Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.mft
File: dNNKu-mvuigEMsKrg4mMe5UN96w.mft (raw, json)
Hash identifier: kd07KWZvtOh+UGd/j1SX64bifte8UD+kB0RYTL/yY14=
Subject key identifier: B6:2E:B5:D3:3C:DD:4F:43:4F:B1:16:01:DD:90:D0:1B:40:19:BE:82
Authority key identifier: 74:D3:4A:BB:E9:AF:BA:28:04:32:C2:AB:83:89:8C:7B:95:0D:F7:AC
Certificate issuer: /CN=74d34abbe9afba280432c2ab83898c7b950df7ac
Certificate serial: 01944291FFD89395BF7427E0AF9CAD114C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNNKu-mvuigEMsKrg4mMe5UN96w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.mft
Manifest number: 0938
Signing time: Tue 07 Jan 2025 21:00:51 +0000
Manifest this update: Tue 07 Jan 2025 21:00:51 +0000
Manifest next update: Wed 08 Jan 2025 21:00:51 +0000
Files and hashes: 1: OAHDY3Esd2bFMqfXH9wjGqOdXkA.roa (hash: ezGRfrEUgs6GAni5G5KnMMu2HuLSOxs8x40d/tWUdSI=)
2: dNNKu-mvuigEMsKrg4mMe5UN96w.crl (hash: vYcY23A0BaLP5CdnqfgDYraVGjvhP4hbBo/4afpGyz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:91:ff:d8:93:95:bf:74:27:e0:af:9c:ad:11:4c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d34abbe9afba280432c2ab83898c7b950df7ac
Validity
Not Before: Jan 7 21:00:51 2025 GMT
Not After : Jan 8 21:00:51 2025 GMT
Subject: CN=b62eb5d33cdd4f434fb11601dd90d01b4019be82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:4e:cc:21:75:4b:e4:52:57:ae:6c:3a:12:
cc:f0:b9:b8:82:e9:9e:44:53:d4:64:a6:c8:a6:e7:
7a:24:0a:41:e0:ab:e8:b2:92:64:55:f5:32:95:1f:
70:65:68:a8:d3:de:bf:76:4d:76:34:73:3f:1d:8a:
ab:f0:9f:35:ae:46:df:b0:d5:10:4f:cb:71:31:c8:
e7:46:22:fa:88:ef:c4:f2:b4:d1:64:f3:c6:9a:a8:
bf:d8:36:72:f7:d1:4e:3e:f4:9c:ad:30:ad:76:dd:
2e:fb:7b:34:a8:1b:8a:e8:a9:7d:cb:8d:8e:b5:e0:
72:e1:46:c8:6e:60:e2:4d:46:34:45:1a:0a:78:fa:
2f:87:41:48:b2:b1:42:03:96:11:60:9d:37:40:4e:
cf:8e:78:34:b8:b0:42:7e:14:c9:63:5f:5a:bf:ce:
fe:8a:71:e2:df:01:93:07:9d:e1:0c:b6:63:5e:8b:
48:c2:49:dd:1b:80:39:72:6d:50:2a:13:f3:5d:5f:
ca:0f:ac:b4:23:bc:36:40:72:08:83:ad:ee:f6:7b:
8b:81:b6:74:dd:fe:24:3f:31:b0:cd:c2:b0:c1:26:
b7:90:6e:cb:5b:3b:0a:d9:40:c2:ca:9c:bb:9b:41:
f9:c9:b1:27:03:a1:2a:d7:f2:8d:44:d9:84:da:8d:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2E:B5:D3:3C:DD:4F:43:4F:B1:16:01:DD:90:D0:1B:40:19:BE:82
X509v3 Authority Key Identifier:
keyid:74:D3:4A:BB:E9:AF:BA:28:04:32:C2:AB:83:89:8C:7B:95:0D:F7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNNKu-mvuigEMsKrg4mMe5UN96w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:58:90:2d:8d:9d:74:0c:d5:39:68:58:19:24:40:ca:1d:
1b:cc:e8:2d:e4:67:0c:57:67:14:12:ef:2f:2a:05:b8:6f:d7:
68:d3:5c:39:79:9a:b1:13:d9:34:5b:a7:20:0c:8d:62:23:78:
2f:20:4d:6f:66:2e:3c:a5:52:81:87:2f:6b:f8:d6:83:45:65:
30:14:44:2a:d4:82:d1:79:64:9d:22:c6:63:47:71:b8:8d:b3:
5c:37:5b:51:bf:1d:4a:78:be:7d:51:a9:0e:7d:c3:e3:b8:20:
e9:8e:a1:b5:87:19:69:0e:97:69:c8:af:db:c1:61:e2:da:8e:
b6:4a:67:a4:f6:85:2f:06:de:09:d4:96:8f:ec:7a:58:93:a0:
fd:42:7e:f6:a4:73:f7:59:50:6d:0b:f5:c4:ab:99:69:19:d5:
8e:a2:8c:42:8f:e6:e6:d6:d4:17:e5:ad:fc:b4:a3:44:51:47:
ae:bd:3d:d3:a4:89:90:c6:8b:6c:9b:cb:9a:ea:2b:a9:fd:0e:
21:5e:0b:f1:75:cd:80:7e:32:a9:46:45:3a:85:a0:3e:33:63:
ec:cf:a7:31:c7:77:ed:c1:a0:69:25:50:28:49:d0:a2:b7:50:
ca:f5:d7:ba:b7:53:5c:ea:3c:d7:35:13:1b:2a:45:e7:e2:a7:
1a:4a:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:23:15 2025 by rpki-client