Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: a+j/ZkakCl+ZOxRqUvld33beVmKhi6IekW6YuPmKLeE=
Subject key identifier: 9E:D2:97:96:9A:6D:92:75:B2:06:E1:BF:F4:ED:AC:4A:01:4C:68:22
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 0194BD854F80983C0F187AC3DFF8782A4849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 12A0
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: MfWBrYHqeCFR0QULR0eGdkncbSIMz/4IBILoUFEiL9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4f:80:98:3c:0f:18:7a:c3:df:f8:78:2a:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=9ed297969a6d9275b206e1bff4edac4a014c6822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:4f:32:0d:67:c6:26:ac:a8:52:8e:40:a7:
ed:26:a9:ee:28:7c:50:7f:ef:18:79:73:21:0e:4a:
15:43:8b:c1:dd:8e:79:1e:32:74:17:da:3f:30:dd:
ea:f2:d4:ac:fe:9f:90:93:9f:1e:5f:b9:e9:b6:88:
7d:49:0c:e5:2e:c2:e2:5e:39:5f:68:c1:1d:2f:24:
82:17:04:de:75:e6:e1:19:bc:2d:bc:64:bd:92:52:
19:fd:7c:ca:77:dd:a9:3c:4b:d0:ce:59:a3:fc:d5:
1a:16:0f:80:c5:42:e7:d8:7d:30:40:f0:d1:1c:3f:
c7:65:cd:81:7d:b7:80:ae:92:6e:24:bc:86:d8:27:
57:e2:ac:3c:24:ab:91:18:87:d1:65:1e:5a:74:7f:
48:16:f5:8d:35:1e:69:34:8f:d8:32:38:18:b8:94:
9c:66:0d:fd:68:17:b8:7b:ab:ac:9e:42:a8:db:ff:
6c:c8:39:4b:63:a7:d4:9e:c9:7a:13:53:8e:ab:0c:
9e:f2:b5:d8:f3:6c:4a:bb:3c:c9:6d:90:49:2a:48:
b5:b8:7e:58:da:00:cf:ae:00:ff:e0:e5:ad:9d:10:
73:56:a7:af:3d:81:fe:b3:2e:7c:dc:6b:8d:cd:51:
45:70:1d:54:3e:6a:2d:4c:41:9d:2e:49:2f:cf:0c:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:97:96:9A:6D:92:75:B2:06:E1:BF:F4:ED:AC:4A:01:4C:68:22
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:01:ba:da:0e:db:d8:f7:67:62:ae:29:2e:94:ef:4d:36:f5:
e9:99:96:43:10:36:8a:1b:0e:3a:53:85:7f:64:b4:64:83:65:
ee:6b:28:7e:0a:79:0c:af:7d:df:f0:6b:2b:26:64:49:c1:bf:
86:28:55:a8:ef:61:bf:d7:e9:89:d7:3a:8f:72:7e:df:1a:95:
c9:a8:ee:5a:ac:e7:a4:1b:fb:ff:b6:63:b2:10:c1:1d:74:f2:
dc:0e:49:3e:72:ab:73:1d:f4:1c:cd:8d:22:95:aa:70:34:3f:
a5:38:89:08:5a:35:55:66:b3:7f:f0:20:ca:c2:17:6d:97:81:
86:fe:c9:2f:e9:db:7f:30:60:8e:76:b4:18:e3:84:d7:2d:3d:
ea:ba:15:4b:04:5b:c8:5c:15:62:dc:59:d5:9f:5a:21:d1:a0:
19:23:41:4a:26:7c:19:4d:ed:14:1e:27:de:17:8d:95:65:f5:
dd:1c:35:a9:91:06:de:f9:8a:ff:cb:e2:ae:dc:93:38:43:5b:
09:42:03:b0:32:c0:e8:a8:27:6e:91:58:38:5c:4d:c2:43:04:
eb:4a:90:8f:7e:e6:82:c5:a2:cf:1a:d8:dc:74:23:cf:65:76:
4c:4b:3e:98:f9:55:4b:53:f0:ab:4c:a4:bc:41:5d:9a:ae:a1:
f7:86:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:26 2025 by rpki-client