Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
File: dkVpLUvTDPnpidVbrI0I53FEk6s.mft (raw, json)
Hash identifier: 8qvBJHDfokbrt3Ct4nZ6Q3wKZrMOtkLDJBtU+wD8R1k=
Subject key identifier: 17:55:C6:5A:B4:4F:03:04:5D:AC:23:DE:C2:F0:41:6A:7B:B3:1D:62
Authority key identifier: 76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
Certificate issuer: /CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Certificate serial: 0194BD4EB9416DF178A357B81E0D8BB131D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: dkVpLUvTDPnpidVbrI0I53FEk6s.crl (hash: jL1sZVdcW+kEROfJS9U7Z/r+PC1FymEBbggrwZIxZ+I=)
2: tw-JhgZaIhYM7CuKmzr1AJkdh10.roa (hash: 3rXwFFVqIdNAvyJsMoYPI2Vf5HC08SaiRVdv18FaOaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b9:41:6d:f1:78:a3:57:b8:1e:0d:8b:b1:31:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=1755c65ab44f03045dac23dec2f0416a7bb31d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:23:52:cf:3d:08:b5:a5:a8:cd:55:a3:b1:
90:76:1b:bf:1d:74:7d:e8:55:30:e7:bb:88:b2:62:
f7:18:ea:c6:99:cf:05:13:74:f1:bd:a1:4a:1e:cf:
17:38:f2:21:ac:db:a5:f8:00:37:10:6c:69:78:86:
c5:2f:1c:d1:b5:1b:c9:48:8e:74:00:a6:e4:32:01:
45:78:9d:9e:22:c0:49:2e:f4:36:fe:6a:04:03:bf:
13:bf:46:5f:8d:20:64:eb:16:74:3d:5b:e3:6e:6d:
ac:73:99:ed:2f:64:85:c1:ea:bc:44:68:6e:09:9d:
32:a0:de:58:8c:5e:91:8e:60:00:e3:86:f7:11:56:
9d:f6:20:b1:c5:f1:0f:7a:2e:ab:d7:1a:5a:c1:fe:
7d:4e:ae:2e:68:37:7e:49:d4:4e:81:07:3f:62:d7:
72:05:ae:42:52:e7:67:6f:2d:a8:21:c0:0c:3c:b4:
14:0a:57:8e:c5:c4:5e:6f:00:79:c3:24:54:9e:04:
de:27:eb:52:55:20:68:26:9f:6f:2d:2b:39:fa:da:
36:6f:da:19:4f:20:20:9c:fc:76:8f:64:74:ee:1f:
1c:ff:71:e7:0f:29:2e:72:e1:d3:8b:7c:bb:07:34:
99:f0:d7:b4:62:68:2b:54:0f:07:ad:ba:12:d5:c0:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:C6:5A:B4:4F:03:04:5D:AC:23:DE:C2:F0:41:6A:7B:B3:1D:62
X509v3 Authority Key Identifier:
keyid:76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:33:7e:9f:b9:b3:d6:5f:af:68:64:ea:0c:c7:53:63:21:70:
1a:a3:f4:57:00:8d:8e:1e:a0:6c:66:c0:c4:ba:20:ea:89:60:
c4:08:4c:df:aa:01:e7:3d:0a:b7:98:72:3d:b6:56:6d:88:80:
5e:0a:6a:f8:22:d5:b8:54:3a:55:e5:2f:d1:8b:a4:6f:26:5d:
86:85:70:27:39:f8:43:c4:85:c3:8f:e7:b8:ab:73:7a:b0:a2:
f7:e4:ae:a8:a1:61:c9:de:0a:ea:94:05:07:41:dc:fa:3f:94:
11:7a:37:d0:d4:ef:71:99:52:c6:1c:23:87:98:88:dc:29:7a:
3d:70:b1:c5:6a:45:59:df:ea:81:7d:0d:4d:ba:46:07:ea:19:
33:c0:b1:1f:c3:70:11:6b:11:05:96:c8:ea:6c:43:54:63:51:
7d:86:e4:26:64:67:78:82:b4:50:64:90:e1:f7:28:f5:53:95:
3f:43:35:22:76:d1:9a:c9:19:1c:2e:d8:60:92:63:8c:25:ce:
18:71:c7:f7:c4:d9:ff:62:da:c9:83:5e:86:31:7d:7f:f6:c2:
33:b9:43:18:49:bd:d3:7b:4c:31:2b:43:f2:25:e1:62:fd:24:
7d:ca:b4:10:b1:8b:00:73:da:96:b2:ae:f8:47:c3:eb:50:1d:
92:51:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:59 2025 by rpki-client