Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: LzOl4B6w1Nilg3mBhSiDksDCrMIoQMCQo2TXZtQpBNE=
Subject key identifier: E2:1D:79:4B:3C:90:E2:C9:78:73:29:47:E2:8F:AE:1B:C8:01:84:BC
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 0194BC3C2A49959762B5AC1B65DBA5EA0D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 124E
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: 8p3FeP9fWKucuFd2k3wyGNGZSeU.roa (hash: IrFcc0YYy1C3QLbl87tZXheazbbjvEZoA4G9ckLCKck=)
2: dQ7PQgQCEBEpwy_WLxXRryqd5tk.roa (hash: S5qkCaFaQoiq2cgXZvEG9830rDpPotFIWE/GKsgVjpk=)
3: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: pywz4NvnhosWBgqI7FhbXQo3mAVlHbT78tYZm/qJL28=)
4: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:49:95:97:62:b5:ac:1b:65:db:a5:ea:0d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=e21d794b3c90e2c978732947e28fae1bc80184bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:90:c3:bb:4a:5e:5a:79:46:de:e7:8d:8b:
81:70:8c:98:5c:bb:7d:84:47:86:e2:ba:20:f8:ea:
c4:b6:c7:4d:88:7b:f0:67:a8:f4:ae:5b:2c:52:61:
a8:e2:f7:9c:64:33:82:51:e6:d7:8d:0e:d9:e7:2c:
f4:c2:53:77:e8:ef:05:10:08:d8:ab:ac:52:3e:ec:
27:88:c6:22:10:fa:1b:b6:9f:39:76:f1:af:29:b8:
88:90:5d:20:78:09:8d:9e:a5:4b:c9:88:ee:9b:30:
1b:b5:b9:ee:b2:7b:c5:ef:df:39:38:b3:95:32:61:
77:97:1c:63:08:c9:3b:ad:df:b3:40:0a:88:7d:32:
92:cd:7e:66:ba:91:79:31:84:27:92:43:4a:46:8b:
85:68:37:44:40:24:4f:fc:88:18:3f:b1:60:d2:e2:
27:33:ce:51:6b:bf:1a:f6:3c:6f:fa:c3:d5:20:67:
4e:56:1c:26:c9:1c:cc:f8:3e:d1:f1:ce:b3:fd:8b:
27:54:73:d1:15:41:1d:d1:ba:12:c3:bf:a7:40:6e:
19:fe:b6:49:c2:09:17:ec:30:3c:cc:b5:64:26:66:
f1:e0:a1:d7:bb:ec:02:db:63:d4:0b:ca:a0:6a:a8:
22:cd:50:a2:a3:2e:50:f3:79:66:4e:0a:b5:94:22:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:79:4B:3C:90:E2:C9:78:73:29:47:E2:8F:AE:1B:C8:01:84:BC
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c4:dc:c7:e8:61:48:f3:a8:98:3d:21:73:9b:9e:8b:80:37:
99:10:ca:41:a4:bf:7a:6e:e7:0b:8b:1a:4e:35:af:2c:b2:e0:
ef:c2:a2:42:d0:92:4b:cd:0c:fd:99:1f:05:d9:59:fa:37:20:
fb:df:cb:cf:63:ea:84:45:e8:98:05:a2:58:92:49:f1:d4:10:
79:8a:e8:9f:66:b6:91:2a:8d:ca:59:0d:e7:b4:94:16:9c:a5:
e7:93:86:4f:db:db:ce:a9:18:86:53:4a:15:ec:42:2c:62:b8:
03:69:e1:88:fa:c9:36:28:65:3b:c0:c3:5d:90:82:d4:2d:5d:
ae:dc:b5:0f:45:e3:ae:28:25:d3:24:13:6e:9f:7e:46:39:da:
af:b0:ce:88:c1:bd:74:e2:ad:5d:8d:eb:1d:fb:43:3a:a9:f3:
2b:10:2e:83:be:be:f4:16:02:2a:68:89:26:21:f5:c5:c7:71:
1c:7f:d3:c9:fe:99:c0:db:0c:9a:b9:2b:ca:75:c0:e3:01:ac:
65:cb:f5:2a:d4:5d:9b:6d:69:38:03:04:ac:82:76:58:21:6c:
d3:63:5b:63:a1:f6:6a:1c:75:49:3c:47:89:0b:74:61:47:0e:
cc:4d:5a:aa:0b:20:c1:87:2a:4a:0c:f2:2c:8b:e5:7f:0e:65:
38:ae:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:08 2025 by rpki-client