Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: L9UzTF/EFv8/7oLUtEhbW5ZNFlpPzyhlGXlvd27PpKQ=
Subject key identifier: 6E:4F:B6:68:FD:62:FF:48:F8:46:E0:A2:DD:D6:0F:EA:92:12:73:71
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 0194BCAA0816C3FBE81C845FE2178289DB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 1208
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 5_kOrk9oP3_8LpHa04lopaDNoOs.roa (hash: taYYwA5WRT4de9qoNl6GeZp2wx5lTLgYK1KxyY9IZPk=)
2: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: o4+fkOAG56hyHFDdoxkjpljXHepr5nGlID9Qz6tpbK4=)
3: _MZl5mAk0VStSl6-Iutzl1XZEmc.roa (hash: GAxNehsNlSM4VBui+WLkl0ufFvlsHnC2diPLD2P3m8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:08:16:c3:fb:e8:1c:84:5f:e2:17:82:89:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=6e4fb668fd62ff48f846e0a2ddd60fea92127371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:e1:8b:d1:5e:0c:0c:45:91:05:93:ce:6b:
cf:18:9b:23:65:9c:34:eb:f4:41:b4:0a:f2:c2:cd:
26:a2:1e:cd:80:82:83:57:7f:cd:0e:64:4c:8c:b3:
fa:18:6f:0c:0b:1c:ed:75:5b:e0:34:02:7b:2d:ac:
13:51:14:a7:77:bb:2b:6c:9d:11:81:b2:ba:ad:2f:
f0:e7:20:61:64:bd:f2:76:e5:e4:df:74:58:19:d5:
b0:27:4d:57:f9:f1:db:96:48:19:db:97:6a:2e:3b:
d6:33:19:81:6d:32:9a:7e:f9:bb:0e:51:49:2b:cb:
b1:58:8b:4a:95:73:ab:dc:8a:bf:d6:33:66:8b:b3:
ff:a5:18:68:c6:5a:9a:18:1b:cb:65:6f:fd:e2:e6:
74:84:9e:2b:97:8f:4f:fa:30:3b:cc:d9:a3:62:9b:
bd:b3:88:7e:84:c9:8f:7f:5e:64:e3:0f:9e:da:0b:
79:dc:c1:3a:77:05:a5:7e:c6:cf:ec:2c:d8:1f:f9:
56:dd:56:61:e9:18:52:bb:1d:b4:33:47:e1:f3:ea:
c7:7b:96:f3:49:54:95:2b:22:76:03:06:4d:6f:64:
8e:51:c4:d5:45:8f:77:9d:ac:17:ef:53:b2:6d:14:
ee:a0:d5:89:4c:2d:f2:1a:2e:fe:65:5f:ae:ee:f1:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4F:B6:68:FD:62:FF:48:F8:46:E0:A2:DD:D6:0F:EA:92:12:73:71
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:1c:20:83:68:d3:ad:e6:e1:f7:65:b8:f8:cc:6d:fd:42:
f0:8b:c9:da:f7:f7:4f:a4:e6:cf:39:d2:b8:7d:c5:b1:68:2d:
6b:17:d4:3b:18:eb:1a:bc:96:46:95:bc:05:ed:d2:02:38:85:
89:bd:88:a4:b8:89:87:9f:65:a6:fa:a4:d0:8c:ad:76:6d:66:
a4:ea:87:47:e7:c2:5a:23:22:f8:a6:4a:64:2b:2b:c9:ab:9c:
58:fd:e7:7e:fc:d9:ab:e7:37:f8:dc:9b:58:16:2e:42:e9:4d:
85:a9:dd:a8:51:af:f4:6f:84:a9:10:2c:f1:76:51:b8:fe:e2:
1b:3e:16:c5:a3:e1:fc:af:e0:61:a1:ce:c1:05:74:73:d7:01:
a5:9c:f7:8e:71:60:56:e9:18:43:83:e5:11:a8:8e:13:07:a1:
15:c8:ca:54:b0:e7:15:83:d8:69:c0:20:47:8d:41:50:c0:2c:
0e:18:85:dc:19:b4:e1:b0:1e:16:8d:df:6a:9c:03:93:3b:aa:
22:13:90:7d:a5:64:d7:ed:b2:d0:82:fc:22:7e:59:89:3d:cd:
20:b5:fe:7b:50:8f:1f:44:9f:04:f9:c9:c3:f1:fc:a1:29:e9:
4e:66:21:87:63:c9:94:8f:b3:33:bf:13:36:7f:20:4b:be:ae:
60:c6:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:21 2025 by rpki-client