Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: 3h0DWc38h5oZ8TzCATpExD8llTaINlmD/rytcv8pbe8=
Subject key identifier: 32:45:AB:7E:A6:77:B5:FD:DD:BA:7C:A9:14:AE:72:F8:0E:1C:F1:4D
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 0194BD85AA9F5D1FCFDE55F2DC6E39016701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 0C5E
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 4Ibv1mRm3BSugEZRLZ50GEzm6Bc.roa (hash: Ox7Eku50X67DCQ6L0nXfJGgK/iPhql76+0sQGSQq9Q4=)
2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: hwmznBZwADxKQ4js5Wct8k0bdnwlKQ9mieJPjzpOSCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:aa:9f:5d:1f:cf:de:55:f2:dc:6e:39:01:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=3245ab7ea677b5fdddba7ca914ae72f80e1cf14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:65:93:c7:a8:94:fd:c7:47:55:97:1a:f3:
13:f6:9e:12:5b:86:70:1b:9c:60:8d:4e:2e:20:0e:
30:4f:c7:de:e4:0a:6a:dd:ea:f0:22:bf:df:03:11:
76:fa:0f:64:cd:b3:45:00:02:04:eb:a5:4d:d5:7e:
44:62:32:74:ab:b6:67:bd:21:46:e7:6b:87:db:eb:
57:db:63:71:1d:87:9b:9e:e3:0d:f6:6e:af:47:3e:
0b:97:4f:ed:d2:02:21:6f:b2:4e:a9:0a:4d:93:33:
fe:6c:c7:a2:06:3e:d8:01:07:88:0b:3d:b0:40:8f:
72:6f:f5:9f:59:a7:23:0a:a4:e9:e3:c3:6e:73:ae:
9e:21:c0:e5:8f:5b:a0:bc:a9:ae:fe:f3:fd:56:31:
62:99:38:f8:8f:36:fd:09:5f:ef:3f:0c:b7:8b:b5:
63:ef:ad:67:82:12:33:e0:bf:6b:de:74:50:9b:02:
93:3a:58:7e:89:4b:c2:5d:1d:d2:0f:97:a5:84:13:
14:89:f0:05:53:48:db:f6:97:b1:24:19:f9:06:02:
ae:a1:d8:81:ea:18:4e:b9:ad:90:72:d9:24:00:7a:
c0:6b:fb:81:1a:cb:21:4f:0b:0e:45:7d:bf:13:1c:
0d:08:73:7f:5a:b9:c4:8e:c8:19:ea:bd:72:b9:fe:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:45:AB:7E:A6:77:B5:FD:DD:BA:7C:A9:14:AE:72:F8:0E:1C:F1:4D
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:39:0b:73:6b:2e:ea:1d:4a:75:01:91:86:1d:00:aa:57:1a:
5d:fb:7c:9e:56:bc:f1:9d:64:94:72:5c:78:2f:b7:35:68:e9:
c1:11:f7:6a:ca:df:82:da:1c:4c:3d:f7:5a:ad:73:86:60:5b:
03:30:c4:d2:25:1d:4e:c3:af:7c:ff:bd:6e:b3:15:1c:fe:f8:
f4:47:24:a1:86:08:89:93:e1:97:fe:66:2d:38:4a:78:5d:1d:
06:88:df:4d:66:45:1e:83:c0:a1:d1:a8:74:6b:6a:2b:ad:07:
91:14:6c:23:9b:fe:c5:ce:5f:26:66:9e:0e:d9:19:64:fb:2f:
e8:05:0d:2f:8b:af:75:75:74:b3:a5:7a:ec:6d:64:8d:13:fd:
5f:10:10:54:8f:05:e6:38:11:9b:9b:e6:08:f6:f3:99:a3:a4:
49:87:63:05:e2:9a:e3:95:85:56:c5:95:34:93:3e:08:db:72:
c8:db:44:7e:84:bb:e3:a9:9d:2f:0f:36:ad:97:77:5e:08:05:
b4:c8:14:1b:a7:ae:3a:6b:ff:79:0f:90:72:4b:0f:5e:fe:19:
25:33:2f:8b:92:bc:b4:9f:05:b2:81:9d:6a:54:17:65:28:11:
c5:1b:2f:85:be:6f:3c:00:4a:a8:f6:cc:43:0c:3b:dc:fc:29:
67:fa:0e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:57 2025 by rpki-client