Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier: QIWr0wFen4+/clzKRZKSrau4AE3V0E1ghV7Ehb5TdeQ=
Subject key identifier: 31:57:6E:C7:B3:54:2E:72:66:04:E6:9A:00:2E:27:40:D4:50:E5:E6
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 0194BBCDF26A0548464514026778F4A0DDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number: AD
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=)
2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: 05aw3o5Y2H6mP6fF+SSNdPNH9XPT5GWkfi5ouVLDEEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f2:6a:05:48:46:45:14:02:67:78:f4:a0:dd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=31576ec7b3542e726604e69a002e2740d450e5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:26:c1:db:4e:77:05:73:dc:ac:26:84:d2:
11:8b:df:a8:c8:4a:8e:b8:3e:8c:a9:11:29:37:56:
38:99:ab:a1:a6:bd:28:25:97:0d:4e:26:d4:34:02:
9f:1f:4b:10:96:bc:8f:29:0b:f4:4b:f3:d8:15:6a:
55:db:64:31:91:33:fe:f1:09:90:12:10:03:e6:dd:
69:18:fd:ec:71:37:06:4f:88:99:99:31:f8:12:82:
3b:41:05:12:59:e3:7b:be:15:5a:03:3a:27:a9:b6:
c6:44:fd:07:49:76:e4:f0:e5:a7:67:98:a2:87:5a:
59:a1:bd:ff:38:63:d6:6d:84:35:c2:ce:79:46:46:
68:79:c5:bd:cf:28:16:89:e7:26:28:ec:24:8b:75:
ba:45:bd:b0:54:2b:85:df:e6:2c:14:ab:cf:0c:f0:
d3:98:bc:36:6f:66:bf:fc:50:99:a3:c4:08:8d:6b:
35:3b:22:8b:4e:54:76:1a:32:23:0e:71:f0:6e:a8:
a1:56:1d:b3:06:04:b3:a6:b7:57:82:08:ff:da:b4:
cf:9c:31:37:a0:32:e4:b1:d4:98:38:71:f9:58:7c:
d4:ce:36:b2:63:fb:ce:25:49:84:eb:98:a4:e7:4d:
4a:81:fe:cf:30:05:e7:39:24:fc:a1:ce:63:ad:42:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:57:6E:C7:B3:54:2E:72:66:04:E6:9A:00:2E:27:40:D4:50:E5:E6
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f4:d9:86:41:7d:6e:c9:b0:e0:12:47:35:eb:86:7d:6d:56:
7b:7b:b8:e4:ba:aa:31:eb:75:5c:4e:58:ec:ed:f1:3b:ac:93:
eb:68:bf:f7:d1:53:5e:70:00:75:2e:bd:25:1f:10:91:7d:01:
2c:43:2f:f7:8d:ed:67:6a:a2:89:98:d8:4c:cf:e2:64:ba:8c:
81:e5:93:32:40:d0:ea:7f:77:46:7b:d9:fb:6a:a0:4f:e5:b7:
ba:41:e3:16:89:6d:eb:5d:f8:67:41:fe:86:ec:85:0b:13:be:
1a:f7:5e:96:ce:85:2d:19:8f:4f:ba:25:54:dd:21:46:90:e8:
b7:78:61:e9:85:9a:04:d7:55:89:e7:2c:1b:41:b7:e2:c9:b8:
24:b3:3a:88:3a:5e:90:7b:1c:82:66:e2:e5:dc:56:c1:3f:35:
d6:c5:41:66:f3:04:be:2d:85:82:9c:96:4c:01:5d:6a:03:20:
ae:57:ca:7d:2f:cf:b3:b2:e1:35:57:59:9b:4c:48:c6:b4:c2:
42:1c:bc:c9:77:05:2f:41:e8:0a:11:fa:b6:ae:34:c0:b4:c7:
aa:6c:fa:2c:36:f9:30:87:8a:c1:f3:ab:4c:12:a7:5a:ba:a5:
d6:2a:0e:04:bd:96:44:e2:0a:d6:99:c7:a0:5e:6e:62:c4:3b:
1d:33:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:39 2025 by rpki-client