Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
File: dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json)
Hash identifier: 32yzx02p8Ia7aK91fCFfzxV8oGWx9xWVIlzQzxYvKJI=
Subject key identifier: 08:39:DF:07:56:94:BD:0C:54:49:D2:A7:FE:41:36:97:70:61:E9:62
Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
Certificate issuer: /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Certificate serial: 0194BD4EB6AEEF957D074042C55AED28F267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: EbZ-PzExvsrKZ1aOLdbMth19YQY.roa (hash: Y23B6h9Jehv4hPRBbE1Q/MgzAwC8F0dy1/k/s/bejkY=)
2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: gOq9EsjeNbA0K2vw4xnljeySX6ldgmgM+/DgW3qr/sk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b6:ae:ef:95:7d:07:40:42:c5:5a:ed:28:f2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=0839df075694bd0c5449d2a7fe4136977061e962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:d8:77:8f:4f:41:67:6d:b6:a5:5d:47:f0:
1b:09:d8:14:ac:f7:a5:79:f9:15:a4:5a:24:92:00:
e9:3f:d0:97:29:fe:e7:4d:d2:e9:ae:98:df:0f:35:
ab:c1:b0:9d:c9:10:05:80:f8:e3:65:da:62:f0:b0:
78:a3:16:20:da:7e:e4:f8:2f:f2:a0:7e:dd:78:f9:
6e:48:f5:09:1a:06:a0:9b:fc:16:a4:52:57:fc:22:
09:5d:0e:9a:eb:8b:ce:a4:e9:47:e9:eb:80:7a:80:
d2:eb:41:88:be:24:fa:0d:4e:02:f9:6e:c6:76:61:
16:c8:8a:f3:e5:e5:a7:0c:99:fa:3a:6b:81:e4:a5:
3a:65:57:1a:a9:46:51:bf:41:42:d0:19:3a:58:4d:
e9:8b:40:6c:2f:6e:67:11:85:77:1e:33:56:56:48:
16:f4:4c:a5:10:e4:97:3c:b0:9b:0b:ad:3b:31:7f:
85:f4:a6:a9:5f:9f:c0:02:11:c7:99:8d:de:3d:d8:
b0:55:35:24:12:a9:53:28:bd:d9:bc:f3:b6:1f:83:
a5:71:4e:ac:50:de:60:a9:ef:80:77:26:13:21:38:
fa:2e:c9:12:16:d9:51:aa:cc:aa:35:67:29:ef:5e:
a8:52:7a:3c:c6:d2:c1:cd:24:b1:e6:1b:d3:01:2d:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:39:DF:07:56:94:BD:0C:54:49:D2:A7:FE:41:36:97:70:61:E9:62
X509v3 Authority Key Identifier:
keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:30:aa:83:85:70:66:26:8b:d0:41:c8:67:c5:8f:75:72:86:
9b:32:33:af:aa:cf:84:4a:55:55:3d:57:ad:72:d8:fb:af:0f:
42:e0:ac:21:e8:00:c9:68:10:22:0e:57:f5:00:1d:e8:48:15:
24:58:1a:fe:f4:bf:4a:f8:c3:cf:32:0f:8e:02:b4:5d:d3:79:
f1:a1:14:9d:07:0d:43:8a:c1:0a:01:49:b7:8c:3b:e5:f6:d4:
c9:cd:44:4a:84:27:41:4b:2c:ca:6c:b5:f7:46:54:d2:c4:5f:
db:f2:1c:38:2d:74:66:a4:96:78:a2:ba:6f:44:cc:9a:e0:48:
59:1e:d7:f2:18:7c:d8:cc:05:5f:24:68:86:ba:ea:aa:e6:00:
f6:14:d5:f1:d0:18:b1:63:c0:42:83:04:b6:bd:bf:03:5f:51:
89:7b:ab:e5:30:28:46:2f:a9:28:e1:3a:47:d5:5c:ee:6c:8f:
72:03:72:f6:9f:21:70:51:da:1a:13:4f:a0:2d:43:9f:6c:48:
2a:66:61:d7:0b:a6:75:9a:a2:63:36:a1:80:57:54:a3:fb:60:
5a:2d:23:a2:17:8a:22:06:9b:6f:e9:d0:50:fd:61:bb:3c:38:
9d:f6:08:82:e5:94:f2:8a:a1:64:77:4c:67:56:70:6e:99:98:
db:56:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:15 2025 by rpki-client