Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: WaE3TnPNCz67CBn2qDY2vJtWIjm2jTRiP1IFj1Q4Fek=
Subject key identifier: B9:AB:29:F9:3B:02:EF:A4:72:3D:6E:5D:4C:90:0B:95:42:C7:4E:BE
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 0194BC3C537F129F8B17F78EAA2805C2CB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: HaHDg1xNtwmBUbuxDENGCM9n4eiYRdaSsJvSEDqVCEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:7f:12:9f:8b:17:f7:8e:aa:28:05:c2:cb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=b9ab29f93b02efa4723d6e5d4c900b9542c74ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:a2:b0:f7:c5:ea:be:06:db:24:06:a1:c4:
e7:32:7d:89:a2:8a:f2:31:bd:e5:41:c0:56:73:30:
1e:35:a1:7c:a1:41:c7:ab:1e:ed:bf:ee:9f:e7:02:
62:c3:df:64:f0:91:c2:93:4c:6d:8c:be:f1:cc:71:
0c:77:1f:e7:bc:6f:23:df:d4:81:af:a7:53:ee:32:
68:68:9d:87:0a:a8:d4:da:7b:1e:cd:34:1e:2e:91:
53:56:04:2c:37:75:9c:ce:75:cc:c5:ad:43:7b:6d:
77:57:99:c4:20:19:79:a4:4b:8d:23:92:25:0a:24:
76:78:44:1c:78:bc:44:24:e5:5b:0f:9f:78:50:23:
97:7b:a5:22:fd:eb:32:82:32:51:60:bb:d5:13:3c:
5e:ee:b1:ae:4a:4b:08:8a:05:82:61:96:07:54:5c:
df:42:bc:35:8d:37:d3:bd:18:eb:cd:03:3a:60:3e:
16:f8:6a:97:c9:95:32:04:21:8e:0d:02:16:a9:c0:
6b:35:2a:93:b2:50:99:b8:34:f2:a9:0a:5b:ea:a3:
6f:95:50:a3:61:04:84:1b:4e:14:76:90:49:71:39:
53:dd:24:21:db:40:dc:e5:49:e2:6b:58:46:60:2e:
a7:62:9f:14:41:6f:d7:4a:c3:39:12:d1:ea:d7:92:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AB:29:F9:3B:02:EF:A4:72:3D:6E:5D:4C:90:0B:95:42:C7:4E:BE
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4f:6e:30:2c:f3:95:5c:7e:3a:5b:a2:16:aa:20:c0:73:4c:
62:c9:d4:ea:cb:6e:47:e3:6d:a5:2a:b7:a0:12:93:99:90:e0:
1d:08:e2:0d:d3:17:b2:1b:21:e8:b8:2f:bf:7a:6f:1a:e6:76:
37:c5:68:c2:30:49:64:2a:7e:da:4d:22:68:48:6b:cf:c7:43:
6a:1d:93:a3:c5:2c:d2:08:5a:93:ee:86:70:07:79:44:97:a9:
cf:c4:32:f1:80:5f:88:c1:ae:5f:0d:25:a7:17:c6:d3:6e:fa:
a4:c8:f9:a8:44:ef:91:ad:e2:0a:36:89:a8:c8:8c:f8:38:10:
32:15:28:fc:54:c8:97:10:b4:7e:5c:09:20:6a:a5:69:78:52:
4d:2d:86:90:1d:e4:bd:10:79:65:90:23:d5:0c:d2:50:47:04:
9c:c5:d3:ca:8c:1d:84:f8:88:f4:01:b9:4e:2f:e4:5a:77:2f:
d7:a5:ce:77:22:21:ad:12:72:bc:1b:4c:6c:05:98:c4:c6:d2:
bd:c4:dd:15:a5:de:00:57:c9:79:29:16:40:81:53:1b:75:65:
ea:41:66:5f:36:cc:60:b0:7f:d4:a2:af:c0:f2:01:7b:81:e9:
b1:41:16:d8:8f:f3:be:97:59:08:44:97:25:97:92:ff:7b:a4:
aa:10:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:21 2025 by rpki-client