Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: 1EzafPGLn9EP/LQV+rnaQ5N/9UFH3SoL4ZhC+w2+g1s=
Subject key identifier: 7E:A6:E5:EA:CB:9B:D3:19:46:9C:AF:C0:9B:2F:9F:5E:DB:90:8E:07
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 0194BD17DF8DC4D935E960E579322C5478D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 0D14
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: 8qv2kboptTAd3Mi2MNfK/FstdeDb883AHEgwtF2HFcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:df:8d:c4:d9:35:e9:60:e5:79:32:2c:54:78:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=7ea6e5eacb9bd319469cafc09b2f9f5edb908e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:1e:5d:a6:ef:a6:98:c1:86:a5:6f:b4:89:
7f:da:e4:b0:62:b8:60:c8:2c:78:b6:97:58:dc:ed:
ce:40:ce:27:03:d9:0c:12:fc:74:4a:af:08:7a:c6:
7d:18:35:03:ab:00:18:2d:5f:54:e0:74:e5:bd:3d:
6d:cb:de:85:4f:88:15:60:d4:47:f3:7c:84:6b:ad:
b9:2e:d0:0d:dd:5d:85:f8:28:1f:97:df:c2:42:3b:
37:64:ee:f5:45:9c:6b:5c:8d:2e:33:de:e4:02:6b:
fc:cc:f0:9e:d3:9b:27:22:dd:41:48:f6:ac:96:b9:
db:cb:8a:dc:fa:ff:dd:79:58:55:83:5c:6b:c5:7d:
4a:74:f5:d4:de:91:28:a8:e4:18:75:5b:47:d0:8f:
ba:db:ec:88:18:68:f5:14:fa:00:fc:02:6d:6a:cd:
86:ac:d9:12:f8:bf:18:54:7a:e6:67:50:ac:6b:6d:
2b:81:44:19:a3:e2:19:a7:e0:6b:65:37:8b:af:90:
88:62:40:f4:aa:95:04:48:de:3b:6a:30:7c:c9:e6:
24:6f:cd:d2:85:36:8f:27:ba:85:76:4d:64:4d:25:
6b:11:6f:a6:4f:e9:40:27:b1:ec:4e:b3:12:fb:c8:
5f:61:05:c4:79:26:d6:49:59:95:18:f8:cc:43:ba:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:E5:EA:CB:9B:D3:19:46:9C:AF:C0:9B:2F:9F:5E:DB:90:8E:07
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:28:f9:9a:ac:55:d2:44:5d:93:42:c9:ac:f5:be:82:5a:2b:
8a:65:4d:15:1a:68:72:a9:e1:1c:d0:26:03:8e:65:67:5a:76:
2d:ef:f8:aa:b6:b6:21:81:8c:f9:3e:de:06:63:f6:d9:82:55:
38:b4:3e:fe:f2:31:92:36:64:16:27:fd:72:08:46:a6:c8:a4:
3a:9a:14:58:eb:ab:3f:5c:19:61:3f:77:de:ad:21:f1:39:c8:
eb:d1:8d:ac:3f:c2:48:bd:e9:3e:56:ff:d5:d1:12:8c:b9:61:
15:ee:41:1a:3d:f8:8d:8d:a8:98:eb:1c:69:c1:b4:af:af:4a:
b2:06:3b:75:aa:99:45:71:07:3a:07:81:85:7e:99:32:ab:70:
e3:f2:70:2f:4a:92:21:e1:60:f5:5c:d8:15:70:8b:90:93:cf:
a1:5c:2b:41:e0:5b:60:f8:d9:2d:14:5c:50:68:a0:2f:5b:a8:
5e:5e:e4:87:83:d1:96:7e:bb:06:18:15:d1:e2:3b:d4:3b:fb:
82:ff:64:e9:d2:18:50:97:21:79:56:23:9a:e9:dc:bd:93:11:
d3:11:73:95:27:10:1c:61:d0:79:6b:0b:20:34:d4:96:15:8a:
f5:c1:7e:6a:78:4a:47:0b:e5:c8:cd:72:72:ba:5e:d9:33:9d:
06:9d:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:09 2025 by rpki-client