Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: S6j0ptH93d76ZeRj6chNj66nOPvo1xRhWrYTfQkIsmI=
Subject key identifier: 7E:73:13:FE:50:1E:E1:0E:C3:03:85:B8:91:DD:BC:34:BB:64:DB:70
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 0194BD856BDAFE120D9019CC7CA6D7062CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: eoBLMuOE4VkCSWAb1a81ojgr27ps3/WEsHBmjLwmAAI=)
2: dQsBPqZMKH6daF7X2f5XYU6EMvg.roa (hash: Ttxj5IHhlmThO1pUjygA+meVozoZQIr1J0wnK4d0fqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6b:da:fe:12:0d:90:19:cc:7c:a6:d7:06:2c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=7e7313fe501ee10ec30385b891ddbc34bb64db70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:0e:92:8c:98:4a:0c:c2:44:3f:94:b0:d4:
1f:f6:1f:fd:c6:bd:2a:3e:32:6a:c7:b6:be:ad:10:
83:f9:b4:20:de:d5:c8:fc:15:0d:bf:68:80:f2:af:
2c:f9:47:b1:ee:42:3d:ae:9d:a9:72:3b:70:34:05:
4d:07:24:40:df:d5:b8:b3:78:6b:6b:87:f4:e5:76:
58:ca:ea:b1:59:b8:c6:ee:59:1d:30:9d:b6:08:1a:
57:0a:29:c9:0a:87:8b:89:03:df:ea:50:ba:9a:b9:
06:18:ab:78:7e:df:a7:f6:3d:23:34:f2:32:a6:db:
5e:4e:02:2d:12:eb:c3:0c:3f:b5:c9:15:bc:9a:4f:
24:c3:72:42:ed:b3:1a:55:ee:97:93:0b:74:77:c4:
e0:3e:e4:06:78:7a:83:29:16:85:67:05:fa:93:d1:
52:1c:ff:a8:90:f0:27:ed:53:84:f0:0b:2a:e5:c5:
38:7a:b6:e6:6c:7b:a1:d8:9e:2e:5a:69:c0:ba:2b:
42:a4:b4:c7:ee:71:01:9c:aa:ec:b0:26:8d:6f:4c:
23:5a:13:1c:4e:5a:af:72:4d:44:ff:81:44:0d:4e:
59:c8:34:11:ea:27:f4:1d:3c:75:94:b9:3c:20:0b:
00:f8:b7:c2:9e:cf:7f:93:a2:1c:ec:d4:61:4b:61:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:13:FE:50:1E:E1:0E:C3:03:85:B8:91:DD:BC:34:BB:64:DB:70
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:62:45:0a:42:09:f8:b0:a4:f4:a0:02:6a:f2:97:17:92:22:
ae:0b:ed:5e:60:82:4b:b7:67:81:d9:4f:cc:4c:0c:9c:b9:94:
a6:c8:75:f2:c3:27:af:30:fe:7e:6d:34:98:39:8e:1e:5c:93:
e7:18:01:38:1d:8e:4a:4f:a3:d8:96:e8:22:06:fe:c9:01:a1:
40:bc:ce:6b:6e:a3:a3:29:23:ce:95:3d:53:b4:1a:98:39:ea:
60:7e:1d:db:0d:52:11:af:49:51:9e:8c:ca:83:bd:69:5d:aa:
9c:09:81:49:da:bd:12:89:df:62:ab:84:07:66:9e:52:ef:fb:
40:95:ad:2a:45:17:ee:c6:19:b6:68:9a:ec:22:8d:93:55:95:
d8:69:d1:d3:fb:fc:0e:ab:2c:b7:ee:08:e3:c7:a8:e7:51:c8:
c5:c2:42:0c:85:b2:5f:b9:50:1d:b9:d0:e4:02:1d:cc:e4:3c:
6e:72:a2:b5:26:ef:22:30:68:ae:39:f3:0e:a6:53:e2:ef:06:
ca:70:e5:0e:f6:b9:7b:53:34:94:c5:81:d3:1d:2e:13:b4:cc:
aa:21:ff:68:06:52:e6:77:41:77:29:60:cb:0a:89:4b:ab:d2:
9b:0f:ab:5b:10:31:dd:c0:e2:74:fc:9a:f1:27:d1:e9:f7:f7:
44:2c:6b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:21 2025 by rpki-client