Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File: drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier: dzGx/EBfBsoqUGdWO/hUjdCAY2cqcNNU/0WZ0GPQmfg=
Subject key identifier: 71:C4:28:49:EA:5E:5F:FF:D7:FC:58:DA:E6:73:B2:13:9B:91:54:95
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer: /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial: 0194BC3CBD6F579F95BE23D964BA5B7AE632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:24 +0000
Manifest this update: Fri 31 Jan 2025 12:01:24 +0000
Manifest next update: Sat 01 Feb 2025 12:01:24 +0000
Files and hashes: 1: TxShveMXkagPpI8acAIIbuuHf-w.roa (hash: Yj05HPe3EYjPmxF4dbUmE24GvdhxKQjouYz6ySk5apU=)
2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: 1Ff+ppiZat5xymt70mtNxpVTvMQ5HwuhScZtB/CQNAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:bd:6f:57:9f:95:be:23:d9:64:ba:5b:7a:e6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Validity
Not Before: Jan 31 12:01:24 2025 GMT
Not After : Feb 1 12:01:24 2025 GMT
Subject: CN=71c42849ea5e5fffd7fc58dae673b2139b915495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:46:86:d9:b5:30:f0:b3:16:47:af:25:d0:
f7:d9:ca:d7:7f:bb:ec:21:92:bc:37:85:c3:91:6b:
ab:a6:4c:a5:17:92:7f:e6:cb:28:a7:ca:23:d9:84:
10:6d:81:0a:e1:db:53:74:71:85:02:17:4b:27:d5:
29:0a:22:ef:9f:2e:a9:02:d3:25:7e:f0:de:28:4f:
0f:25:e1:57:5a:18:9b:c3:79:78:02:aa:03:ac:6e:
66:9d:1b:48:aa:3a:b8:1e:54:ff:b1:e7:f9:f6:c2:
68:f3:ee:d6:67:6c:d8:7e:0b:a7:4a:41:88:b4:8c:
84:3c:8d:f0:2e:2d:e2:a8:f0:0c:d8:50:eb:36:e2:
35:a5:40:43:fb:28:99:e4:9d:b1:83:73:e4:33:b3:
54:1b:c7:d3:99:cd:13:a0:0a:34:c0:f9:73:8e:e7:
66:0a:0c:88:33:29:0b:0d:b5:5c:6a:9c:99:9b:66:
83:9f:f7:b4:7c:a0:58:43:47:19:a0:eb:be:c2:ef:
33:e1:42:28:9f:25:de:fa:29:d8:ea:16:c7:ce:1b:
0b:9d:14:f1:7f:ab:95:a0:57:31:36:71:b7:e8:4e:
e4:93:cc:1b:9b:d6:84:53:bf:7d:da:2c:07:e7:e7:
69:d7:34:7b:86:6c:4c:fb:0b:e4:6d:91:11:e4:28:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:28:49:EA:5E:5F:FF:D7:FC:58:DA:E6:73:B2:13:9B:91:54:95
X509v3 Authority Key Identifier:
keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:7b:18:90:36:d3:c6:4c:55:cb:65:46:85:d5:7a:4e:86:
f8:d9:13:56:da:36:8c:31:d3:84:18:f1:19:db:94:86:c7:1c:
3c:c2:43:c1:b9:76:1b:86:12:53:b9:58:65:f7:62:82:75:c9:
24:44:1d:f5:ad:56:df:88:7f:a8:25:ac:b7:51:f7:83:cf:42:
47:88:0a:b9:82:57:48:3d:26:f4:04:6c:26:6f:7d:70:2d:e8:
53:5a:ed:f6:a8:27:3d:4e:a0:4a:25:8a:88:93:14:3e:40:a0:
c7:d7:e6:76:0a:16:b2:21:90:75:76:4a:9b:84:dd:58:d7:6b:
da:fb:a8:33:77:b5:d6:d6:5c:4c:c9:e2:e0:ec:99:45:ef:43:
ed:ce:09:45:7e:8a:e0:1f:66:be:1c:9a:14:f6:c2:96:00:f5:
59:55:cf:67:af:4e:4c:dd:59:04:bf:04:41:68:3e:48:1e:91:
54:e0:93:2f:41:7f:3d:3b:4b:3b:e3:94:54:24:77:e1:b3:36:
55:b6:3b:bc:d9:f2:9f:11:d8:ae:dc:4d:41:c4:89:57:c8:21:
9e:68:47:f9:52:30:75:02:fa:1c:6c:f8:d8:ce:c8:d2:ab:56:
e1:05:e7:34:c0:d2:5e:8b:f3:23:77:2e:bb:2d:ed:f3:a2:b0:
6f:0a:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:03 2025 by rpki-client