Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: W9dFK6/yG6vZ2wlrQVIR5Mks5CGR2cvJ5Rr+b9G7iLI=
Subject key identifier: 45:AC:3A:2A:BA:16:7D:97:06:B2:67:F7:38:52:0A:26:B2:C4:DD:FE
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 0194BD857C9D58EF32269C7C236DB4973672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: h5EYk5OajkzIILhPVk1eA0S+jsuFei8IGYpBMJOcwcE=)
2: xGrKS_7fIZAr--QcVe4rlk4LUrE.roa (hash: d+a6fGxhsrjWA8L3BsW9wjwHxXWu/4T+PL0txa2lkUk=)
3: yzk3REVSGQxP3rEVAZsJQRpTPkM.roa (hash: dAn/JyxTOrxcNXrruPk6InrufFAxEVKtC99woebiErY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:9d:58:ef:32:26:9c:7c:23:6d:b4:97:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=45ac3a2aba167d9706b267f738520a26b2c4ddfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1e:52:b9:a5:5b:ff:53:fc:9b:3e:2c:5e:3e:
ac:76:0f:81:2c:bd:12:ff:b7:36:5f:73:92:e9:2c:
7d:40:1a:05:4f:63:c4:f1:72:1a:f6:9a:42:75:00:
38:26:2e:7e:4e:f0:9c:17:35:bf:6b:fe:05:58:bf:
5e:3b:2e:50:08:00:fc:dd:e6:b9:c1:70:15:60:2e:
b1:49:1c:e2:28:2f:16:5f:a4:0e:02:db:1a:ae:10:
a7:8e:2b:96:94:9f:fe:88:68:87:d3:62:70:6a:2a:
f7:07:3b:72:a6:bd:1f:eb:33:44:eb:33:b9:b5:7d:
f7:0f:d6:ad:89:80:5c:15:d8:ee:eb:96:1f:b5:06:
9c:c2:8b:41:d8:b4:5a:76:07:30:e2:25:cc:ca:0f:
51:69:66:1a:d4:03:00:8b:47:74:00:cf:de:aa:b1:
37:77:73:90:be:30:41:97:0b:31:e4:06:2d:00:41:
40:c9:40:42:85:73:5a:95:4e:19:e5:86:77:09:bb:
e5:d1:e8:5b:d4:e9:cd:2b:e5:39:02:79:9e:e2:24:
7c:e9:fe:c1:98:b9:88:d3:f9:c8:a2:61:ae:d8:18:
7d:b2:88:ac:c7:12:58:97:46:ac:24:2b:bc:e4:9e:
ed:a9:d3:54:ef:c8:f2:7f:ed:9a:cb:0a:f7:f7:e2:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:3A:2A:BA:16:7D:97:06:B2:67:F7:38:52:0A:26:B2:C4:DD:FE
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:87:8b:df:7c:8f:ac:67:14:ae:65:26:16:8f:64:de:fe:
2e:62:3e:0e:ad:59:1f:0d:4c:da:ef:af:24:1b:53:6d:a6:7c:
79:57:62:f8:63:80:76:3b:43:85:a7:9b:83:ef:53:56:7a:99:
77:f2:f0:77:40:c0:88:00:14:2a:bf:58:d8:4e:ec:c6:3c:5e:
92:f4:23:0e:9f:f2:49:41:d6:68:fc:37:15:82:49:b1:a7:40:
76:00:fc:42:7a:54:d2:53:32:ea:a7:31:fc:f6:f8:66:17:1a:
55:7f:c8:17:1a:a3:00:78:c2:b1:3f:8b:d3:07:37:7e:8a:8e:
53:3b:bf:53:24:bc:27:f9:fd:f9:ea:42:77:08:01:da:0b:98:
a7:cb:d7:77:c0:8c:01:0d:eb:2d:7d:88:26:cd:0b:50:67:8a:
5f:0a:69:e4:0f:b7:44:f9:ef:aa:6a:d6:ab:1a:3a:dc:a2:e7:
51:15:fc:e7:ca:78:10:75:3f:79:e7:b8:13:e3:7c:f6:01:8d:
bd:fa:eb:57:e5:09:4f:6e:2c:d8:3d:5f:af:c5:8c:d4:73:47:
a4:e1:80:5c:e0:e0:2c:4f:bb:d5:60:d0:54:8a:31:11:98:54:
f3:6d:ad:d4:f4:ca:cd:77:5f:40:82:f1:75:0c:0d:0b:cd:43:
f5:9b:3f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:32 2025 by rpki-client