Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: ZKNiuzQ8rAhbCUQCds9arEzmsbXoTelUwq6KDtnn/TU=
Subject key identifier: 26:86:9E:17:E4:3E:EA:B9:85:E4:37:A6:AC:3D:81:E4:30:A0:8C:45
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 0194BBCDD13CA6183414B1FB49775E6F6734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: CKxwaFRZkSYH8+Fdwo5IWYPGLDRRBabemkQvRME4Frk=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d1:3c:a6:18:34:14:b1:fb:49:77:5e:6f:67:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=26869e17e43eeab985e437a6ac3d81e430a08c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:e8:0e:3a:94:7f:64:62:51:41:ea:35:08:
0e:18:53:64:41:e8:ca:7d:9e:de:3e:ca:74:fc:24:
70:d4:18:15:c2:21:42:42:66:75:6b:5e:28:8b:81:
f8:6f:bb:59:f8:95:14:97:63:6c:9c:13:43:ad:34:
c0:90:3f:e2:10:d0:40:46:67:ea:30:d3:37:c6:27:
04:05:0a:69:71:0b:b8:6f:e1:df:11:ba:db:ca:c8:
11:cf:68:d8:1b:5f:bb:45:72:d6:97:90:b3:88:92:
73:ff:ae:69:b2:cb:32:be:da:b7:39:c4:a3:e7:cd:
91:e5:7b:43:50:a3:f6:0c:d6:06:0f:62:ef:fc:dc:
df:43:61:9e:c6:10:03:67:7c:76:00:f4:7c:47:97:
18:71:72:67:18:d0:05:7e:07:c4:aa:e9:b9:b0:dc:
1f:f9:ed:35:5d:45:f8:86:6a:94:ce:14:39:f1:6a:
59:d3:78:6c:91:6d:ee:60:04:0c:fa:17:98:10:3e:
af:bb:a6:89:54:58:23:8f:04:c2:46:33:59:5d:7d:
4f:b1:4d:2d:97:e1:7d:1a:7b:ef:3d:f5:96:36:e0:
08:4c:09:07:ce:14:a0:b4:18:80:6c:dc:f1:89:f6:
51:ba:21:14:c1:08:6a:0c:32:23:0b:17:57:06:88:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:86:9E:17:E4:3E:EA:B9:85:E4:37:A6:AC:3D:81:E4:30:A0:8C:45
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:14:0b:f3:96:e4:07:af:c7:0d:97:73:9e:cc:68:3f:3c:07:
1f:60:93:79:5a:75:f4:24:ae:a6:08:f1:4e:b2:bd:ec:fe:1e:
5f:4b:de:cc:93:97:5e:3a:10:a2:d7:a4:4f:45:9e:6b:a8:49:
e4:31:2a:f9:8a:5d:38:99:73:79:98:23:76:a2:fe:b3:a4:a1:
22:0b:01:07:36:b6:d0:61:09:8c:72:4f:cb:a2:68:08:f3:3a:
2f:f8:53:69:f3:01:a3:fb:ea:45:5d:61:2f:73:4e:f2:c8:62:
8b:78:da:f4:35:6d:30:e2:37:4c:5a:a5:eb:1d:1b:4f:d4:5d:
94:6d:7a:72:ab:5d:9b:a5:9f:6b:ea:73:50:6e:69:56:c5:85:
39:69:89:2b:36:6e:e6:25:bb:50:9d:10:ce:ea:57:2f:8c:a8:
75:30:e9:d8:47:b8:7d:fe:e0:6b:53:9e:b8:a1:6e:c1:d9:2e:
fd:6a:1e:99:48:51:f6:1c:9b:bb:30:01:e7:21:91:a7:30:b2:
6d:7d:d7:b5:1c:3e:2d:d5:95:ae:11:a0:11:c0:17:87:a3:c7:
06:f3:41:70:c9:f4:ab:5b:c2:d3:62:69:c2:c7:16:8b:c8:91:
ff:c0:dd:d7:13:fd:51:0d:cf:31:26:30:d5:4f:bc:1e:f7:8c:
ea:dc:e6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:15 2025 by rpki-client