Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier: y/6Lc+QI3HCxlNPxXnWIvkFTLQeDkh8m6mRg1V/P0DE=
Subject key identifier: 2E:F2:7C:82:BD:6B:F5:BC:77:B1:17:F2:84:64:EC:25:78:B8:6E:5B
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 0194BCAA57E53C32B86778B3FFA9F422C360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:01:07 +0000
Manifest this update: Fri 31 Jan 2025 14:01:07 +0000
Manifest next update: Sat 01 Feb 2025 14:01:07 +0000
Files and hashes: 1: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: KES+xepdhwhh2FMJZwb2A6KZVqKXxuLF2fzIWpKG9VE=)
2: x6TyoeiDznZ5SRtqywkNMGfQA5k.roa (hash: 1tj6LlfsRsB/tYIfqw9rOc/KrLH+6NOSUXP1XdEdR5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:57:e5:3c:32:b8:67:78:b3:ff:a9:f4:22:c3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Jan 31 14:01:07 2025 GMT
Not After : Feb 1 14:01:07 2025 GMT
Subject: CN=2ef27c82bd6bf5bc77b117f28464ec2578b86e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:dc:56:5b:a7:36:a3:ac:17:72:c1:98:f4:
1a:93:a0:83:77:e5:d7:52:84:03:26:7e:7f:a7:46:
17:6e:a7:82:b6:b4:19:2e:a9:20:3b:a2:74:40:60:
e7:ff:e3:56:28:3f:fd:f0:f0:fd:c9:29:7b:18:16:
a0:8e:5b:8e:7f:02:78:df:61:fd:1b:87:9b:78:54:
df:a2:20:fb:42:a8:f6:79:75:4b:f9:8c:26:76:e3:
0c:16:da:1e:db:f5:82:85:f3:de:4a:82:00:88:4c:
79:10:39:95:e9:4f:66:f6:34:b4:0c:d1:08:7e:fb:
58:9d:b1:ef:3d:8c:43:01:69:e5:a6:04:7d:d5:03:
de:5f:77:a0:6d:75:d0:9a:f0:19:89:7c:64:14:23:
e3:55:a4:ec:bb:93:0f:7d:d0:93:59:71:e3:a6:ff:
80:be:6b:cf:25:54:55:ba:cd:48:b5:f6:55:1d:d3:
7c:af:0b:2d:63:21:f4:45:34:28:ed:fb:3f:a2:39:
d7:2b:71:ec:b8:2e:3f:1f:8d:76:3e:64:39:53:49:
4e:d8:c6:f9:24:af:d1:4d:90:65:c8:87:41:80:55:
ea:31:8c:d1:a4:9f:51:b9:b5:e4:bc:4f:f7:cb:55:
94:ef:7d:dc:eb:23:d3:16:a8:74:2f:57:0c:99:c2:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F2:7C:82:BD:6B:F5:BC:77:B1:17:F2:84:64:EC:25:78:B8:6E:5B
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5c:97:27:94:0c:fc:e9:8e:2b:9d:a5:7a:1d:fe:89:ec:6c:
cd:05:c9:64:cb:07:17:16:7f:da:cf:fa:02:cf:5e:5f:aa:9f:
89:d3:68:6e:71:16:7c:0d:be:04:39:04:ed:dc:5e:fe:7a:1d:
6b:c0:c3:36:b7:3f:bd:6f:9e:25:2c:a9:b1:07:a6:2e:3c:54:
8e:29:72:5d:ec:69:9c:3c:f9:1c:a7:3a:25:91:fd:0d:16:fc:
0b:a5:8f:4c:3b:af:a9:5f:8d:2d:2b:8d:98:5c:2f:00:aa:ae:
1a:05:bb:d3:f4:52:cc:7c:2d:ce:eb:13:d8:40:e8:9a:f3:47:
be:2c:fb:4d:f2:18:f4:a9:39:4f:b4:8a:88:b5:9c:5e:23:70:
d4:fa:9e:b6:8b:ec:70:ff:56:ea:a3:1a:1b:f6:a9:29:6a:55:
86:de:1e:8b:b2:58:21:1c:c3:97:1f:7e:8c:de:7d:e6:13:d4:
5a:73:d1:67:11:35:4e:d7:8e:57:c4:66:2c:d2:34:66:2b:89:
fa:45:94:87:75:83:66:77:07:f7:15:0c:c9:d1:3c:ad:2d:80:
d5:97:8a:07:35:49:76:cb:a3:55:59:0f:2b:0d:60:71:36:d4:
52:55:b3:29:de:b3:98:0a:b7:56:4f:74:d9:cb:84:a3:57:97:
2c:98:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:09 2025 by rpki-client