Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: v+t6lZ1ISL8xZTgRP2zfyoMaQC2EW2qho8Gfl5rYfrU=
Subject key identifier: 38:FE:C7:1D:23:18:73:E2:59:FA:12:9C:2B:0F:0D:69:41:34:A2:09
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 0194BBCDE9AB0B6A73AD25ACC3027A69DB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 07DE
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: 8OUI7xQSeXBlfm7KoKzo21OXxztOeZoU1ASNeFLi/Jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:ab:0b:6a:73:ad:25:ac:c3:02:7a:69:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=38fec71d231873e259fa129c2b0f0d694134a209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:60:cd:8d:2a:c4:75:ed:0e:ff:a4:b7:67:84:
b7:08:48:15:3f:58:3d:9f:0d:dd:53:08:4b:af:8a:
a0:bd:9f:07:3e:2f:8d:22:ba:1b:3c:fb:13:78:39:
02:21:c8:06:86:0c:8f:e5:77:f0:bf:39:6d:1b:bf:
5b:99:f0:52:f4:5b:1a:ac:8b:96:42:0c:4a:12:12:
30:57:8b:b5:98:cf:40:c3:eb:1e:a7:7c:0c:06:65:
40:1e:7f:80:f4:24:a0:a1:46:06:a3:79:e8:e3:58:
3c:48:b0:e2:6e:f6:a0:c1:c7:2b:2a:b3:a8:d9:1d:
51:83:7c:96:3e:45:ee:e1:b4:b8:05:2d:5e:dc:da:
d4:59:c0:7e:09:cb:e2:ad:71:fb:6f:41:2d:22:66:
d1:c9:4b:df:ee:4a:e1:65:70:05:9d:46:a8:f0:49:
e8:5c:7e:ed:9e:77:da:dd:a3:df:e1:e5:b1:bd:7d:
0d:52:8c:a4:cf:15:23:64:af:9c:7a:96:e9:e3:9a:
44:1c:08:f0:ec:dc:51:a2:9d:ff:cb:fc:55:ba:cb:
0b:3e:40:41:6a:d6:5f:32:11:c3:b6:de:fb:f2:c4:
7a:e7:95:f4:2b:10:8f:92:2f:1f:96:54:b7:95:32:
4c:c8:41:6c:b7:f6:2c:6a:72:e2:f6:d3:50:ae:e3:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FE:C7:1D:23:18:73:E2:59:FA:12:9C:2B:0F:0D:69:41:34:A2:09
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f6:90:42:7b:fb:8e:56:cd:52:38:31:21:ea:17:2b:ad:a3:
84:fa:7a:f7:d9:76:77:67:eb:a5:83:1b:76:cf:8f:2b:51:94:
ab:e9:f5:0d:3b:1e:6a:6f:00:32:68:be:38:3f:de:68:02:00:
89:8b:ae:e7:0e:9f:f1:2c:72:df:79:91:5f:6d:6f:8a:1f:aa:
9e:cd:f6:ef:ea:1f:b7:18:d4:c3:57:1d:77:1e:df:33:4d:51:
a2:04:51:6b:e1:8a:75:3e:82:42:7b:b9:c5:48:61:46:ed:ef:
2d:31:e8:79:e9:18:84:a9:9b:c8:c1:f7:c1:f3:7a:e9:b8:ee:
50:ba:d7:89:d5:a2:d8:85:7b:1d:21:74:52:34:6f:6f:fa:23:
a1:8b:33:c2:df:f6:5d:cd:27:9e:7a:62:14:3f:8c:51:1c:71:
13:3c:e6:8d:a9:b6:82:77:ea:2f:af:8b:5c:5c:8a:27:c6:67:
73:84:e7:dd:c7:02:1b:a8:35:56:28:3d:a5:89:0e:af:bf:bc:
32:39:37:c4:4b:f5:16:69:55:fe:2b:81:55:4a:b4:ea:c9:7b:
1a:b5:7a:c9:ea:e7:27:a0:95:d8:15:cd:25:c6:a5:69:25:91:
b6:03:21:8b:15:e9:91:bc:81:c6:72:b0:a8:16:16:55:79:6c:
1a:37:8e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:59 2025 by rpki-client