Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: z5RBcJnYlYm8yb/CUPMsomBaNjWL8DD1UHyhK4u5GbA=
Subject key identifier: 28:43:69:CE:FF:1F:F6:CA:D2:49:D9:EE:41:DD:E8:B3:C7:79:4F:CE
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 0194BC72F3C8DFF2EE17109B47376E0AD20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0D13
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (hash: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: 5nv7nhbZfdVs0M3jULrlUnAF9mZ1bPdzQv5Lk5cE59A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f3:c8:df:f2:ee:17:10:9b:47:37:6e:0a:d2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=284369ceff1ff6cad249d9ee41dde8b3c7794fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:c5:0f:9f:30:e9:6d:cc:d0:ea:ad:52:b7:
7b:68:b2:a7:14:62:fb:2a:2f:29:d5:ac:8c:f8:8a:
10:8e:56:55:4d:a2:4b:a3:cc:4a:9f:d1:be:88:7f:
89:87:d5:4c:f2:2c:dc:e4:87:7f:21:a4:1a:f1:59:
e1:cf:8b:61:a9:e4:5c:62:c2:5b:d9:93:28:91:16:
fa:0e:f1:97:cf:79:e6:1c:ce:36:5f:e4:7a:e3:67:
d8:1e:4c:a3:ff:b2:14:db:e8:78:6c:df:5e:5e:58:
80:70:4c:c2:b3:84:53:6b:c2:45:d0:8b:39:4e:5b:
74:36:ee:44:36:e7:9e:45:49:cc:0d:f4:d5:fe:54:
f3:3b:d1:86:d5:19:e9:7a:7d:3e:a5:16:fd:f0:8b:
e8:26:7a:ae:93:90:91:ba:43:ea:3f:82:9f:68:c4:
fb:71:de:84:2f:10:1f:a4:5d:2f:54:5b:97:45:06:
d8:76:ad:c9:72:78:be:0a:7e:ae:d2:de:b4:6a:7c:
20:01:c5:5c:6c:b8:4d:1b:d9:4c:ca:34:02:9c:e1:
c3:f0:a7:25:dd:36:73:85:4b:81:29:9c:83:e4:46:
a2:06:1d:98:d5:b3:36:9a:32:3c:d1:e8:36:5e:c5:
46:03:c2:8a:1d:b1:1b:ab:e2:11:53:1d:65:20:ee:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:69:CE:FF:1F:F6:CA:D2:49:D9:EE:41:DD:E8:B3:C7:79:4F:CE
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2f:42:d5:72:9a:58:86:9b:1b:4a:ee:60:f8:b0:fe:f7:d6:
69:a3:cf:4a:20:23:2a:1f:02:0f:59:39:d4:46:43:a0:34:0a:
95:5a:14:a1:79:68:52:81:95:29:25:e3:55:d9:5c:13:af:26:
de:07:4b:aa:22:d5:a1:b5:f4:0e:23:ab:0f:2f:b4:b1:a0:06:
94:6e:37:93:42:a9:8c:e3:13:23:b1:07:de:2d:f1:2e:85:13:
80:ef:01:66:e7:42:7a:3a:1f:32:7c:96:0f:da:5e:55:1b:27:
72:0b:38:0c:60:29:9f:d7:e2:5d:1c:51:9d:3b:5a:50:bd:5c:
12:3c:56:43:1e:f0:d0:86:1f:26:b8:41:03:10:e6:a4:e9:10:
34:e2:d3:d9:c3:21:14:7d:60:f8:e5:1b:1d:42:f3:09:59:60:
5b:85:72:44:98:1c:3f:5f:de:b1:15:50:c6:c1:bb:27:44:4a:
39:96:f6:86:4d:ae:d6:7f:7b:da:01:ba:de:2e:45:29:d0:c1:
83:16:97:70:83:6c:a5:19:c8:41:77:c0:3b:04:1d:96:e9:0b:
26:6f:72:6e:ed:d5:27:b1:4a:82:f1:cf:21:47:9f:9a:3c:5a:
6e:e1:3d:ef:0a:84:ff:95:de:9b:f3:67:a9:db:a5:3a:1d:23:
8f:4f:07:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:13 2025 by rpki-client