Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: PzgEqbipb7ixVevY9Xeu1lPLTn3DlXysnSfVgiWu73I=
Subject key identifier: 71:1D:CE:B2:1E:14:23:CB:7E:26:0A:85:97:06:1A:6A:B4:00:0F:D3
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 0194BCE066DEA234F4AA75E19EAC37DA797B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: filPvrOQz10ZP/BNWC5D7SQL8QfiSsGxAL9ME/hOPhg=)
3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:66:de:a2:34:f4:aa:75:e1:9e:ac:37:da:79:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=711dceb21e1423cb7e260a8597061a6ab4000fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:dc:77:16:98:1e:fb:dd:b5:96:f0:5d:e0:
a0:60:af:e9:d4:dd:39:7f:8e:5d:5d:d0:2a:93:31:
72:f3:0f:84:c3:6f:1e:30:7c:35:7d:3c:51:3f:4a:
69:67:28:d9:a1:55:7b:1a:21:10:36:89:2e:bf:f7:
39:a9:5e:79:c6:eb:38:1f:cd:c1:7f:48:69:4c:e9:
ff:ca:f8:cd:4a:38:fe:b4:7e:4c:d4:41:64:cb:39:
71:33:63:ff:51:b1:58:36:df:dc:c2:a4:7a:79:89:
7f:74:a7:3c:5f:cb:36:25:6a:36:53:c6:9d:46:8a:
1b:ee:9a:c2:54:b3:cf:42:95:c4:af:d5:54:5e:9b:
51:7f:f0:e5:0f:7a:89:e5:ec:60:15:39:94:d2:1c:
9a:a6:b8:ca:d7:61:0c:67:65:26:03:97:f2:f0:ec:
fd:89:53:18:00:a8:7b:5e:bb:9d:23:cf:5c:36:e5:
d5:05:24:e3:9a:53:56:d5:81:1b:af:49:ff:9e:3d:
bf:43:ad:50:df:21:aa:b8:6b:2a:3d:59:e2:0a:d0:
1a:85:7d:cd:8f:a1:11:76:86:11:d1:e0:a4:bd:ef:
eb:85:d3:a1:ff:be:ae:34:5e:5b:84:f7:84:26:e8:
df:0c:24:e7:45:85:43:6f:19:a4:82:46:e9:12:28:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1D:CE:B2:1E:14:23:CB:7E:26:0A:85:97:06:1A:6A:B4:00:0F:D3
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a2:35:ad:35:3b:6e:66:4a:9c:ea:de:53:0d:0d:a6:8a:d6:
3c:35:14:08:14:96:bb:12:c4:76:e8:3b:0e:30:d6:85:de:7e:
5f:72:32:84:6d:08:46:bb:63:79:af:6e:32:30:6d:9c:df:f1:
91:3d:19:7c:97:76:ca:0e:96:c4:d4:01:fd:6b:9c:35:ec:36:
c7:3d:6e:49:3c:a9:35:45:0d:6c:a4:da:17:60:07:eb:dd:6f:
76:3e:9d:e7:cc:59:1c:f7:af:24:ce:72:e9:4e:7a:6d:78:44:
82:5e:ad:62:64:8b:5b:82:fe:18:5d:a5:84:98:a4:d1:6b:9f:
aa:ca:06:b7:20:5e:c2:c0:94:d1:22:eb:2e:be:67:a5:c5:fb:
8a:48:b4:a3:59:22:f6:3f:71:2e:b5:63:b0:30:aa:90:eb:3e:
05:bf:e2:50:60:25:5e:00:88:d2:3c:b1:42:ff:43:cd:22:3c:
b6:0d:32:04:e9:d8:f8:9a:7b:d0:08:66:16:13:a2:3c:ab:8e:
3f:a1:35:00:b1:34:bb:8e:a9:95:da:3c:5d:c6:0d:2f:99:d8:
74:24:95:10:c9:c4:6c:a1:4a:9d:ac:b9:27:df:5a:5c:e0:cf:
99:5e:e9:1c:d9:c4:c1:13:db:ce:58:c7:dd:7e:08:f1:a6:7a:
2a:9f:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:00 2025 by rpki-client