Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File: 23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier: u+gUQawANbmbdNC3aoJLB2lr7f8bngSe/un05wjUFl8=
Subject key identifier: 42:3F:0A:F9:7C:7E:46:9C:83:10:B8:01:6A:BE:09:31:22:06:C6:81
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 0194BC3C641460408F1D2A9DBFB148935BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number: 046D
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: 1-zGyc8-sNFoNd9jrRwy0ohv-lr8.roa (hash: X6damPmptp3XphV2HfGbEnZgUQ5Ok8UVDdDjwWdsAA0=)
2: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: hcCqUQbE1YpLM55qtb2onObUfa5SKtEjjzhoGGdDuMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:14:60:40:8f:1d:2a:9d:bf:b1:48:93:5b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=423f0af97c7e469c8310b8016abe09312206c681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:14:be:6a:99:33:c9:fd:76:38:35:e7:e9:
48:6b:77:b1:2d:21:eb:86:ac:2d:62:ed:f2:92:99:
fb:78:2e:13:53:43:f1:ab:78:ce:9c:ef:71:d8:6f:
89:99:a7:0e:d1:91:43:4b:32:24:50:f3:9a:51:46:
6d:38:a6:98:de:ef:6d:7f:64:c4:cd:c4:51:ae:2e:
b4:9d:6f:4b:39:b0:23:f3:e7:22:84:ed:9c:1b:df:
cf:0b:76:d2:6b:b4:93:5a:98:bd:9a:98:5c:0f:40:
02:12:58:02:f4:0b:d0:94:bf:b5:02:c0:59:92:3c:
f7:28:6a:63:7a:db:77:fe:93:4b:78:ab:4e:a5:86:
91:25:72:9b:2a:dd:71:99:41:b0:65:8d:ac:e3:26:
c3:7c:68:e3:7e:78:04:af:d9:92:3c:d3:2c:e7:0f:
71:8b:63:01:47:fd:a0:fa:2f:e3:df:a9:fd:df:48:
19:e5:f6:f3:35:fd:ca:6f:a4:01:00:d3:54:cd:79:
37:59:d4:14:38:c9:08:6c:88:97:26:69:9d:78:cb:
3d:f8:31:1a:3f:9b:47:7d:33:27:a2:1e:5f:89:a5:
04:27:fa:a6:b8:3a:03:10:e5:3a:2b:23:1b:5f:b1:
46:c4:24:ac:26:a9:28:36:5a:ac:ae:0f:4d:cd:f8:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3F:0A:F9:7C:7E:46:9C:83:10:B8:01:6A:BE:09:31:22:06:C6:81
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8e:39:4c:76:19:dd:71:6b:c7:f4:88:46:c2:ea:f3:0a:d1:
d1:f0:ad:7b:dd:d1:03:8a:7e:06:42:ad:ea:ba:89:4e:87:92:
c0:28:b4:4c:d6:20:4f:f5:27:68:b8:a5:7a:f9:86:d6:bc:4c:
92:ac:77:e0:ea:55:64:ac:3c:06:22:5f:00:9d:60:da:51:e2:
06:fa:25:0b:e4:a9:77:7a:29:81:57:c1:c1:50:51:6c:79:81:
24:2d:0c:59:b5:e7:5d:e9:d5:50:ec:c1:8b:7a:bc:78:d3:f3:
9a:f8:08:02:dc:94:6c:5d:f5:4c:f5:23:2f:22:7b:99:b4:70:
06:80:2a:e5:7d:cd:45:a4:6c:2b:88:39:b2:2d:47:dc:87:da:
e3:7b:4d:7c:25:39:45:0f:e1:69:cc:0c:1e:4e:c7:77:21:64:
b7:d6:35:8a:fe:38:ef:de:aa:dd:97:0c:0d:ab:bf:34:ce:54:
38:02:ee:a7:45:38:b2:f0:38:90:c7:b8:4d:f6:73:39:fa:7f:
b9:24:e4:7f:41:99:eb:06:e3:f0:5d:2c:23:da:a4:a3:ad:b4:
37:01:92:8b:39:f7:25:45:e8:10:3b:00:cc:4e:d4:5d:c4:ef:
f6:c3:3b:6b:1d:2f:b7:d4:16:99:2f:e5:95:25:16:7d:de:d9:
05:02:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:03 2025 by rpki-client