Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
File: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json)
Hash identifier: FuRtxtzhlPcM+6Zf9SO/yuEZZFeRgaYsIBpBENOy3HQ=
Subject key identifier: 63:C2:AA:D0:FF:B4:88:6B:7F:A6:E7:54:6B:66:99:81:16:A3:67:E7
Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Certificate serial: 0194BBCE5542E983ED9569E70649F6F8E72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: H2w8JqTu41j6sOaqt5dvtQSbV0Fv2sozwMICw1Q0yzc=)
2: dnhmPWmpRWX9rAh9nBMTSVjDqxs.roa (hash: fzOf1Or3/SM11VjxsfHMYPlVNvpYFDsl88MJ3GBj7FI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:55:42:e9:83:ed:95:69:e7:06:49:f6:f8:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=63c2aad0ffb4886b7fa6e7546b66998116a367e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:96:dd:dd:97:02:c6:46:75:d0:b2:78:fe:
aa:9f:bc:86:7f:4e:56:a2:b1:cc:e3:4a:43:7f:d2:
f5:38:79:28:de:24:c1:5b:d2:c6:d8:ab:6e:2a:1e:
b1:40:e3:48:66:01:b4:50:e3:af:b5:9b:f3:30:b3:
97:c6:59:7a:a4:91:f4:f0:5d:6e:ee:46:40:9a:2a:
19:ea:5d:dc:4f:53:4d:3b:8c:15:d0:36:06:e1:4e:
1f:e9:8e:b4:13:f9:5e:48:a4:98:53:d2:29:ba:b1:
7b:d0:52:38:a3:e1:1e:51:46:d0:8a:5b:04:f7:bf:
12:fb:eb:ab:6d:c8:61:84:84:c9:ec:c2:8d:e9:88:
12:94:4f:8c:9b:c7:8c:79:2b:64:a8:b3:0b:c5:a6:
5e:4f:7d:b2:1a:bb:55:56:b2:ed:90:5d:b9:eb:78:
c4:16:5e:af:5e:c4:1a:0a:76:50:66:3e:9b:5b:17:
57:95:56:bd:92:d1:46:90:68:cf:69:cf:13:38:3c:
1b:3c:17:bb:3b:0c:96:d3:90:32:8c:9e:0d:91:ea:
90:d4:c3:61:71:cb:f6:b1:d7:d0:4e:df:54:25:30:
ae:e7:ba:4d:1d:68:b3:5b:1e:02:b8:fe:e6:ec:36:
ef:82:6e:d7:2a:c8:a7:9f:45:d0:48:c1:44:80:59:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C2:AA:D0:FF:B4:88:6B:7F:A6:E7:54:6B:66:99:81:16:A3:67:E7
X509v3 Authority Key Identifier:
keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:13:d4:ca:10:c4:3b:90:84:9e:f1:1b:3a:2e:75:42:d7:e0:
da:9c:d7:8b:10:ac:fe:8f:ae:d5:2d:ea:d4:5f:01:13:15:7d:
a7:3c:2a:04:aa:c0:90:b1:c4:5d:32:2a:ec:e9:47:6d:68:89:
f7:73:08:d3:13:92:2b:85:60:13:6d:fa:2f:66:c6:54:00:21:
e4:8c:e8:e1:5e:3a:19:42:5c:53:4e:5f:85:2e:72:ed:f7:58:
d7:67:70:ad:d3:0c:65:d1:3b:82:3c:50:67:72:82:6e:29:1b:
91:08:a6:ce:4f:61:4b:8d:43:d4:5f:ff:f2:82:5f:4b:f0:7f:
40:f7:67:39:61:3a:92:26:31:51:3e:27:a0:70:6b:d7:fe:47:
ee:57:4d:92:86:60:7e:45:dd:07:9f:e4:11:55:b0:59:b6:aa:
ea:89:f2:e6:78:df:50:22:70:74:e8:f3:f0:20:f8:52:d8:c8:
46:73:5b:18:b9:72:52:8e:07:18:72:d8:cb:99:33:b8:ef:6e:
ac:80:bb:6c:d9:f7:6f:3a:e8:f3:c3:58:da:1c:dd:f2:8e:25:
38:d0:c7:d0:ce:a8:e1:7a:56:b0:39:8e:7f:8f:52:9c:15:d5:
38:4e:ac:1e:cf:9a:00:07:20:16:c0:46:9c:6d:df:e2:21:f6:
90:9e:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:04 2025 by rpki-client