Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: IuHPOLXxosAKJGQYMTXbTHE8SPWhSsIm0sRVyX4nK40=
Subject key identifier: D7:39:96:A9:99:5E:20:2D:02:A6:95:6B:86:6F:57:E7:FE:7A:15:54
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 0194BD17FCE0B31D46CC31415FDF3722037D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: CRjlMjNgCK12hxfcI1Iy1lAWoaLdWU5sMoSd9vEEAlk=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fc:e0:b3:1d:46:cc:31:41:5f:df:37:22:03:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=d73996a9995e202d02a6956b866f57e7fe7a1554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:fb:2b:af:95:7a:03:d1:5e:94:c1:3d:87:
29:2e:65:c4:92:79:ed:1c:7d:e8:6b:ba:09:e5:f7:
bc:af:17:94:db:a7:40:47:1a:32:3d:c7:4a:bb:c9:
0e:37:aa:36:81:60:8e:98:0a:03:68:d9:fe:16:8d:
d1:a6:bf:34:7e:d0:63:84:15:7c:0a:88:d5:85:45:
74:09:d3:83:bd:8e:24:08:77:6f:57:f0:4c:12:f6:
aa:0a:f3:fd:27:53:c8:bc:77:62:b7:76:74:18:5b:
39:51:12:8f:73:5f:d7:32:01:89:df:46:2e:db:b1:
19:2e:19:df:dd:aa:bd:5f:d5:e4:e2:61:3d:43:29:
a6:0a:3b:61:ed:28:94:fd:80:3e:37:ab:25:93:de:
b4:e6:84:ab:6a:50:08:11:4e:63:85:e2:93:76:23:
4b:f9:81:cf:37:d0:f9:13:0a:12:2a:b0:55:7b:6c:
c2:7c:e5:e4:6c:76:c0:24:8c:c7:96:bc:0f:40:bb:
f6:1e:7e:ff:f8:b0:8e:84:9a:ce:14:ad:e6:ac:84:
2b:e8:3b:96:42:c8:15:42:bb:08:84:b3:98:dd:c5:
c0:00:e4:54:0c:64:a6:b5:85:ce:3e:bb:da:85:f4:
3a:6c:e9:b2:2d:4c:b9:a5:ea:a3:d4:2d:75:ce:de:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:39:96:A9:99:5E:20:2D:02:A6:95:6B:86:6F:57:E7:FE:7A:15:54
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:74:13:9b:f3:06:8e:d4:5a:1e:1b:db:7d:22:6b:74:f9:01:
99:ab:57:3e:6e:42:1a:df:2b:52:ea:d5:a2:ed:29:21:d7:ef:
bf:ee:d9:a3:c3:6b:d0:41:02:42:87:11:3a:e7:36:a5:67:2b:
2e:cb:45:74:c1:d1:79:4a:ea:72:fa:14:ff:c8:86:3e:76:59:
d6:32:1b:44:2b:18:8d:8f:b8:eb:36:4e:4b:60:e3:61:2a:d8:
f4:db:95:05:42:3c:c1:97:19:83:49:5d:9a:55:88:f5:53:4c:
e4:4a:ae:db:bc:62:3f:c8:4d:58:2a:34:64:0d:52:7c:ca:40:
1d:1d:d7:10:f0:cb:94:18:f1:c5:73:ec:3d:a6:ab:78:c5:9a:
1a:05:0b:fd:b7:e4:1e:14:e2:96:2e:25:8f:36:0a:e9:a6:33:
89:11:f7:5f:ce:a1:00:8e:30:5f:42:13:fe:83:b7:eb:c6:12:
d3:4d:1b:98:8a:ee:a4:d1:2f:cb:30:5c:cf:49:e1:eb:63:d6:
19:e7:c4:4d:28:b7:82:77:6c:42:99:d8:87:d0:7c:a2:85:24:
f7:4e:b5:9e:cb:26:d6:ec:48:b0:35:43:f6:a5:eb:39:d8:3c:
2a:1b:6e:09:d0:99:99:e5:ca:77:6f:4f:cd:c4:1c:24:cc:f8:
4f:b7:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:45 2025 by rpki-client