Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/744Qe5Bpw1nGe73C4XCp-QLZMR4.mft
File: 744Qe5Bpw1nGe73C4XCp-QLZMR4.mft (raw, json)
Hash identifier: grSfPbWolV42dDBArCc7nn2udq9RSXEcZRXhnTNFnvQ=
Subject key identifier: F8:8F:F2:FB:DF:C7:CA:D8:88:E1:89:08:5C:31:95:FC:C2:7D:0E:EE
Authority key identifier: EF:8E:10:7B:90:69:C3:59:C6:7B:BD:C2:E1:70:A9:F9:02:D9:31:1E
Certificate issuer: /CN=ef8e107b9069c359c67bbdc2e170a9f902d9311e
Certificate serial: 0193E2A77BEAFECEEABC0161E7D60A853684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/744Qe5Bpw1nGe73C4XCp-QLZMR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/744Qe5Bpw1nGe73C4XCp-QLZMR4.mft
Manifest number: D2
Signing time: Fri 20 Dec 2024 06:00:46 +0000
Manifest this update: Fri 20 Dec 2024 06:00:46 +0000
Manifest next update: Sat 21 Dec 2024 06:00:46 +0000
Files and hashes: 1: 744Qe5Bpw1nGe73C4XCp-QLZMR4.crl (hash: zmYKEWTecBCNwLlvByKtuXw/VrTFAs2HiOihfNuBNb4=)
2: Zr-rYChZVQxRMfEP24vFCXtZgTY.roa (hash: bnCOAu/gzkf7ZHJnj6Kt5oT4jeAZxqa2sikWDarNHxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:a7:7b:ea:fe:ce:ea:bc:01:61:e7:d6:0a:85:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8e107b9069c359c67bbdc2e170a9f902d9311e
Validity
Not Before: Dec 20 06:00:46 2024 GMT
Not After : Dec 21 06:00:46 2024 GMT
Subject: CN=f88ff2fbdfc7cad888e189085c3195fcc27d0eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:8f:48:85:ab:e2:07:47:71:bb:90:ec:75:
49:a6:8b:b8:e6:d2:9f:6f:4f:98:df:ac:fd:b7:ae:
a0:14:46:bf:a2:08:67:b7:25:1d:8a:57:76:ef:0d:
d7:a5:08:52:13:7b:b6:0e:9a:64:04:41:1c:ec:91:
8e:6f:9a:01:69:a0:0a:a1:80:7c:3a:69:2a:31:9b:
14:5a:3b:cb:d8:9a:f7:24:8f:26:2a:d3:60:40:b4:
e8:7d:9e:af:44:cb:c1:b2:b0:4f:99:6b:8e:ef:f6:
c1:c4:2f:6a:32:7d:ef:f8:69:3b:32:71:c4:d4:cd:
43:ac:ad:31:7b:a3:58:a0:c9:24:fd:11:c0:b2:f9:
64:0c:e7:0d:ef:81:75:7c:34:2b:76:6d:e1:d5:71:
d7:8f:8c:b9:ee:3e:c8:fa:79:81:80:21:45:46:27:
d2:f5:d5:37:07:3d:38:33:59:4c:b5:54:52:27:e3:
54:bc:ab:ac:05:f0:a8:9b:cc:73:e0:36:52:63:65:
54:5b:9c:ad:5a:63:e4:d3:90:ed:65:0f:ec:31:02:
15:a2:6e:51:26:29:68:74:83:05:94:6b:7b:2f:8e:
63:35:ed:67:1e:89:81:2b:a3:3e:d5:fa:aa:1a:d8:
95:00:eb:10:ea:da:e9:11:ca:31:e3:35:6e:8d:5f:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:F2:FB:DF:C7:CA:D8:88:E1:89:08:5C:31:95:FC:C2:7D:0E:EE
X509v3 Authority Key Identifier:
keyid:EF:8E:10:7B:90:69:C3:59:C6:7B:BD:C2:E1:70:A9:F9:02:D9:31:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/744Qe5Bpw1nGe73C4XCp-QLZMR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/744Qe5Bpw1nGe73C4XCp-QLZMR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/744Qe5Bpw1nGe73C4XCp-QLZMR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:35:d1:0f:e9:7c:5e:e2:4a:26:46:37:3f:1f:61:ed:c8:fa:
70:8e:93:42:46:a4:23:4b:6b:74:f6:68:fd:6e:87:f8:00:02:
3e:14:ff:06:b0:2b:67:89:ef:7d:7b:ab:81:f6:f0:cb:4c:c3:
fb:5e:5f:62:97:bf:bc:29:b1:be:fd:d5:11:33:69:43:a3:68:
1b:9e:a7:40:30:81:05:5e:c5:60:b2:9f:74:0a:60:ea:76:b8:
56:2b:f1:f9:88:a2:8e:c2:10:32:a6:7f:c3:08:7c:e3:76:e2:
88:b7:0a:ff:b7:77:3c:8d:8f:5a:b0:e9:9a:64:05:cf:1a:45:
da:01:67:51:2b:84:47:b4:22:1a:7e:a9:77:c0:90:14:65:ed:
2e:5f:a8:99:4f:20:9e:f6:c5:f9:d0:28:55:cb:6c:29:d7:fc:
9c:d1:f6:55:59:8f:c4:b7:ad:41:ab:c9:2e:e0:63:54:cc:8f:
87:da:6e:d8:a9:51:ad:91:24:70:c1:27:ce:fa:23:65:fb:90:
c0:5d:a3:7d:a6:04:2b:84:8a:3c:32:18:8c:74:eb:7a:fb:0f:
95:57:7f:f9:fb:78:06:d1:ff:9d:1d:91:19:2a:3c:16:5a:13:
d6:53:a8:6b:28:56:c2:f6:e3:85:a8:a4:84:9d:60:7d:e9:9a:
3f:3e:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:21:55 2025 by rpki-client