Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier: fJ828MJwbbaNG/Q+yiYzSPArEqU/Fj6uJyvrfpZ6tBs=
Subject key identifier: 57:91:E0:C8:85:40:E8:A2:9C:40:98:17:9D:AE:0C:1A:FE:4E:D8:01
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial: 0194BCE0D8819E703EBA200E5CD25994EB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number: 123D
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: dSINZpa1g6YL9g2r98K9kusdQoMBf2lIESIbW7xj5ug=)
2: XZUkkjfK1svUa6feBEevTKvtEcA.roa (hash: wyVf5zW45oYKuYL+LlUqTk3eWYEVvuJxk1VRagHAyy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d8:81:9e:70:3e:ba:20:0e:5c:d2:59:94:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=5791e0c88540e8a29c4098179dae0c1afe4ed801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:ae:fa:a8:d3:9d:b2:8e:68:79:94:91:74:
93:7b:8f:df:3c:66:bd:e8:14:91:d0:f8:05:dc:96:
86:0b:de:51:28:57:d0:08:8f:66:6b:86:d3:fd:e0:
cd:68:da:c1:13:eb:f7:06:a3:62:22:a7:a7:dd:2f:
4a:11:4c:90:20:2e:03:b2:f3:12:2e:62:71:f3:88:
46:35:75:96:c7:d3:60:81:88:5a:05:eb:20:ae:c9:
f0:8d:fe:a8:36:7f:0f:d6:37:3f:18:98:34:ab:7a:
9c:4e:2e:37:76:f0:9f:18:d0:87:6e:66:12:e9:f4:
25:01:95:5a:d3:4b:81:67:58:df:1d:01:2b:cc:3a:
72:84:30:1e:79:24:aa:7e:2b:40:d5:76:fe:23:94:
35:20:34:2b:2e:9f:d9:79:cd:96:97:69:a4:59:af:
fd:c2:b9:f9:88:43:c9:ee:14:f6:9a:52:7a:e9:4d:
b2:ed:ef:51:85:30:4a:97:09:de:96:1a:b0:be:0b:
ab:55:dd:28:32:6d:3f:9d:43:76:b4:2f:45:68:c2:
76:76:7f:d6:35:66:04:a1:a5:14:ec:5d:ea:e4:60:
16:1a:94:d9:b5:24:f9:54:32:4c:af:d3:49:4f:de:
c3:d6:3b:49:b2:ed:1a:8c:e2:28:d1:da:07:ea:78:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:E0:C8:85:40:E8:A2:9C:40:98:17:9D:AE:0C:1A:FE:4E:D8:01
X509v3 Authority Key Identifier:
keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d8:fa:b0:bb:84:1d:6f:82:45:70:0e:39:ae:eb:ec:8f:d2:
d8:03:9b:e6:1c:80:a7:95:d7:62:f6:fb:d6:18:e0:30:7f:33:
05:da:1a:3c:45:9a:23:03:45:3a:50:65:02:cc:48:5c:3d:d4:
6c:4a:25:e2:82:9f:a0:5d:dc:f2:a0:9b:b2:db:11:af:76:71:
ad:ca:7a:c4:98:94:08:ee:2f:24:50:6a:09:75:ec:c3:e3:77:
c8:2c:4d:86:e8:bd:44:dc:be:3c:0d:a4:a4:8a:cc:90:97:c2:
dd:2c:a7:0e:a5:4c:93:a2:bb:66:89:3e:d5:c3:fe:3b:e0:bd:
4a:40:5d:50:19:5c:d2:58:9e:42:a5:68:70:89:a0:ef:b5:e9:
21:94:08:70:43:96:e7:41:b7:a6:c2:c2:aa:e6:95:f4:dc:7a:
1b:c3:34:6c:0d:46:f3:9f:fe:82:32:e8:a0:94:f1:70:47:d0:
3d:92:6a:ed:68:52:02:02:17:6d:e7:85:5c:1c:b2:4b:a7:c0:
ec:81:f1:06:18:04:2f:2d:85:27:a0:9a:60:7c:ea:eb:19:88:
da:a4:39:09:07:6a:cf:c1:6b:65:60:bb:0c:49:b3:00:c4:29:
3a:dd:14:c0:f0:96:29:50:ba:35:2a:b3:e6:64:23:55:b5:a6:
6f:28:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:28 2025 by rpki-client