Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: Fdj2YZURVLwRZWGv9ormWn0W8Ijir1S3vXOGsrodBCs=
Subject key identifier: A5:56:B4:1B:9C:7E:6D:90:B6:EB:0A:17:0B:35:2F:31:C4:D3:84:EA
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 0194BCE0A5630A88A228DFD17FE6FDF93C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 04DC
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: 3d69FZHY/pFXS2RIlTygCgNBvGy1tbAJsoPSd3Y8UFQ=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a5:63:0a:88:a2:28:df:d1:7f:e6:fd:f9:3c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=a556b41b9c7e6d90b6eb0a170b352f31c4d384ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:04:42:68:0d:65:86:f1:80:54:66:55:cd:
ee:f1:86:7a:ba:d0:49:63:fb:6e:b4:24:19:82:dc:
88:95:1b:62:c3:a5:47:98:06:dd:fa:04:91:52:02:
66:32:77:9e:e7:29:45:13:35:f2:ad:0c:25:b9:1e:
b0:56:f9:a5:53:cb:93:5c:1c:51:96:9c:cc:49:47:
3d:3a:65:4f:a8:a0:62:60:f2:76:2c:a0:1b:f4:97:
88:64:66:f5:1c:12:17:b6:97:92:4a:1a:fb:60:49:
ff:7f:3d:bb:90:2d:41:74:84:b2:e5:13:91:27:fb:
46:17:6e:22:58:f9:45:62:cf:b1:f4:92:cf:98:fe:
fa:1f:3a:50:5c:3c:83:f9:19:96:a0:1a:56:dc:56:
93:1d:00:6c:e7:b5:45:2d:da:82:96:c0:29:1a:2c:
cd:c4:7d:4e:57:51:9a:99:f1:11:27:d2:10:25:73:
0e:74:48:c5:d4:e5:86:82:25:e9:cd:0b:58:59:41:
73:9c:08:e7:5a:aa:e4:77:e2:68:4f:fe:86:3e:52:
e4:a6:8d:13:38:cc:31:7f:59:43:40:0a:21:15:db:
ff:49:27:f2:99:34:19:e5:0e:af:5e:27:cb:04:e2:
5e:93:5b:92:70:10:3b:3a:92:de:64:00:d9:c6:6f:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:B4:1B:9C:7E:6D:90:B6:EB:0A:17:0B:35:2F:31:C4:D3:84:EA
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:75:2f:78:44:ca:c9:d1:86:17:05:72:cc:f2:05:0c:13:76:
c0:69:47:f4:80:de:fa:05:a2:be:e1:1c:9a:d7:f1:1b:fd:da:
41:59:12:21:9f:59:c9:bd:e9:5f:6e:62:95:69:08:ce:c9:db:
a0:99:8b:61:f4:06:53:59:c8:61:a4:61:4e:24:73:9c:5c:c7:
f4:88:df:84:a1:12:55:b6:98:b1:1d:2a:37:1b:ce:96:db:c8:
a0:9c:36:85:34:97:5f:4d:f3:31:63:7c:20:3c:c1:e8:b5:fe:
11:b1:d2:cd:35:22:11:17:54:85:fa:61:fb:96:94:6e:93:78:
ac:fd:63:ec:b4:5a:25:e6:3f:77:b5:77:1f:aa:7a:35:2c:9d:
26:f3:14:38:ea:68:c7:98:e9:0f:ab:66:d4:f0:3a:33:c9:58:
7f:db:aa:a3:4a:a3:64:21:ea:d4:19:43:31:4d:b7:6d:e2:b8:
64:57:c5:1f:1a:96:7b:31:fe:7c:3d:25:04:4e:79:19:f3:da:
d3:ad:a2:55:a1:cf:71:92:87:35:a7:e7:d3:b8:65:0a:98:59:
3e:d3:eb:b7:0e:48:59:bb:84:74:da:9f:28:88:bf:5a:f2:a1:
c1:17:63:7d:ba:db:0d:ec:80:cd:1e:9b:c3:f2:1d:2f:89:b7:
f4:d3:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:45:32 2025 by rpki-client