Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File: dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier: TzeuxMpMhuEQcTuJOcVRAcx4hVYXeVXXXKudNg7i60Y=
Subject key identifier: 24:C8:41:18:1A:7F:F6:86:9A:24:47:DC:D8:B7:CC:0C:4F:69:C9:94
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial: 0194BD17C4F9AF5374CEC310E9187A6DA339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number: 0D4A
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=)
2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: cWD1p1bDbRl496JtGyq8MqfVHncKhW+NudxVBvP2R6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:f9:af:53:74:ce:c3:10:e9:18:7a:6d:a3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=24c841181a7ff6869a2447dcd8b7cc0c4f69c994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:80:23:20:e0:00:40:66:f6:d5:40:2c:97:
98:30:a8:af:8f:d3:26:22:b3:ec:5f:4e:72:81:63:
f9:bd:76:82:4f:ab:b5:71:2c:06:65:95:a2:67:b3:
56:9b:97:31:6e:4f:be:c0:4f:21:46:42:e0:be:23:
6b:ef:e2:92:ce:6d:fb:e2:dc:c3:fc:07:af:b0:03:
d3:6b:8f:d2:d7:40:ac:a7:ae:c9:93:70:87:c8:10:
85:be:31:48:e0:35:ce:2a:95:fd:0f:ee:28:78:78:
71:f6:75:31:6d:96:c2:a4:91:ff:44:c7:c2:51:99:
a1:46:47:e7:19:b2:cb:1d:c2:00:6b:ab:ad:62:8e:
04:dc:ba:89:01:a3:d4:86:2c:84:1e:5c:1a:5b:7f:
7f:68:46:b9:e0:27:61:2b:7b:8b:e1:45:a6:2e:80:
21:8c:2c:a3:26:ee:c6:69:3a:3e:60:fd:15:40:3e:
0e:9e:57:e3:03:65:1f:b1:11:5d:80:5d:ba:d1:70:
c7:7a:6c:3d:b1:a3:59:d0:f7:92:78:3f:8c:f2:1e:
31:6f:f2:5e:91:9e:6c:df:33:44:ee:a5:29:5f:c1:
85:31:6d:64:19:31:6c:43:b1:e4:bf:73:0a:f5:0d:
7f:aa:e9:36:7d:89:07:82:29:6c:bf:12:e4:47:f0:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:41:18:1A:7F:F6:86:9A:24:47:DC:D8:B7:CC:0C:4F:69:C9:94
X509v3 Authority Key Identifier:
keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9e:1a:2e:7b:07:c7:9a:d9:fa:47:53:6d:d6:2e:0a:c2:01:
e7:fa:72:c9:44:4d:f3:3b:ae:7a:c7:91:e0:e0:79:ae:ed:b6:
0b:8a:08:60:84:b5:43:31:c6:1c:89:ba:b7:68:9b:2c:12:ca:
72:3b:cb:6b:88:ec:a4:c6:67:a4:eb:90:9d:9c:33:b2:4c:72:
1b:b0:17:7d:4a:4f:09:8f:2f:c7:96:dc:96:62:c5:42:08:c1:
6a:0d:2d:57:1d:df:ea:12:2b:bf:ee:95:65:f9:86:aa:59:eb:
c2:d7:10:40:29:c7:54:99:48:ea:ea:36:f3:e9:f9:4c:2d:f5:
3b:4d:63:5c:ac:6a:8a:2b:fe:a5:88:dd:ae:15:ce:e0:33:e0:
61:1d:1e:f6:ce:19:9f:79:48:d9:56:93:96:f1:26:67:5a:1f:
66:8c:1c:c5:7b:40:6a:5a:b4:26:41:11:3e:13:5d:db:9a:23:
99:17:07:70:08:f6:7c:60:8c:7e:66:54:84:d5:e4:ee:70:9e:
9a:c0:bb:41:be:95:69:bf:db:21:0e:c9:13:e8:b6:c0:98:1a:
e5:c2:37:f3:bd:5d:c2:95:1c:9c:4f:d7:bf:c2:00:e1:e8:29:
2a:ca:d9:c6:85:f4:b5:f1:64:ff:ab:79:07:db:1a:c3:11:bc:
80:1d:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:39:08 2025 by rpki-client