Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: cDnsxZatXaPEqjO5m9Z5S82DXWRAahqIA3rWABZ0Bqg=
Subject key identifier: 5D:82:8E:95:6E:E0:EC:55:56:C1:50:FD:90:49:DA:51:E7:61:83:C0
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 0194BCE08D34BC983B9D05556481290827B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: YOtawe5OirDJPRdNBeJBa8Jmvx7wYE7Ky63n0t/4Kic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8d:34:bc:98:3b:9d:05:55:64:81:29:08:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=5d828e956ee0ec5556c150fd9049da51e76183c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:d5:61:f2:67:b3:c7:97:52:a5:80:38:0d:
2b:cd:ee:1f:28:6c:ae:11:15:9a:8d:5b:a9:9b:c4:
45:d0:d2:ac:80:b2:86:fc:08:71:d3:d6:2c:a8:df:
64:ba:87:b3:a3:34:32:fe:0e:0c:48:ec:80:9e:94:
75:5b:fa:6e:bf:89:3e:fa:42:b8:c2:64:63:5b:5b:
8d:1b:06:b0:d9:df:04:4c:ce:8d:c5:41:cb:bb:e7:
40:e0:d8:50:bc:17:eb:77:43:ce:7b:d5:60:d0:c4:
91:16:ae:ab:b4:c2:ef:2b:77:92:9b:0a:86:00:61:
e0:63:8a:14:d7:6c:53:2f:f6:89:5c:77:fe:78:98:
2d:3e:a1:d6:2a:e0:69:f6:a9:76:07:fe:71:51:e7:
bc:31:3a:fd:a1:3f:5a:a2:6a:5b:54:8d:b4:38:12:
51:eb:ee:c5:52:9a:43:d5:2d:83:b2:a0:6c:48:e9:
20:96:d2:eb:93:3d:4e:72:d7:a4:35:dc:23:dd:78:
0b:ab:ec:7f:af:d1:df:0c:04:78:f9:2b:a4:28:e1:
0b:be:77:ea:54:08:d2:61:e4:cd:d9:7e:4f:66:28:
57:a1:34:b6:d8:a6:71:87:78:d0:57:a7:d8:bf:17:
d6:eb:d7:18:3f:05:9a:dd:75:85:83:ab:1f:2d:ac:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:82:8E:95:6E:E0:EC:55:56:C1:50:FD:90:49:DA:51:E7:61:83:C0
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:70:c6:17:16:6b:f8:54:d5:a0:c5:95:c7:42:1f:36:f0:0b:
0a:38:49:43:5f:aa:a5:ed:38:3a:26:b0:98:6a:8e:92:9b:b7:
58:5a:ea:31:dc:04:54:fb:4f:d6:1c:64:65:4b:a2:ed:ec:a8:
8d:de:5f:ef:a2:6a:ff:6b:d9:e3:a0:5b:36:23:2d:d1:5d:02:
d8:c0:e7:26:4c:f5:ab:72:1f:f3:8c:20:ab:7f:1e:22:29:f0:
7b:40:26:67:9c:e6:6a:d7:c7:62:98:bc:90:55:2a:6c:55:e4:
8a:7d:4b:83:d6:a9:24:c8:e6:17:62:89:b5:85:31:47:d0:a5:
86:f2:36:84:e3:9a:93:77:fe:eb:6d:71:07:3c:61:89:89:17:
8a:b9:ce:82:94:48:c1:4a:71:dc:74:b6:51:7f:6f:b8:a5:bb:
9e:8a:12:70:0b:9e:a9:b4:fd:85:a7:ff:78:bf:51:9a:03:02:
31:58:83:de:2e:c1:48:48:ef:89:2d:81:69:a4:09:8e:15:35:
44:06:77:e1:47:39:83:d7:b1:1f:c4:13:34:6b:45:1c:eb:ad:
c1:d9:cb:14:76:97:df:b1:1a:75:b2:fb:6a:8a:8a:3f:67:34:
b7:e3:62:21:de:75:ab:13:f6:87:82:84:dd:0e:d0:1e:42:47:
f6:ee:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:33 2025 by rpki-client