Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: TjnV/ehzpq0ziuS2VbSzBMwYcffO7EVSr/l4hyNA4xc=
Subject key identifier: B5:B8:06:6D:61:C9:42:DE:32:F4:07:F0:6F:14:B7:9C:1A:7F:B4:6F
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 0194BD4E66740E878DC63A6D8A2607E9AEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 04C8
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa (hash: a99rlpRHuLbwwwhP8DmXyZr4TiQSJ2/sdHfuj/shU7Y=)
2: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: OhXTLR8gopnnJ33qFHiH+LyxDYTNSjXTpfem2JstSX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:66:74:0e:87:8d:c6:3a:6d:8a:26:07:e9:ae:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=b5b8066d61c942de32f407f06f14b79c1a7fb46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:ac:c0:39:8f:e7:47:e1:7c:bc:10:32:72:
43:c1:5b:4b:07:06:91:6b:aa:0e:14:f3:02:e8:c9:
9c:51:5e:12:18:58:2c:7b:ba:9d:1e:78:b0:58:7b:
a8:60:fc:62:ea:ce:b1:de:35:22:f7:54:cf:ca:b1:
ef:ea:78:22:d2:cf:f4:8a:34:72:74:ff:02:39:04:
62:5e:7d:e0:0a:39:0b:f1:4c:b1:69:c5:7f:bc:cb:
e1:b8:28:24:6c:64:5d:11:cd:a4:4c:70:1c:d1:da:
01:05:cf:5d:4d:d3:8f:24:ad:3a:3a:11:fb:0b:3c:
bf:44:d0:1d:44:47:33:70:a0:0f:d4:9a:7b:6e:9a:
07:60:ee:76:9b:c0:52:b9:40:30:3c:53:73:aa:4f:
bd:55:d3:c9:9b:a9:63:9f:e6:85:20:44:c3:7e:f5:
fa:a8:c8:78:f5:5f:dc:28:6b:32:fc:5e:ec:50:21:
85:27:35:f7:41:bc:e9:ea:84:c1:c4:51:a3:5e:17:
cf:6f:0a:03:7c:5d:83:df:ad:49:27:ab:23:36:e4:
0a:25:91:4d:84:90:85:7e:bf:7d:94:61:11:a0:d5:
bf:56:34:bd:97:06:20:d5:c7:2b:51:5c:77:f2:31:
26:91:ce:87:33:09:d5:28:b0:e2:ef:8d:ce:65:1f:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B8:06:6D:61:C9:42:DE:32:F4:07:F0:6F:14:B7:9C:1A:7F:B4:6F
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fe:6b:25:85:72:d8:f9:11:75:d7:0d:d3:34:12:dc:3e:0c:
ce:3c:cf:3d:e9:42:e3:a8:90:ab:7d:dc:cd:64:7a:ba:a9:b7:
d3:df:e9:3b:5f:99:27:e6:b7:38:a4:3b:3f:b1:de:43:9d:a1:
2a:25:19:4d:39:bd:0d:4f:3d:38:cf:b6:01:22:db:cf:0c:76:
22:33:34:39:a2:50:a9:a1:41:db:d0:d5:44:13:a0:13:02:a8:
30:92:a0:e8:51:41:6c:78:f6:f3:37:25:b4:bd:1a:cd:ac:75:
88:6f:9b:d4:8c:37:bf:6c:29:d7:fe:2f:3e:15:e0:b8:5c:c2:
79:ec:33:b4:35:5d:93:9f:e8:f1:35:d2:c2:b2:60:a8:e4:76:
93:ed:f9:4e:c7:1a:3f:6e:17:11:94:b1:72:cb:a4:81:96:2e:
f4:7c:8d:4a:02:0d:e8:a8:4c:6f:ab:12:4f:ea:e6:c3:54:7e:
2f:4c:65:56:0f:cc:22:47:44:be:84:4e:7e:9a:6f:de:20:47:
a9:e5:e4:5e:09:c1:19:ab:a2:14:41:84:73:6b:d1:c3:c0:65:
04:6f:5b:cd:33:95:a4:36:fe:2b:03:c0:63:4e:e6:81:8e:07:
1d:2d:9d:aa:ca:26:9b:97:71:09:96:c9:87:b9:cb:4e:cf:e5:
51:24:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:38 2025 by rpki-client