Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
File: dDbW6AAjNMdDTqze-L8s5yFslT8.mft (raw, json)
Hash identifier: mQMO0C70tNuRqP3YTRFsWH9DMVy1wkBVN8NGdO2HbKk=
Subject key identifier: 08:C1:57:C8:54:29:43:2B:CD:55:8A:B0:77:12:5F:6C:B9:0D:95:B0
Authority key identifier: 74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
Certificate issuer: /CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Certificate serial: 0193A8EF6A6A309FE875BF2CB5E1B8466322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
Manifest number: 0D3C
Signing time: Mon 09 Dec 2024 01:01:22 +0000
Manifest this update: Mon 09 Dec 2024 01:01:22 +0000
Manifest next update: Tue 10 Dec 2024 01:01:22 +0000
Files and hashes: 1: JGsJOXsM1MeaLAh590gBW7PNApU.roa (hash: ZludnWROEhMg+ODqZnJ0blQNcE9dZiGcbIRgJlKOi00=)
2: dDbW6AAjNMdDTqze-L8s5yFslT8.crl (hash: psN6azUeUDtSO8kqBDEJavgLG4a+k0M1IPD6O5AymiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a8:ef:6a:6a:30:9f:e8:75:bf:2c:b5:e1:b8:46:63:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Validity
Not Before: Dec 9 01:01:22 2024 GMT
Not After : Dec 10 01:01:22 2024 GMT
Subject: CN=08c157c85429432bcd558ab077125f6cb90d95b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:f2:ce:1e:af:f7:d3:9c:a4:ef:ee:49:46:
64:f3:67:f9:76:5e:76:ec:15:01:81:fa:f0:1e:6f:
2c:fe:f9:cb:e3:b4:a8:81:af:25:39:cf:01:a7:68:
63:5f:f0:be:6e:75:9f:ee:88:c6:3a:a4:b8:c3:3e:
3f:59:85:23:c0:a7:aa:b4:92:75:8b:a6:f0:78:ad:
01:2a:a6:37:d4:9e:2d:86:0e:02:59:a0:d8:60:43:
f4:a1:07:89:5a:7e:e4:88:a5:28:99:26:41:ed:b2:
13:82:a1:f1:51:49:3e:03:32:6b:85:57:d9:09:53:
5a:ec:2b:46:2a:7f:99:6e:0f:ab:c3:c3:13:68:98:
6e:a8:50:ca:14:e5:41:ae:91:4e:2a:2a:2f:eb:58:
1e:ca:b8:87:dd:3d:d3:b8:44:47:de:e2:ab:bd:b2:
5e:ac:af:cc:a7:1d:81:d2:d2:88:fb:bf:d5:5b:63:
f5:6b:a8:cf:e3:c0:b5:8f:06:76:5d:4f:98:b2:81:
61:b6:84:85:be:4d:97:c7:01:b9:1d:72:6c:e2:6c:
e9:c1:49:b9:56:bb:dc:4a:00:3a:8f:ee:fa:f4:b7:
90:c5:9c:08:37:56:2f:c8:80:26:c1:85:21:6a:33:
29:5f:0f:ef:bd:e6:fb:62:f1:fd:da:18:b5:93:89:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:57:C8:54:29:43:2B:CD:55:8A:B0:77:12:5F:6C:B9:0D:95:B0
X509v3 Authority Key Identifier:
keyid:74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1a:7f:f3:39:fb:2b:ce:4e:5c:5b:e5:76:b1:51:0b:3f:b0:
ae:40:7d:46:cb:f0:6d:d1:a1:54:1b:23:5a:a7:9c:b2:df:98:
d4:83:38:8a:7c:67:c7:70:95:32:3d:f6:83:88:c2:02:34:8b:
46:97:03:c8:94:4b:e6:b5:5b:0b:99:41:b8:23:7d:a8:69:06:
21:12:f0:ba:5a:fe:dd:5d:02:58:14:b9:82:1e:86:f7:30:81:
94:fc:2b:77:f3:a7:68:90:bf:72:7b:f0:06:84:ae:33:5e:51:
32:75:c4:99:a8:c4:34:e6:e3:25:fc:e8:e1:f0:a4:55:8b:1e:
41:79:a3:d0:a9:6a:5c:bd:71:ce:ef:db:38:ed:3e:70:b8:f9:
db:1c:71:54:31:1a:d3:81:d2:d2:1c:5f:f3:1d:88:a3:b3:b7:
2b:2c:2f:fe:30:bd:dc:bb:d1:7c:55:a5:a6:60:de:be:61:5b:
63:9c:78:22:a3:6c:e4:cc:55:3f:2c:dd:56:50:8e:8b:f1:69:
6f:33:76:ea:0c:d4:74:0b:86:40:d1:77:43:28:eb:4e:5e:ff:
72:b6:f0:83:7c:8e:38:5f:a3:9b:97:8b:6b:36:37:3a:f0:25:
72:3b:a8:a2:88:fa:ab:6b:50:ce:ba:9e:27:89:bd:43:d1:1a:
cb:74:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:03 2025 by rpki-client