Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: lmCR0z2k4bin6Ok1taLVJ9WrbRGzdLoOdhp+nDfMF38=
Subject key identifier: BA:AF:77:E3:F2:31:68:A9:64:02:BD:14:8C:4B:54:88:F5:A4:3A:74
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 0194BC04DD7133A4F585BBBEBB243CF00EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: 8jLDc+ZypNiuLHPo+rTOdU+B7o9R2K7U9PCmtmYLHAQ=)
2: M1fWkBIHAuVSUFxtDGIthqqmrJE.roa (hash: +6gCxjSejI/as6boiaKhDkfwSxB7S4u8Oz//yZsKkyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:71:33:a4:f5:85:bb:be:bb:24:3c:f0:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=baaf77e3f23168a96402bd148c4b5488f5a43a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:d3:40:02:4a:2a:b1:fb:b0:f8:5f:97:f2:
30:6c:0d:32:2f:a3:36:db:cd:97:a2:73:a7:4e:a9:
96:dd:f8:69:6f:d2:76:19:12:37:91:89:36:51:79:
88:22:72:ac:5f:86:3a:26:f4:fb:91:1a:b1:fc:b2:
81:ce:da:c0:0f:7a:0b:35:1e:93:f1:23:39:c9:cc:
a0:15:0d:1b:ef:76:6b:4f:a4:b1:d7:2c:07:04:f2:
29:9e:2a:10:88:4e:99:4a:8d:b7:7b:90:ed:b4:6a:
72:ca:2f:36:2b:43:53:1b:da:b7:74:d7:90:c9:5a:
e9:8e:69:9c:ff:63:f0:af:78:be:ea:38:40:a2:bf:
c9:7c:50:51:2f:18:01:3b:aa:26:a1:d1:61:cc:86:
cf:f6:1e:ed:ed:ec:40:75:f8:c6:d7:33:54:e7:ed:
8e:e0:5a:84:96:75:29:c7:f2:bf:c8:3d:e3:6a:8d:
2b:78:50:4b:ac:43:59:70:21:12:e1:a2:45:e8:7b:
3e:b6:a7:19:a0:47:ba:1e:07:f0:22:14:60:a4:24:
b5:13:d5:3c:2d:6d:07:01:ef:3a:bf:33:6f:92:a9:
67:6c:c0:b1:5c:ca:fa:cb:8a:c2:18:7f:11:6c:f4:
a8:ea:86:91:9c:56:61:de:eb:ab:e8:7a:5a:57:b7:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AF:77:E3:F2:31:68:A9:64:02:BD:14:8C:4B:54:88:F5:A4:3A:74
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ef:88:fe:02:0d:a3:e5:87:2e:36:eb:98:a4:ab:fd:60:ed:
d1:0e:70:0a:e7:8c:15:cd:85:48:6d:0f:12:f8:63:d0:50:19:
90:e2:e3:61:77:d6:7b:4a:6e:81:af:7e:6e:5e:ad:32:fb:5a:
df:53:34:f0:ab:bb:e7:20:84:33:09:3b:98:98:12:7c:47:81:
3c:d0:f1:63:25:50:f9:c3:82:bc:4f:39:bf:5b:a1:26:a6:c2:
2a:35:57:6b:8c:3c:b6:37:15:84:20:c9:9b:7d:e0:b1:10:42:
f3:fe:ce:78:fd:79:37:d1:85:82:b1:48:6e:87:da:8d:c2:c2:
48:e1:9f:08:10:01:65:3b:18:6b:73:56:84:9e:5a:5b:6d:4e:
f4:67:7e:a0:82:cf:6c:c2:58:f1:66:ef:d8:32:80:64:a2:86:
3f:0f:9f:c9:08:33:64:77:4a:33:73:74:fe:c3:05:1c:3f:85:
5c:d2:31:c5:39:78:29:f6:d7:22:4a:11:12:e9:73:46:c3:52:
0a:1d:80:40:9b:a9:ba:ce:3e:a9:fe:06:90:86:a2:05:66:64:
cf:a7:05:21:34:dc:1a:98:8e:29:43:fd:24:b7:cf:2e:8f:a0:
f1:b2:a2:dd:80:8d:08:8b:a9:95:bd:56:73:72:3d:d1:ab:7c:
d4:4f:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:59 2025 by rpki-client