Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: 0BW2Yc2aVaw6gjJ4nDTR8aajI6FWng6f3kG3JTuLF9w=
Subject key identifier: 87:61:14:B4:13:1B:D9:2F:81:3C:56:EC:0F:23:3C:5A:26:97:A3:1F
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 0194BC04AD788120F45EEAF11AFC3034D5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 13C0
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: ez/g28inZ6NPGz4VO/q0wgaePv2Yiqc+iNyAijHUJvA=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:78:81:20:f4:5e:ea:f1:1a:fc:30:34:d5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=876114b4131bd92f813c56ec0f233c5a2697a31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:e5:a5:15:ec:fc:ef:3b:d9:36:46:89:3b:
d0:25:23:78:f9:62:81:1e:eb:5a:be:f6:49:49:33:
b6:f6:56:dd:a3:83:34:ea:75:1e:18:7a:bd:6b:09:
3f:53:a7:0f:a7:c1:55:91:4b:8d:af:04:98:65:62:
ae:07:4f:d3:e9:66:fe:1a:2d:f8:f3:69:29:4b:c2:
00:9d:0f:78:6a:dd:f0:f7:a3:d7:9e:ed:b2:ae:bd:
b8:5a:14:7a:17:c0:e6:76:1b:e9:5a:c8:44:cc:ec:
92:ef:ad:e4:d8:c7:6f:c1:d3:22:e6:88:35:5d:15:
95:44:91:36:61:ff:a3:55:de:83:95:f3:5b:f9:f2:
a8:0c:fc:be:97:5c:58:a4:92:b6:64:4a:af:d9:87:
02:18:7e:4c:4a:34:bd:34:6e:ed:69:8a:f7:aa:2e:
e0:d5:15:58:49:5e:31:fa:42:0e:d6:f7:fc:76:1d:
ca:9e:55:ee:18:9d:56:7e:30:74:24:b9:3d:d6:e2:
f0:3c:90:4c:c7:62:48:a5:5f:08:9a:05:6d:e1:d7:
6e:53:f2:a7:ac:56:ae:fb:db:e7:cb:54:dc:9a:67:
32:86:89:b2:64:b8:f3:5e:8e:09:c3:e0:18:43:03:
32:75:bd:c2:55:26:d5:1f:5a:18:00:a0:62:fd:48:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:14:B4:13:1B:D9:2F:81:3C:56:EC:0F:23:3C:5A:26:97:A3:1F
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3a:23:5d:a9:f1:95:95:6e:d7:da:11:a7:d8:4e:40:0a:9b:
f9:3f:6e:1f:45:8e:ec:af:05:2a:6b:c2:10:9c:b5:61:ea:fe:
03:17:54:0f:f6:80:bf:8b:3d:7f:38:c8:30:7b:8b:c5:33:7a:
14:3d:22:4c:be:8d:7d:29:88:fb:66:24:e6:71:7c:4c:f2:85:
70:b0:b6:67:93:a3:ac:dc:1f:2b:d6:a9:3d:9a:c5:a1:37:e4:
e3:3f:1f:03:93:7e:64:6a:47:ac:b4:0d:8c:5b:05:e1:3f:38:
ea:5e:da:67:74:82:d0:f0:f4:36:fe:5c:5b:aa:5c:56:19:05:
42:f5:04:bb:76:57:18:3e:22:86:9f:52:19:87:62:bb:20:4a:
79:c3:c0:70:57:69:2f:4e:e9:e2:0c:7b:fe:6d:5b:6a:79:62:
ec:6a:ba:d8:77:2a:42:7c:0c:96:71:ea:28:b9:61:4e:17:18:
bb:fc:81:82:82:84:8b:8c:be:41:f4:f9:9f:f0:3f:a2:57:50:
0c:7e:df:a5:16:1c:32:f6:ae:ce:73:cd:bd:fe:8c:e3:76:78:
3c:99:1e:b1:f9:60:2e:3a:97:a6:0b:8a:73:5e:95:be:42:61:
9c:69:d8:f3:cc:2b:e3:59:cc:88:6c:5e:98:13:fe:8a:c0:2c:
f3:cc:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:24 2025 by rpki-client