Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier: JKOsS3HOOkYuetdyJgZRjLOZrJX3HNhdswKphyaRFCc=
Subject key identifier: 5A:1A:F3:E8:2C:95:C0:92:15:AB:3A:F6:7C:3B:C2:44:58:0F:AA:5B
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 0194BD17D32B3CDD00AFE0757F9E0FCB86ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number: 0AFF
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: IvUGQqFwrmbUSPQT6wFvjT1FApqikxPVSdk5mHlXtdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d3:2b:3c:dd:00:af:e0:75:7f:9e:0f:cb:86:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=5a1af3e82c95c09215ab3af67c3bc244580faa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:2c:e0:98:37:2c:f2:0b:29:4e:1b:1c:da:
26:6a:87:07:7c:f7:dd:0f:14:d8:ff:4b:01:89:f6:
e3:e1:96:6e:43:12:09:f1:2a:20:91:d9:74:9a:5d:
f5:5f:da:20:d5:ca:a2:15:92:9f:e2:cf:f6:be:4b:
b2:77:53:8a:52:0a:4f:22:73:82:9f:fa:fa:69:48:
97:ac:e1:bb:4a:dc:2f:ba:13:28:80:23:7b:ae:af:
82:a8:a5:67:72:27:68:ec:3c:7a:a8:e8:ff:97:b4:
ff:0e:65:52:e5:46:5d:99:9b:38:cb:58:2b:c9:9a:
7e:95:41:1d:33:7c:6d:ad:db:7b:5a:eb:e4:db:e3:
7f:8f:f0:33:5a:29:c6:79:3a:67:b6:cc:a2:dc:17:
11:bd:16:78:ac:a1:a2:1c:5e:9e:02:04:ac:ce:6e:
f0:92:69:1f:76:99:d4:cc:52:f2:38:aa:61:f5:97:
d8:31:eb:ab:fa:f4:e8:61:be:63:e4:e0:ea:ef:ba:
b4:5d:ee:63:97:51:fd:82:d0:12:78:fd:6c:fb:ae:
cd:3c:c7:1a:0a:89:56:09:94:5d:a6:63:01:c0:1e:
23:c4:98:a3:23:23:ed:11:b8:1b:4c:3c:22:f8:40:
32:9d:3e:d5:fe:b4:8b:96:a3:30:a0:5d:7a:f3:ca:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:F3:E8:2C:95:C0:92:15:AB:3A:F6:7C:3B:C2:44:58:0F:AA:5B
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:86:64:1a:7a:0a:4b:4d:df:24:18:66:82:b0:4e:83:75:e6:
7a:b1:ce:15:57:1f:1b:df:8c:ac:79:8c:21:b9:3b:90:10:c3:
48:c4:12:ee:92:06:4b:20:24:90:e8:e7:32:6e:1a:e4:f7:ca:
f7:6f:32:76:94:2b:64:e5:7c:45:74:61:90:88:00:45:23:51:
a1:ea:0c:09:fe:c6:ed:0f:12:06:0d:80:e9:be:c8:85:ef:cd:
cb:db:b0:12:d4:3e:ac:65:f2:cd:a1:66:8d:ac:05:9b:7a:89:
dd:9c:9c:81:3f:d1:fe:73:a7:5f:b9:be:43:5f:25:1e:b4:bc:
aa:f4:90:b6:86:84:2e:cc:11:1d:1c:82:25:56:e9:56:3f:f2:
b3:4b:ad:fe:db:c6:17:8f:80:6c:5d:ca:8a:ed:14:e0:02:27:
e2:b1:23:fc:11:5f:8e:b6:41:9e:09:fc:03:04:8d:28:f0:f6:
03:b0:35:88:1f:a3:a5:24:c6:76:61:e3:e8:5b:f3:c5:9b:7f:
29:25:37:77:e6:ea:f6:e6:63:c8:7f:5b:5f:4d:ac:66:00:e3:
6d:24:92:c0:28:bb:5f:4e:ac:e9:59:3d:13:d6:c0:60:ae:50:
d4:c6:68:75:be:af:13:f5:d7:a0:cf:a7:fc:df:ed:98:8d:92:
ec:34:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:09 2025 by rpki-client