
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: UkJlRc46nd+N4ufFiwOu7Y4YH9Dmu62X+av9YomXtws=
Subject key identifier: CB:9F:D0:A9:3F:3B:55:4C:ED:24:91:F0:BE:2D:F1:09:B6:C5:D9:C8
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 0194BBCEE7471B4A2E63780BCF9392C37E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 03E2
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: H0nHK0l24pH2B1n+MIjjw/U4iJP/Z+2GekHLabdSmjI=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e7:47:1b:4a:2e:63:78:0b:cf:93:92:c3:7e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=cb9fd0a93f3b554ced2491f0be2df109b6c5d9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:64:18:82:f6:bf:08:f6:b8:d3:a4:f1:8d:
04:e5:fd:0b:4f:97:65:39:54:54:e5:eb:64:c7:e1:
f6:f5:7e:be:6c:e7:66:bd:a1:5e:e2:5d:1a:25:04:
0d:64:55:44:77:69:ec:bb:43:f6:9f:92:74:8d:46:
96:26:87:7c:26:65:8e:38:a1:50:d9:a5:14:40:ec:
e9:d4:73:fd:31:b9:6f:2d:24:69:a7:ca:73:cb:b1:
fa:15:79:a6:6b:0b:10:1f:0f:ae:92:6c:79:ab:bb:
95:14:06:bf:5c:57:5f:e6:cc:05:24:2d:b5:91:09:
49:b9:5a:37:15:d6:36:55:7b:1e:7c:a4:86:d7:f8:
59:2f:f4:24:82:d0:54:68:04:52:98:e6:55:bc:19:
2c:cb:28:f4:a1:a4:86:67:91:6b:20:e0:df:23:44:
8b:2d:bd:ff:dd:e4:56:77:70:f1:1e:48:79:9b:8d:
93:3a:4f:ba:26:92:ab:51:b8:31:96:45:52:fc:a5:
db:06:7b:3a:6e:09:c4:ac:75:57:53:f5:49:cd:31:
44:37:b7:2d:9d:70:57:7d:59:86:25:94:c2:41:0e:
31:be:06:47:4a:37:32:8d:45:a6:8a:c0:24:10:17:
5a:7d:05:b4:73:d2:9e:6f:81:7c:89:a0:8e:c8:3c:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9F:D0:A9:3F:3B:55:4C:ED:24:91:F0:BE:2D:F1:09:B6:C5:D9:C8
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:83:c1:d0:53:bb:34:6c:3c:ee:02:d2:a3:be:15:e2:60:b7:
1b:81:b4:fa:17:b1:4c:eb:55:15:44:cd:98:2a:ce:b9:f7:64:
20:3d:92:49:dc:89:33:31:c5:02:2c:df:c1:12:2d:ee:e7:c3:
6f:b0:fc:81:8e:5a:fe:24:fa:79:e3:57:d3:c1:b7:c2:e3:ab:
54:1f:82:21:05:25:19:9c:f2:95:30:04:64:c3:d8:5e:35:67:
5f:46:01:82:42:87:e1:60:72:53:be:a0:b5:b7:fd:20:3e:67:
d6:ac:85:54:03:96:64:f2:15:b7:a5:22:e3:20:41:01:e2:40:
11:aa:d2:d5:7a:a6:f3:1f:b8:dd:76:bc:ec:c5:a3:81:e6:4d:
57:54:8c:88:97:a1:b3:a1:05:e4:80:e9:b9:4c:bd:cd:1d:03:
bf:7c:59:4a:eb:ac:6b:4f:9b:35:c2:fc:fe:ac:53:f4:09:7d:
cf:9f:46:50:a6:a1:4a:9e:6b:6c:e6:fc:5b:e5:df:f7:c4:b0:
99:68:21:29:b4:b0:15:c4:1a:e7:8e:13:c4:92:32:ca:5a:99:
5c:40:bb:c5:c4:02:9f:65:a9:be:b6:90:e1:5c:b7:7d:b2:18:
45:65:c8:ce:ad:ff:16:3e:e6:59:cc:c6:93:03:4e:d9:2e:a4:
3d:5d:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:24:57 2025 by rpki-client