Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: iwivTfn6dowZBG5B/CTGGY5pRcZtuiftpuN6Yy0ZXH4=
Subject key identifier: 14:AB:D5:CE:D7:75:91:92:12:1C:70:AA:FD:10:8E:2A:63:CB:20:97
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 0194BD179AED3A1FB4EB4A80B3B376AA8613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: lh4gRwiumxxEYc3xEQAWpy06+N2c26xhER2g31CcMEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:ed:3a:1f:b4:eb:4a:80:b3:b3:76:aa:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=14abd5ced7759192121c70aafd108e2a63cb2097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:89:76:d7:79:68:19:ed:48:70:c7:9d:d2:
47:f8:97:22:c6:75:02:b7:a3:49:21:72:ad:fe:27:
63:e9:d1:40:95:bc:e9:f9:50:17:d8:cd:20:20:9b:
55:b4:a8:13:82:a9:c0:c1:e9:fe:61:c2:c6:bc:c8:
9d:17:0e:d8:7e:a6:44:3c:1a:7e:f0:60:4d:f0:4c:
df:9e:0b:70:4f:7f:42:c3:a7:fb:82:8e:6f:e4:af:
af:76:9b:f5:2e:ce:32:d5:45:d0:65:04:cc:ba:bd:
6d:b5:e9:58:59:79:b7:04:1e:d7:a9:1b:9e:cf:1e:
71:81:2c:74:32:1b:f1:3e:f4:63:b0:e8:30:af:74:
31:0c:ea:2c:75:d6:9a:0b:7c:4e:4e:84:9a:f6:bf:
c4:6e:57:a3:67:8e:ac:64:fc:a7:1c:31:33:31:c1:
6a:fa:0b:26:30:85:6c:6a:93:2a:fc:37:d4:52:ec:
f8:a4:23:b7:47:08:fb:23:60:13:e9:f2:ec:ab:b8:
16:ff:96:0b:4c:6c:69:4c:bd:9b:02:ab:81:08:f8:
5a:51:e7:4a:06:b3:8b:62:e6:54:a8:45:18:7e:38:
4e:8e:c4:ac:67:fa:00:4c:37:21:f6:c1:15:82:25:
97:b7:88:d1:b8:61:5e:76:cb:08:6d:91:d0:d3:32:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:D5:CE:D7:75:91:92:12:1C:70:AA:FD:10:8E:2A:63:CB:20:97
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:00:88:ef:4a:db:21:a4:bb:c2:20:a7:ba:53:81:2d:58:87:
49:cb:03:54:c6:b4:35:a9:fd:21:3b:ea:41:cb:06:e7:4a:b1:
68:63:e7:29:67:8c:55:77:ab:ee:71:e2:88:a5:ad:35:cf:d4:
ca:fa:4b:98:7d:dd:a4:fc:45:96:cf:b3:aa:bc:5a:fc:7e:76:
5e:a8:ec:6e:8f:bc:f2:01:91:57:85:3d:99:6f:7b:b3:8c:a8:
15:77:ea:7b:08:1e:ac:99:f5:db:04:fb:d7:54:59:72:1f:87:
4f:16:43:c0:ec:fc:74:f8:f8:db:10:65:bc:2a:1b:8c:a0:8f:
70:aa:f6:65:d2:f4:b7:91:2c:08:29:ce:be:0f:91:ff:bc:ef:
ee:29:2a:83:85:15:4f:7d:d0:4a:22:86:04:ed:b7:79:52:d2:
d7:44:99:86:6e:9c:b0:4c:b8:57:14:4b:8d:88:d7:b2:3f:90:
e4:41:9b:4b:5a:6d:76:23:88:a6:6e:c3:e8:8b:48:f8:6f:f3:
b5:d5:8b:42:d0:be:4f:26:60:f1:dc:4d:69:e8:6a:ae:71:87:
43:5b:55:3c:cc:d0:54:4c:c1:91:34:73:01:21:d9:6d:28:6e:
4c:67:76:25:74:a7:4c:b2:7c:61:0b:62:e0:89:49:eb:0c:a8:
8c:fb:a2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:17 2025 by rpki-client