Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: 6rWQ3hqBKxaaDBcKiHbIWCe4Md3dwksRw+Bo2XWARyY=
Subject key identifier: F8:49:C4:C9:E1:81:EE:FB:D4:F5:56:6B:6B:E5:52:5C:E2:7D:23:F1
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 0194BCAA0944823ADD8A053166CBA0582C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: tVOO+hZAfcRnVslmqY9527g/xovdRqEOagRZUJvzSPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:44:82:3a:dd:8a:05:31:66:cb:a0:58:2c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=f849c4c9e181eefbd4f5566b6be5525ce27d23f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:2c:b7:25:10:34:23:38:ab:d0:b4:32:20:
67:ea:fa:31:b4:44:70:1a:4a:63:e1:0d:bd:74:c2:
f0:3f:79:00:cb:9c:27:41:8d:f1:32:b5:b4:7f:ed:
0c:0a:78:f4:a2:a5:a2:f0:9a:cf:bb:11:0a:c7:0f:
0f:78:44:2d:98:48:44:ac:f3:0b:80:3d:dd:6b:b4:
1e:85:02:67:50:66:80:34:b9:f0:29:06:4a:47:f3:
f9:bd:43:9d:c1:fe:26:23:7f:ba:51:56:45:6e:4e:
81:2c:04:97:a5:dc:b5:61:f9:99:7b:8a:95:f4:b1:
4b:66:a9:c0:b9:89:83:1c:12:09:0d:f0:81:a9:76:
df:cb:2a:41:cb:38:3f:c8:84:90:f6:9b:90:c1:c1:
00:20:42:2d:9f:6d:7f:fd:09:00:3d:ef:7c:8e:84:
80:8c:73:76:ab:ae:9f:bc:fc:c3:c1:f4:9d:f9:4f:
09:7f:aa:4b:36:e9:ef:b8:15:02:5f:d3:f3:da:fd:
51:a2:69:2d:4d:66:42:9f:55:85:17:88:b8:9e:38:
9e:52:60:2e:7e:c2:3b:1f:2d:55:16:88:98:07:ab:
3a:ab:af:3d:6e:11:84:f4:e0:c9:98:70:7f:9a:4e:
01:90:25:ed:c9:81:ba:9d:46:f4:5d:3e:ee:14:e8:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:49:C4:C9:E1:81:EE:FB:D4:F5:56:6B:6B:E5:52:5C:E2:7D:23:F1
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:29:fd:9c:a3:2a:84:be:ab:6a:65:8f:89:24:de:33:f4:ac:
79:fc:9e:99:3e:c5:00:ae:35:da:19:00:4a:b5:50:3a:cc:fc:
82:d2:25:85:bb:21:d3:d9:2c:98:fe:de:db:60:1c:db:65:a5:
fa:e7:6f:c9:b2:46:e0:cb:b9:c0:e7:9a:40:a0:07:3b:7d:bd:
ce:a0:27:e3:2d:93:41:89:c1:97:72:ad:4b:c0:65:fc:8b:13:
56:62:cf:cc:53:f9:ef:10:34:5f:30:b5:d9:17:6a:8d:4d:62:
eb:76:0c:a5:ac:b6:d5:63:8b:e2:cb:31:fb:d0:45:b8:a8:f7:
5f:17:4c:98:0b:18:69:1e:aa:46:c1:1f:4e:30:05:0d:1e:7d:
a0:66:b9:87:66:f2:a0:c5:19:24:0b:a2:95:1b:27:1c:4a:1a:
8a:93:53:1d:25:95:e9:d0:3d:56:a0:e8:b5:c8:6b:77:76:5d:
75:1f:15:b5:4c:04:d9:0b:21:2f:12:43:76:14:50:82:6e:ff:
c7:39:9c:02:68:e8:cb:8f:17:b1:9e:81:3b:a2:e9:6a:e5:0d:
03:9b:d6:42:ba:89:a7:be:59:c5:95:c1:c2:97:9d:32:e0:92:
52:3a:e7:16:c2:37:ea:ce:52:58:9e:d0:a5:3c:0e:37:c7:f9:
7d:90:9d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:13 2025 by rpki-client