Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: Edy4orIZe8n83GzjQycH5evne1hZgjrz6JrGm2i/zrM=
Subject key identifier: 90:CF:9F:A4:83:69:C1:F1:0A:B5:29:9C:38:36:BB:3A:C4:82:01:0A
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 0194BD17847B9B741A1C4DF0C7A7AC1C0A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: EtwKB3EW82WtSevLj2YfgeUdb36Lh1Nw3OGLzBV1pi0=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:84:7b:9b:74:1a:1c:4d:f0:c7:a7:ac:1c:0a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=90cf9fa48369c1f10ab5299c3836bb3ac482010a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:90:3b:2b:28:85:f9:fc:fe:6f:14:7c:ba:
5d:7b:08:76:d7:bb:65:92:ee:b5:8e:0c:77:a5:d1:
d4:28:13:2a:e2:49:a8:69:37:69:93:6a:cd:34:68:
3d:d7:f9:15:0f:0a:e7:64:a5:ec:ad:b7:85:6c:f4:
cc:a0:e6:11:5c:b8:b5:d7:80:74:96:38:01:60:a2:
e9:d7:27:45:d2:33:d7:f0:83:5b:6a:c7:bb:47:3d:
c8:6e:80:9a:f0:95:6f:1e:a8:bd:a8:f7:cb:5a:a6:
b5:4d:67:7a:e2:ee:e4:53:6d:a6:32:4d:da:81:96:
cf:4e:3c:e8:14:03:06:37:0d:ea:17:01:59:d2:39:
7c:79:63:cf:90:c6:64:cb:b0:66:76:87:31:1e:8d:
b2:ca:c9:18:bf:26:5a:15:00:bf:28:b6:f7:2f:31:
d7:4a:88:05:38:8b:58:51:d7:e0:2c:50:75:11:8b:
01:f5:1e:20:f5:15:de:32:5d:46:13:0c:4d:77:f5:
77:df:97:20:2c:c5:33:06:7d:87:e3:87:10:c2:93:
a1:d3:3e:ba:72:77:50:16:cd:ce:87:9f:7d:b3:97:
11:c9:f3:f6:58:90:d5:2d:76:bc:75:c9:d7:56:15:
eb:65:a3:cd:78:b8:4f:05:f0:2e:f9:08:f8:59:c3:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:9F:A4:83:69:C1:F1:0A:B5:29:9C:38:36:BB:3A:C4:82:01:0A
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2f:b6:5d:73:c0:31:81:d6:b0:b0:96:6d:df:50:b6:e9:81:
17:7d:43:29:b9:73:1a:d3:53:89:14:43:fc:3a:e9:39:ef:07:
ea:be:7d:c1:af:95:74:c3:ad:a3:23:1b:f9:0b:e3:e0:60:28:
15:9e:0e:b6:14:4d:21:68:ba:65:80:07:7b:f1:41:ef:4c:c0:
84:29:ee:a2:f6:1b:01:15:b1:a9:91:6e:be:66:e5:b0:d4:95:
db:7e:34:f2:c7:62:9a:b0:ec:79:5e:7e:0e:fe:8b:01:0e:5c:
ce:69:21:bf:14:d3:cd:cf:83:15:7f:19:02:c9:d0:a3:d8:c1:
eb:04:12:93:7b:46:9f:d4:9a:d7:2d:13:9f:ac:de:b1:b4:59:
b1:16:be:e7:ff:32:bc:f6:a9:0f:42:f5:b0:4a:48:d5:10:02:
5a:da:86:80:51:fb:00:89:82:4e:da:78:5c:cb:7c:7d:65:2a:
3b:b0:d4:1c:4b:f7:85:c6:b8:a3:a6:c5:2d:d3:22:5a:83:01:
89:55:57:eb:c8:71:7e:91:ad:9c:4a:84:7d:0c:60:f1:19:73:
a2:6c:26:ca:6f:6a:09:9a:ff:5e:5c:f2:ac:4f:57:0f:88:54:
4c:e9:53:77:5b:a0:84:a2:e9:6f:87:76:6b:ee:e6:5e:78:d4:
1b:06:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:11:08 2025 by rpki-client