Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: VDQJLuFGNohA9jWgvVCVg1zkBKebUoJDC0nnYm3HB9c=
Subject key identifier: 83:49:B4:3E:46:78:15:91:D4:82:B7:2F:E0:50:DD:2C:EB:61:A3:CE
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 0194BD4E6813B5758FE8C8385D0CA8770FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 0EF4
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: 8XOWoX+hAdDxIJtuwhmrfh5n12gQqZTBiG7Bm4bmpEo=)
3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:13:b5:75:8f:e8:c8:38:5d:0c:a8:77:0f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=8349b43e46781591d482b72fe050dd2ceb61a3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:59:a0:b5:c2:d8:6a:b3:86:c9:fd:c1:d8:
c4:26:1f:11:75:13:a2:f8:6d:eb:b7:3a:bb:ad:35:
5f:b1:6a:86:98:45:be:c4:46:0d:3f:e2:cf:e8:4b:
30:4d:10:78:a0:24:8a:64:de:2d:64:61:62:87:fc:
3a:9c:cd:12:df:50:ae:81:d5:31:a8:4e:49:2a:3b:
aa:88:32:47:45:ca:e3:65:14:3e:6e:5c:6c:69:97:
ef:44:98:86:69:44:af:29:98:65:6e:cc:59:e8:a2:
be:85:32:72:b8:66:46:8c:80:2f:35:02:12:6b:97:
65:5e:19:19:8c:f1:4a:9c:4c:a2:64:4e:19:37:53:
d3:f9:4c:a1:2c:76:b4:b4:9d:7a:3a:13:31:64:b5:
9c:0f:fe:dc:42:13:64:15:9a:7e:85:39:63:ad:d8:
7c:44:f6:0c:a1:44:21:36:6c:e8:aa:a8:f7:52:21:
91:e2:60:86:b7:65:ed:c7:3c:00:55:55:a1:6a:2f:
5b:75:bc:e0:4a:44:48:cf:7d:cd:05:e2:24:80:53:
bb:57:86:25:07:9d:9a:f1:0e:d2:01:0d:55:4c:99:
5a:da:2e:ee:97:85:f1:b2:2c:f6:3f:bb:71:ce:b4:
c5:d2:69:ee:ad:7e:bb:aa:44:18:7c:68:05:56:e4:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:49:B4:3E:46:78:15:91:D4:82:B7:2F:E0:50:DD:2C:EB:61:A3:CE
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2d:57:ad:30:d4:77:25:8b:64:32:ac:29:94:11:29:89:72:
66:b5:1a:d4:66:ba:77:43:b3:b7:15:88:d8:ee:3d:0d:58:36:
ca:fd:8e:6e:97:aa:8f:f8:a0:45:d9:b0:56:04:f2:d2:63:4e:
d8:c1:89:27:6a:cc:34:ad:bd:2a:a0:21:98:c0:44:3a:45:9e:
ff:3a:f9:0f:94:97:75:d2:f1:2d:15:db:a6:3c:6c:32:88:b6:
9d:03:ab:65:91:de:5e:0d:d6:62:f0:ca:35:94:47:f5:31:b6:
3b:64:d8:4e:a4:b1:da:f4:c7:db:2c:31:ea:c0:9a:ff:d3:bc:
6e:61:f6:f3:1c:18:43:77:c2:06:b6:7f:22:3a:ac:63:da:da:
40:5b:f3:e5:3f:8e:7a:84:be:42:ff:fd:2d:ff:e8:8e:29:0a:
3d:b8:b8:ed:ca:c1:4a:b5:8d:2a:e0:bc:b2:98:0a:5e:9c:cc:
d5:a6:ce:f6:87:e1:9c:19:f7:ad:be:d1:c8:31:d8:79:a2:a1:
b4:45:95:8f:f0:1a:c5:2a:8c:22:a6:86:f2:0c:54:a7:e9:1f:
87:b7:df:72:b0:21:5b:33:01:39:8c:76:f7:3a:da:35:75:92:
34:59:da:0f:fa:94:e9:f1:36:c4:2b:ce:9b:03:87:27:98:74:
69:b4:17:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:42 2025 by rpki-client