Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: syWcXYGGOr1saW0vcKbYJeVsLslWcXwjkAF0YccjmV8=
Subject key identifier: 70:7F:6F:82:71:9F:8C:DF:4A:F4:74:7D:1F:F3:74:E9:5A:F4:D9:7F
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 0194BCA996674896BD03074B0B980FAFF9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0ABD
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: a7LO6ilOwW6swoSeKRpLy6I3LVg25eiq9UrX1YsN3ks=)
2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:96:67:48:96:bd:03:07:4b:0b:98:0f:af:f9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=707f6f82719f8cdf4af4747d1ff374e95af4d97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:1a:19:2e:4a:32:5b:c2:a3:2f:b5:92:6b:
d2:00:d3:9d:3a:57:db:69:33:1f:9c:00:39:e1:7e:
ea:48:e9:35:59:53:6c:9a:9c:03:74:88:cf:69:8e:
cc:91:d8:34:88:eb:d9:1e:f6:d8:50:42:62:68:26:
c8:d5:d9:90:06:ec:fd:ee:4a:b5:45:2a:ba:0f:ab:
42:85:0c:aa:1c:2b:7e:21:80:e1:df:3e:ee:73:2e:
3a:11:4b:a1:6b:28:87:d7:61:1c:e2:01:41:0c:49:
6e:3a:0b:6a:48:5f:3a:15:5d:f6:ec:ea:34:91:94:
e8:90:bc:01:d9:f8:be:84:a5:91:c9:6e:7d:e6:26:
0a:6a:f1:ef:f2:c7:2e:37:33:ce:f9:49:56:19:5b:
1b:2f:f7:1a:89:2a:3e:93:16:76:a1:df:63:8a:4d:
d1:fc:9e:7d:0a:db:d4:3c:de:87:36:b2:62:90:0f:
bb:5f:38:1b:5e:33:7b:14:1a:f2:ba:05:64:5e:fc:
f4:09:f4:14:6f:b4:eb:f4:a5:b7:28:19:54:a0:5d:
14:e7:ff:05:fc:05:b7:3c:93:13:39:58:c1:91:5a:
4d:ea:9c:43:de:90:25:ee:96:25:9e:ab:e5:36:e6:
2e:de:db:46:4e:4a:ad:fd:4f:a0:ad:da:20:d5:b1:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:6F:82:71:9F:8C:DF:4A:F4:74:7D:1F:F3:74:E9:5A:F4:D9:7F
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:81:e5:a0:e2:92:b6:f5:85:3f:d0:6f:11:96:49:31:30:bd:
83:8f:91:e6:94:fa:f1:88:d2:52:d3:f3:b9:60:82:fc:f8:56:
02:79:c8:3b:ba:77:a9:6b:c0:29:d1:e3:2f:c8:da:af:97:c2:
65:5b:71:f2:53:0e:ea:52:0b:92:ec:02:64:35:4e:44:50:1f:
bf:ad:37:63:8b:e8:26:97:e3:ec:47:b6:22:e5:01:92:cc:85:
40:aa:20:2c:24:0d:e3:f3:4b:28:f2:d2:e7:4c:cd:63:70:5d:
b6:72:6f:63:1c:10:d6:48:65:f6:54:0b:69:3b:11:9e:67:c9:
52:fd:26:65:a5:86:69:4f:d5:9c:d9:89:7b:29:55:ee:11:cc:
79:50:c3:d5:99:1b:be:1e:ae:56:ce:bb:94:a3:5f:8a:f8:2f:
60:f0:a6:cb:8c:ea:09:40:b9:bc:27:fa:6c:e5:77:bf:a4:30:
87:2b:68:ed:cd:20:fa:7d:d4:c6:d8:1c:e3:42:e3:34:b2:d7:
ea:d4:cf:fe:18:28:1e:99:4c:bd:da:c1:e2:f7:83:b0:01:86:
37:94:1f:89:1b:46:44:26:21:b2:3a:ef:76:e4:48:a7:0b:7c:
f3:6f:63:e6:be:2b:e2:6c:7b:00:22:70:98:40:db:68:fe:fc:
de:45:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:49 2025 by rpki-client