Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: KO0Ib0hiH6I6MR69dUS4vkJTKVCilUshHp2K+fG2NBY=
Subject key identifier: 02:A3:11:CC:41:1F:7F:E6:D6:37:3A:18:DE:D8:50:33:50:A4:09:61
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 0194BCE0A83333C95A15F2F130E7063F621E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0895
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: rF17k6QtXu77oY3HxmOA/35ZSlXz9GGV1p6UKa7C5Dg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a8:33:33:c9:5a:15:f2:f1:30:e7:06:3f:62:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=02a311cc411f7fe6d6373a18ded8503350a40961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:f9:bf:e7:d7:cb:12:f6:81:f9:d9:75:ea:
25:d7:e7:bb:2b:70:78:a3:06:6f:12:71:d6:83:6b:
78:8c:5c:8e:4c:37:6a:f5:d1:84:6f:88:2d:15:67:
09:4e:95:ac:e2:9e:eb:8a:f5:3b:82:b4:d0:1e:5c:
84:25:be:3e:bf:67:46:44:1a:3e:cd:b6:61:af:86:
15:a8:b8:c0:10:87:b6:b8:68:a4:68:e2:67:9f:40:
10:cc:9f:c9:51:5f:cc:58:75:ea:88:bf:a5:31:92:
08:04:4e:d5:f1:ce:74:0f:8e:12:be:8f:6c:f1:07:
87:d3:2e:43:84:3e:0c:cc:77:9f:4b:11:d4:a7:88:
23:75:81:3d:c8:02:13:5d:7a:29:d7:89:c2:2d:72:
fe:73:a8:bf:42:a7:52:ac:d8:a2:a9:3e:f9:b8:a2:
44:ef:aa:15:23:55:a7:49:50:7d:84:a6:56:e0:b0:
99:c8:90:c5:3f:76:01:e0:54:04:31:8a:59:43:e3:
3b:b7:09:5d:cb:42:65:b7:db:c5:26:d6:02:b9:e7:
91:f0:24:08:11:df:f1:75:30:b3:bc:6a:59:be:f3:
c8:16:fd:2c:35:bf:bc:01:ae:f1:17:56:1d:16:0f:
41:41:8a:1d:f4:bc:43:20:4e:52:f4:b4:6a:60:7c:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A3:11:CC:41:1F:7F:E6:D6:37:3A:18:DE:D8:50:33:50:A4:09:61
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:88:fe:76:b0:5e:60:b5:9b:d7:07:bb:c8:f1:85:5b:ba:d9:
da:05:ec:58:20:49:aa:89:b3:31:f1:be:0b:44:5e:e9:f4:0f:
4b:3d:5c:82:2b:d3:cc:0c:91:c3:5d:64:cd:cf:4d:9d:f7:05:
da:1e:49:95:65:3b:47:9e:58:e2:4b:2e:08:87:0d:a6:9e:b5:
93:85:ec:9e:05:4c:39:a2:59:7f:6a:6b:e0:8c:97:e3:f2:83:
cf:b5:8f:05:38:1e:1b:07:c8:ae:a2:56:bd:3f:99:92:ee:61:
45:6f:6d:d2:e8:86:a0:d9:30:a6:81:94:57:c7:5c:ca:65:71:
67:29:be:5e:6e:9d:65:02:eb:a0:61:62:90:13:0f:b7:4c:9d:
96:8f:a7:75:54:12:05:3c:f8:b5:3b:f7:79:3c:8d:8c:96:69:
fe:a1:72:4d:f4:ff:af:c0:c0:09:0d:39:35:5d:48:ea:c7:6a:
18:38:98:41:9a:d3:65:e9:80:3c:8f:c7:9b:32:91:99:a3:17:
af:f0:7e:b1:48:ab:27:fe:7d:d1:b6:ed:5b:84:ae:a2:ba:e7:
ff:d9:cf:da:a0:db:36:1d:20:6d:c1:a9:43:0a:0a:1f:d0:26:
f9:67:57:19:3f:af:4a:b1:64:48:22:81:03:ff:cd:40:c4:47:
f5:47:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:15 2025 by rpki-client