49:cd:b3:9f:f4:83:a7:e3:9b:
58:73:5b:2c:33:5d:94:3d:d6:8a:ac:60:e1:39:24:4b:5d:90:
95:a9:bb:52:ca:43:3f:ff:22:57:fd:8f:47:a4:e4:72:2f:33:
b6:87:5d:d9:64:30:86:8f:81:69:04:b2:81:92:9c:6b:4e:14:
50:d8:e8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:00:35 2025 by rpki-client