Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: F4OSfK9ZeZx3yIsGpDbHBWorGuxtb/52ADvlNR3zOpE=
Subject key identifier: 14:F5:55:69:B2:8D:0A:8D:66:DC:37:15:95:FD:E6:40:1C:71:9C:33
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 0194BC3C2F6894B1D2F204D7D9D0C1FA73C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 0BEF
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: f23/QR+6srUOPtU8eZqvdg2s+ZOflAhJaZ1xpt3TE44=)
2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2f:68:94:b1:d2:f2:04:d7:d9:d0:c1:fa:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=14f55569b28d0a8d66dc371595fde6401c719c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:96:06:bc:5e:e3:80:fe:ca:9e:47:8a:07:
b8:e7:3d:64:ed:f3:39:d6:a7:d2:1e:eb:79:a2:31:
a6:e2:f4:26:66:bb:74:7b:57:e5:e6:ff:5e:37:2f:
30:20:ae:d8:41:33:10:8f:18:d3:8d:03:ff:a4:07:
bc:cf:cb:c4:60:8c:90:cc:a0:1b:8c:b0:75:fb:58:
c1:6c:85:7c:f1:ab:d3:00:c8:37:f2:08:b6:3c:b7:
59:82:09:c8:90:6f:10:94:df:73:19:21:42:be:68:
15:7c:70:51:6c:66:d2:c1:ab:66:52:f2:28:17:bd:
25:dd:95:e9:d8:7b:26:dd:8b:3a:91:47:76:b2:b4:
af:6c:e9:e9:15:35:3e:c8:f3:ba:55:9c:85:9f:d9:
e9:97:d4:c7:f4:ab:b8:67:35:a6:2e:1b:5c:72:ad:
08:61:e6:22:22:9a:8f:7e:8b:82:8a:70:58:39:39:
51:35:07:46:cc:21:a7:4b:00:d9:bc:5b:84:1e:14:
53:fa:5c:90:cf:e1:bd:6b:95:8b:7a:ae:18:60:1d:
67:18:1c:bb:a1:f2:88:64:3c:10:f0:e7:d8:8d:dd:
8e:cb:73:cd:cd:6a:dd:3d:2e:2a:a7:23:57:d6:1f:
79:72:61:41:d9:2d:e1:eb:cc:91:fd:40:fe:c5:7b:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:55:69:B2:8D:0A:8D:66:DC:37:15:95:FD:E6:40:1C:71:9C:33
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5c:8d:27:1d:92:5f:38:3e:96:68:da:a9:54:e6:59:ec:9c:
9b:a5:d8:cd:2f:58:e1:7e:c8:90:dc:e4:93:f0:81:8e:cf:56:
49:28:a1:85:9f:40:08:ad:e5:5b:d1:6e:be:71:9b:69:1a:95:
85:7c:c3:98:65:8d:5a:fb:60:28:af:35:81:32:4e:a5:d6:46:
52:22:25:1e:24:8e:39:eb:8a:d6:0c:18:9c:b7:38:a4:0c:12:
80:b7:a0:73:c1:65:38:8e:f9:4b:b4:2a:00:87:b4:0d:91:08:
3e:ce:20:af:e7:5e:41:3a:0f:75:3f:aa:6e:3b:b2:5d:1f:01:
d3:42:50:82:51:b9:bb:b9:d7:c8:de:89:87:1e:2d:95:a9:a1:
75:a4:8e:b3:8a:f9:df:92:7d:44:db:ec:84:b6:70:45:26:09:
cc:00:6d:ac:be:5e:99:3e:f5:8a:ee:b5:b8:d8:53:2e:4a:13:
f4:c4:08:32:63:27:9c:c7:c8:4f:bf:f5:64:fa:c4:6f:7d:3b:
67:fc:d3:cd:f5:da:5c:21:71:1b:0a:de:b1:3b:19:72:d7:4a:
13:37:e3:f2:0d:58:73:47:7f:03:a5:e1:34:b9:5e:11:aa:c0:
25:0c:0b:03:f7:78:58:04:59:b9:5d:bd:2a:14:b3:6f:c6:ce:
c3:fc:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:35 2025 by rpki-client