Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: hnXABJM4UwOCcPAXXOlu600vl/lk2i1Hyr8lCWx7Thk=
Subject key identifier: AA:68:3C:42:33:50:22:18:10:AF:06:AE:6D:91:6F:E4:9F:09:2B:2E
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 0194BBCDB25CC6619ADB4A986A613D781805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: C4TCgj0HBdtWwfhX0BqCwnNQghI/vcfm9IP+MH2MXgQ=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b2:5c:c6:61:9a:db:4a:98:6a:61:3d:78:18:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=aa683c423350221810af06ae6d916fe49f092b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:b7:a5:a6:3e:0e:9c:67:da:eb:d2:26:88:
94:d7:7d:9d:dc:05:64:6e:9a:c8:5d:a9:72:56:5c:
b0:67:31:30:a8:ff:30:f3:d7:3b:cb:0f:5c:11:03:
e1:69:54:04:83:db:55:47:fc:5c:43:4d:b3:e6:89:
ed:de:76:f2:18:fa:3d:63:7e:35:18:d3:a1:a1:60:
ff:73:ce:14:ae:c6:2f:41:93:4a:39:b6:63:13:75:
09:30:74:f3:0a:93:cc:ad:99:6d:3a:1c:cd:01:94:
17:ff:1d:7d:ab:52:9f:0c:4f:d8:d7:72:c5:5d:cb:
4b:e9:f4:be:23:e9:93:9f:78:4f:e1:fa:47:c7:fe:
8c:94:3c:f7:1e:cd:63:16:75:99:7b:70:29:e8:3b:
cd:a2:07:e1:14:42:c7:b2:14:de:c3:6f:fa:28:30:
07:0f:78:ce:46:85:8a:26:84:ab:13:fd:9e:5d:5a:
8c:87:29:18:bf:36:c0:ea:f3:3a:ab:62:0d:b6:3a:
c5:08:e5:b5:d4:57:d2:a8:b6:04:d3:c6:62:a7:20:
63:ea:5f:ee:b9:61:7b:e8:ee:72:a3:05:9e:68:18:
92:c8:41:b2:0d:9e:2d:d2:3b:ac:30:2e:29:b2:f6:
71:59:a0:09:f7:6d:bd:b6:23:6c:7c:da:9a:7b:e5:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:3C:42:33:50:22:18:10:AF:06:AE:6D:91:6F:E4:9F:09:2B:2E
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d6:d0:3a:50:ba:55:e6:4e:8f:32:6d:0c:63:57:e7:80:70:
ed:14:ef:60:a6:70:b9:f4:b9:4e:63:49:cd:45:bf:ce:b1:20:
f4:34:ae:04:5c:88:df:41:b3:8a:44:18:e9:fd:29:e3:9c:e0:
9f:28:a4:a0:1d:da:d0:8e:38:10:21:11:7b:4d:70:df:3d:7c:
0a:2e:60:e7:ab:89:76:2f:50:73:05:cf:7f:e9:83:12:7f:bc:
97:4e:28:46:d0:be:5f:b8:91:b6:7d:14:dd:42:c8:96:e6:58:
4c:8d:e9:38:5d:e1:b3:64:d5:fd:54:7f:43:85:69:c6:17:93:
e4:bc:5b:59:40:84:c3:d4:fe:16:1f:02:3a:d9:55:93:bf:ee:
eb:b1:40:78:9a:94:de:79:2f:7d:50:45:1a:11:5e:e1:80:78:
75:4f:8f:34:d4:a2:ed:be:46:ae:38:e8:89:76:a4:65:cb:11:
f8:4a:5e:28:1a:aa:cd:31:dd:9c:35:a1:be:12:07:0d:6c:36:
f9:2c:a6:df:41:9c:23:93:a5:da:5f:a6:6d:a1:f4:97:b7:04:
37:58:df:f1:21:de:d4:7e:18:97:10:40:3f:7c:93:45:20:39:
07:5e:eb:23:f0:12:1c:68:61:4e:51:36:d8:71:52:a9:c3:9c:
26:54:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:45 2025 by rpki-client