Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier: sZIRVV0NviRRaa13f9Zz2vPxr/dqWjg7sfet2cfcy9A=
Subject key identifier: 34:5D:93:A4:26:04:EA:BE:89:91:81:78:79:92:B4:D9:FD:94:9E:C4
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial: 0194BC3BE330C4C6085B6EE284441E06C981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number: 022B
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=)
2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: dBKl0NpbBvhYFcQUvV4XrX6FdPg5QUHbceuwcp6W2VY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e3:30:c4:c6:08:5b:6e:e2:84:44:1e:06:c9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=345d93a42604eabe899181787992b4d9fd949ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:34:2e:7a:4f:eb:0f:16:bb:b3:a9:8b:4b:
8e:15:90:ad:84:76:d9:97:cf:2a:69:96:a1:79:fb:
e3:94:c8:c0:e1:09:40:d2:eb:51:9e:a5:d4:c0:e5:
0e:97:76:3a:95:ea:d9:d1:77:a6:1b:c2:8e:f5:f5:
1a:96:0a:ad:6c:26:42:6d:d9:0d:41:d8:d4:74:18:
3e:f1:04:0d:9d:23:c0:48:97:4e:21:03:b3:0f:49:
f8:be:4a:a3:a2:ec:50:2b:58:74:18:f4:84:f2:2a:
27:1e:be:75:49:2e:30:0c:95:65:93:4e:61:42:15:
a4:e6:2b:b9:4b:97:55:1c:f0:1e:e2:26:96:8b:6e:
aa:3b:bb:69:23:70:c8:f0:12:86:ac:c5:67:86:5a:
06:ea:fe:65:50:56:ef:ec:bf:1d:73:2e:10:c6:59:
75:7c:bc:e2:f3:01:9a:8b:0e:e8:04:f2:16:26:a1:
a4:6e:7a:7b:56:24:bc:ff:05:a5:7d:a5:e4:d7:63:
71:5e:6f:08:c7:88:e1:29:b9:28:e1:13:9a:a2:9c:
6e:13:91:72:47:e9:cd:a9:d4:ae:db:8a:cb:22:e7:
e9:83:ac:de:09:96:9d:6a:ed:83:ff:a2:27:d4:e4:
83:f4:e9:c2:b5:80:66:49:4d:f0:b1:79:d3:53:b0:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:93:A4:26:04:EA:BE:89:91:81:78:79:92:B4:D9:FD:94:9E:C4
X509v3 Authority Key Identifier:
keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:51:87:ca:06:c7:66:b0:ac:f7:5a:1b:16:97:63:1f:e8:18:
eb:aa:a0:9d:c3:fe:12:1e:5e:36:19:f3:be:73:da:c4:f2:13:
5a:76:ad:1b:8d:37:b9:f6:a5:63:b4:b4:32:0c:64:37:4e:ef:
e0:dd:90:63:94:1e:1b:d3:8e:80:63:ef:3c:2f:dc:f2:ad:27:
f0:77:51:e0:0e:fd:72:b9:24:10:8f:4f:13:a0:e1:23:56:04:
14:68:7d:57:c5:dd:cf:62:b6:a9:cc:82:16:81:d4:ee:d3:20:
83:6f:91:d8:f9:1d:d5:4c:60:6a:31:35:99:67:5e:11:a7:28:
66:28:d4:9c:92:1a:fd:6d:a8:78:b3:d6:36:82:e3:ae:6c:df:
1b:a1:c3:ca:51:71:ae:ca:af:3b:44:ee:9b:72:6c:04:be:ae:
9b:08:f9:26:23:cb:54:96:9a:cb:ed:32:01:ef:ef:5a:f7:fe:
b9:09:b6:64:e5:39:95:af:f8:3f:8b:bb:d6:09:fa:71:5e:84:
c6:25:85:83:a5:e1:bc:5a:47:11:1e:c3:2c:af:8a:48:8d:3b:
b6:f9:19:7e:4a:cc:46:5d:57:03:be:60:0b:4b:a8:3c:bc:b6:
fa:de:2f:2c:14:9c:1a:d6:90:46:cc:bc:16:46:a5:f2:9d:98:
76:ac:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:15 2025 by rpki-client