Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: OUKRGg51xi4WxYsVWaDrkRoQsoaD9A37Jik173YL4CE=
Subject key identifier: 2E:BD:89:A8:FA:14:2E:5E:9D:6D:E2:B6:C5:A7:06:35:43:BE:BC:CB
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 0194BD17B578F92FA444F982F54A3A4B7302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 08CC
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: 9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (hash: Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: KRp59htrtul1M/FV1XJGJU2KnPp3YWvZLzR9ePPCNYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b5:78:f9:2f:a4:44:f9:82:f5:4a:3a:4b:73:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=2ebd89a8fa142e5e9d6de2b6c5a7063543bebccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6b:d3:fd:84:51:ec:b5:7b:d8:f5:8c:1e:8f:
15:0d:76:0a:ca:d2:80:00:b0:59:30:f1:a2:d1:a8:
89:ca:56:ed:e6:f4:ce:15:31:34:02:89:1c:9e:7c:
98:d3:f4:6f:97:cd:52:d0:7a:c1:7f:dd:28:b7:bc:
8e:34:7b:11:6e:af:ec:c4:57:8b:5c:10:ea:04:53:
97:ab:56:ff:93:f8:aa:f5:43:0c:a0:3a:5b:ee:35:
c9:92:cd:50:50:e9:14:db:c1:27:48:55:83:43:0a:
44:67:41:88:14:63:96:75:15:78:1c:ae:01:c9:ed:
d3:9e:93:b1:60:0a:b1:15:62:d3:38:ed:93:b5:a7:
f6:c6:fe:67:95:c8:8d:a7:17:d6:6c:2d:73:e3:95:
36:18:e4:c3:8f:df:c5:78:42:43:2b:0f:b4:9a:8f:
c0:64:67:1d:77:3e:53:ed:cd:81:1e:11:34:48:03:
8d:58:9a:9b:56:10:29:d9:68:ef:ff:27:51:2f:b3:
07:a9:b0:1c:e7:d0:b4:88:cd:fb:82:df:20:23:4e:
7b:d1:c4:d5:02:d2:70:c3:5e:bd:d5:e3:f4:26:14:
0d:46:e6:c1:0b:bc:53:90:b9:4c:4c:18:2f:d9:91:
3c:a6:a0:3b:3d:70:76:c8:d1:cb:27:a0:39:65:70:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:89:A8:FA:14:2E:5E:9D:6D:E2:B6:C5:A7:06:35:43:BE:BC:CB
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:47:fa:66:70:e3:c7:b7:2a:47:fd:1f:6a:12:48:d4:74:cb:
86:35:bb:7d:7b:7b:8b:0a:61:e2:9d:29:6d:72:82:2e:e5:ff:
52:b1:04:ed:11:cd:f4:c7:e6:16:80:cd:03:6d:8a:d0:a7:04:
ed:58:27:2f:30:56:66:86:c7:c4:88:52:e8:44:2d:a9:52:b7:
36:7d:31:8d:28:d7:d5:ad:ba:83:d8:42:1d:b3:35:79:2e:95:
db:50:76:80:dd:43:26:e3:36:1a:fe:9b:52:c8:48:87:74:66:
16:48:ff:3f:f2:01:f4:c0:60:8c:cc:59:46:9e:00:04:70:be:
8a:c7:13:ed:ed:91:fc:01:e5:5c:1e:56:c9:8e:dc:91:41:2a:
a0:11:bc:4a:8b:6f:d8:20:8c:38:46:67:f4:dc:c3:43:87:51:
14:a2:82:2b:3f:fb:87:62:d0:27:16:3d:18:1e:5d:af:0d:ae:
bb:c4:6e:1f:c7:df:bd:4b:77:6f:aa:5b:59:c2:07:23:ef:70:
d0:1f:e6:55:f1:74:64:b9:14:bd:69:b0:ae:96:ba:97:75:5d:
cb:44:f3:82:f1:38:a6:61:a0:dc:8b:80:d5:c3:fe:e9:7d:94:
af:5d:dd:29:e4:3c:54:99:ef:31:f6:a0:f6:ca:1d:99:e6:91:
86:3c:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:57 2025 by rpki-client