Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier: 9HMjRSlddP3sKmi9GXvU2vXv2VyNr6ezMPhEjrbGXZ4=
Subject key identifier: B3:02:B6:7D:43:D1:6E:8A:A3:D1:16:EA:01:67:30:43:F0:11:0F:2F
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 0194BBCEA199EC5650C1361305E84B0CBCFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number: 03FB
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: RQ/zy3tmo/9wNotnja4f42j3GKyGoRSKSEEoin4Iiew=)
2: nqx9W3CT9LMiI-_qYVZ2zzABCM4.roa (hash: +L2mXS+fLf5z/UHFl8eJlZqBjyyNEu9DFCCZwu03Oh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a1:99:ec:56:50:c1:36:13:05:e8:4b:0c:bc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=b302b67d43d16e8aa3d116ea01673043f0110f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:d8:95:0b:49:47:29:9f:6c:a0:b1:4f:ce:
da:3b:32:e0:68:f3:eb:60:c2:32:21:e8:38:df:68:
c2:eb:d6:06:e6:cd:39:1a:14:48:26:f4:1e:68:24:
5e:72:7d:67:b0:f1:d2:f0:2b:cb:e7:23:25:f1:24:
a4:89:ce:71:8f:a6:bb:79:10:59:85:1f:00:53:78:
6b:9c:52:f3:71:a0:3a:ae:97:7e:5e:70:9f:e4:14:
29:50:08:ad:b6:e2:b4:b7:10:55:61:89:5c:49:8c:
b9:31:20:ba:27:b7:9f:22:e6:b8:4b:5c:ad:00:ee:
3c:ed:a1:d4:20:c6:5d:cb:36:cc:c9:63:e5:1b:0c:
31:ac:8c:f7:c3:1e:bd:c3:53:f0:7d:e3:8e:6f:97:
2c:e0:ef:f2:39:df:26:57:c2:45:a3:a0:de:00:d7:
1d:c3:61:64:4b:cc:91:a3:38:f0:f5:35:22:e2:85:
46:e1:d7:02:8e:e9:97:a6:fb:09:d6:6b:cf:2a:82:
da:c7:f1:86:7a:b3:bb:86:61:1e:d2:79:94:49:02:
11:b5:89:67:2c:96:4f:2e:90:5e:a3:6c:8a:a9:c7:
32:6e:2b:af:05:6a:2f:49:a2:d5:82:27:19:ab:3d:
40:b1:1d:78:72:a3:c0:d4:ee:1a:53:ff:09:e4:e9:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:B6:7D:43:D1:6E:8A:A3:D1:16:EA:01:67:30:43:F0:11:0F:2F
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2a:02:6a:04:3a:19:a4:b0:de:2e:43:52:7f:f5:ce:76:c8:
5a:2d:2a:d9:9c:5b:20:e3:e1:c9:d7:ac:e5:5b:42:60:4f:5c:
43:2f:6a:ca:92:bf:be:0e:e5:30:4e:c8:c6:7a:26:c9:50:a7:
8a:39:75:a4:eb:7c:61:a6:67:ae:c0:38:d1:e6:b0:b0:84:fd:
39:83:a4:d9:29:88:81:ad:2e:e2:95:f4:07:1e:5f:eb:41:3c:
23:c5:cc:67:ac:d1:29:b4:a4:3e:db:71:83:09:cd:d3:f5:1f:
7f:80:cf:ba:5a:4c:35:8f:d1:c3:70:fe:c2:36:e5:42:9f:73:
88:47:4b:6e:e8:97:95:44:04:03:82:77:78:34:d5:da:c2:54:
ea:b8:b2:2c:e7:fe:4c:0c:19:e5:14:86:d8:27:db:91:5d:59:
3d:e5:9f:9a:e0:6f:d5:c1:9c:ce:49:37:51:98:d0:99:f7:10:
b2:20:31:62:29:51:d5:e9:fe:7c:62:81:a8:de:6c:14:0a:e6:
36:c3:89:6a:21:bf:d8:3c:09:fa:0a:f2:ef:33:08:1c:5f:b4:
81:c2:0b:6c:4b:20:c3:c2:70:de:ab:26:7b:cb:72:d6:18:72:
89:fb:f5:5c:79:e5:d1:d5:7a:8c:15:a7:db:54:c9:0a:b8:83:
13:e8:63:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:48 2025 by rpki-client