Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File: d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier: 8A91DTvvG6sH0gSluPeCN8Q8TM1xLjf36Z2FTzE1m9c=
Subject key identifier: B4:CF:04:CB:38:43:79:D1:53:C5:A3:D4:51:9A:EC:E8:1E:B7:07:61
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer: /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial: 0194BC7283DE828432B1F93499C2ADE06942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number: 0854
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: 9zwR0ItkTBE3NBrhNXLgD19Ygh0.roa (hash: 668uqZpsKXpsQP4NHjfvBq7qiMq3YrFIWJSOqGsUVvE=)
2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: kfaxPBsKQBp83KC4Sn1ecHI/lHWaMX1x1s83i+J5t4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:83:de:82:84:32:b1:f9:34:99:c2:ad:e0:69:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=b4cf04cb384379d153c5a3d4519aece81eb70761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:c8:14:fa:3c:7d:13:dc:35:42:7d:a5:cc:
03:74:b3:90:01:fa:ee:ec:92:67:9d:f0:88:06:8a:
9a:3d:6e:2f:b4:d9:30:14:c9:49:5b:7a:62:12:d5:
c0:77:0d:86:6a:70:35:7f:df:3b:55:92:e2:e2:6d:
08:37:40:6a:17:ee:bd:71:34:98:72:07:41:eb:2a:
a0:c9:b7:b1:28:ec:72:18:63:fc:f1:5a:4c:c0:d3:
6e:42:6b:35:17:5e:9e:24:cc:33:ff:73:c8:13:58:
a8:f8:8a:d0:41:d1:69:e9:cc:20:25:a7:29:c2:89:
b6:2b:8b:52:94:5f:53:11:b5:3f:3c:28:f6:46:af:
a1:7d:63:a7:93:3f:b8:ef:36:44:2c:2a:cc:0a:0f:
70:b5:3c:13:b8:9c:04:1e:6c:9c:0c:f5:41:e2:23:
57:97:50:91:85:72:39:7a:3b:04:d2:9e:27:e9:86:
38:bf:5d:d7:6d:83:cc:0b:a6:fb:a8:54:9f:1e:ee:
48:fc:d5:96:78:3d:94:25:d0:86:ad:59:5e:69:2c:
0f:af:43:d6:c7:1c:d2:59:00:16:31:54:42:95:75:
d9:79:08:04:9a:64:0d:da:c7:0f:bf:ed:c8:dc:f3:
a2:44:c3:77:0a:29:f0:5f:dc:53:16:63:3f:67:f9:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CF:04:CB:38:43:79:D1:53:C5:A3:D4:51:9A:EC:E8:1E:B7:07:61
X509v3 Authority Key Identifier:
keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:22:2f:52:e6:c2:cb:8f:db:21:eb:f6:77:6b:00:9c:fc:
39:38:db:ed:5a:2d:59:e6:30:7f:6b:8d:1a:fb:9b:06:ec:3b:
2c:e5:35:8e:00:a0:e4:3a:5f:c1:13:59:b6:29:a8:9c:1b:83:
f8:71:1c:05:30:be:3c:b7:7d:56:71:b7:2f:ca:d0:8e:13:81:
be:92:ac:47:4d:ba:fe:03:cc:22:cc:ba:a1:8e:b9:3a:f6:33:
35:cd:2f:5c:ed:3e:ac:4f:90:ef:24:88:1a:41:79:ff:01:f0:
a5:c6:f9:12:ae:5e:64:1c:dd:ea:fe:8a:58:4a:84:d6:9a:bf:
8a:3a:71:6b:a8:3f:4c:d9:ed:1b:b2:16:97:0d:7a:8d:41:ce:
fd:bb:41:a8:8b:c6:7a:00:f5:fd:54:6d:ee:46:74:bc:d3:d4:
94:d3:a9:0d:1b:66:78:7c:b5:c6:53:d4:63:f7:fe:20:ed:50:
79:d0:2f:a6:ce:0c:29:b0:63:fb:ec:48:b9:1f:97:29:82:4a:
28:07:3c:d7:42:c0:36:6a:90:53:46:61:95:a6:34:04:1c:9a:
3d:e0:28:38:53:b8:86:38:53:3e:72:b8:c0:5d:83:58:7a:20:
e8:18:c7:85:b8:2b:42:08:94:c5:57:93:d7:55:61:57:27:bd:
cb:05:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:18 2025 by rpki-client