Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File: 2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier: IxsV1tPjoimzg242QZ1M1AT1jVJMmC/oMk8nnXVZsaI=
Subject key identifier: 37:66:BB:09:CE:40:B7:CA:EF:42:84:C5:BC:F9:7E:A3:42:CC:B5:FE
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 0194BD85BB743DA1B2A6A1CB01FB70D397FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number: 09DD
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: UH0AcBnTINUHIr1SJsDH637KenE84e2AWjXpQP2mVVo=)
2: 49OmEENKn2pggkZrla5_tvJAS5g.roa (hash: y2VOplSKaFK6l6b//Hy/89Z9on3Nk836w0LqiWTCSxQ=)
3: lZqh98v1p7SMdnTevU2ohDFVTYU.roa (hash: O0iB20pJ4bqjR3GQawrzp1OwygFy4onsg0mr0/s03uQ=)
4: xOL_ByJQJZQBMqDAvRuOKjD76Yk.roa (hash: oV4k7YTonHST8wxb9nEmyy0EnbuDv3hYSGZBk73gZvg=)
5: xecKBG-5zOD5D7toMwtGQRd77mk.roa (hash: VjeDvqfnK9S1Xqz2WVeOHJfDmbKhSILhl1uzwtOGP6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:bb:74:3d:a1:b2:a6:a1:cb:01:fb:70:d3:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=3766bb09ce40b7caef4284c5bcf97ea342ccb5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:40:e7:4d:a1:f2:4a:be:68:cf:f6:06:01:
fd:f4:35:6e:4c:fc:68:80:15:4f:d4:b9:0d:f5:4d:
22:ec:57:94:fc:7d:c1:59:de:0f:28:16:b9:b9:39:
e6:2a:4c:24:5a:ea:25:5e:f8:8d:e9:47:bd:35:45:
ee:14:ac:85:ac:9b:b1:cb:cb:cd:02:7a:e8:b5:69:
04:66:42:08:93:3e:2a:15:aa:16:db:c7:25:bc:31:
1b:06:0b:e2:17:0d:be:de:ac:a6:a8:3c:b5:3d:3e:
11:69:bd:a9:19:0a:a9:f9:95:04:aa:7c:56:1a:3f:
2d:14:4e:ba:e8:a5:a9:db:5b:d2:68:71:e8:72:9b:
e5:64:33:1b:66:0d:96:d2:ac:0b:e3:d6:31:39:7c:
de:84:3c:ea:cd:39:44:bd:98:e1:bc:09:07:1f:ec:
b4:a9:6a:7e:37:89:76:e4:48:f8:6e:d8:de:3c:fd:
17:53:58:bc:1a:1b:2b:c6:f0:df:99:55:42:0c:cf:
9c:77:b0:33:46:a0:2f:ab:64:1b:17:22:25:35:b9:
b3:bb:d7:57:6c:a5:56:d7:ee:42:10:c6:ca:39:26:
9e:a0:46:24:f1:ef:67:1d:a8:8d:0c:7f:34:c3:5a:
29:08:ff:b6:68:cf:0e:40:e8:00:4b:e0:15:45:93:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:BB:09:CE:40:B7:CA:EF:42:84:C5:BC:F9:7E:A3:42:CC:B5:FE
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:10:e9:6e:08:e3:e7:80:7c:af:86:9e:e6:f8:66:10:eb:
4a:7e:ea:2b:0b:0a:0f:ff:67:63:0b:87:1d:d8:40:58:a1:46:
ea:8a:53:2a:38:de:e8:c1:2e:4e:c8:65:3a:1f:d0:92:b3:31:
d5:40:41:f3:07:2a:50:3e:de:1a:e5:60:4b:3e:84:ab:e5:f2:
58:db:f1:a4:f7:59:9f:9e:5a:07:47:f1:32:ae:b8:1a:f5:eb:
51:de:67:f4:db:ab:35:51:00:07:30:79:38:24:68:45:cb:01:
73:dc:d6:84:cf:00:02:e0:fe:70:c7:4c:76:55:61:2d:1a:c4:
d8:15:9b:5c:e5:6f:22:4e:aa:49:fe:e8:d0:c7:35:6c:38:e3:
16:63:b4:43:4e:20:25:3f:58:24:59:09:08:13:df:a1:d8:a5:
b4:64:bf:26:cb:95:54:ed:c3:24:a1:86:c8:43:c6:9c:15:b0:
e7:db:b2:8a:9d:ed:2c:38:f5:8f:7a:94:f9:cb:db:7a:f7:f1:
f2:b0:21:63:67:2a:58:4c:0c:ca:7c:05:6b:46:58:51:4a:e8:
95:8f:31:c0:ba:d9:d7:72:60:cc:4b:83:a1:66:29:c9:09:85:
43:9f:39:fe:ea:4e:93:98:6b:df:63:12:b7:9d:3d:fa:9a:3e:
6d:c6:d2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:43 2025 by rpki-client