Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a6fa7d-1285-44c2-8e64-f5453f6e31af/1/dD8WcQusajvO615LsXXESCqlCkI.mft
File: dD8WcQusajvO615LsXXESCqlCkI.mft (raw, json)
Hash identifier: YWvQSpr4TKETk0u0XR3aIoArhzFbZr42cTi7WScjUEM=
Subject key identifier: E5:7E:BC:5E:C8:19:1E:11:03:AA:83:64:24:A9:1F:AD:F7:9F:37:05
Authority key identifier: 74:3F:16:71:0B:AC:6A:3B:CE:EB:5E:4B:B1:75:C4:48:2A:A5:0A:42
Certificate issuer: /CN=743f16710bac6a3bceeb5e4bb175c4482aa50a42
Certificate serial: 01847F653D36D35AB25F4E71FBD6747E85EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD8WcQusajvO615LsXXESCqlCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a6fa7d-1285-44c2-8e64-f5453f6e31af/1/dD8WcQusajvO615LsXXESCqlCkI.mft
Manifest number: 70
Signing time: Wed 16 Nov 2022 07:44:11 +0000
Manifest this update: Wed 16 Nov 2022 07:44:11 +0000
Manifest next update: Thu 17 Nov 2022 07:44:11 +0000
Files and hashes: 1: dD8WcQusajvO615LsXXESCqlCkI.crl (hash: DNv8LIwlV4QjXszINjTZhT+qkwox7GTVyeujQWJEAm8=)
2: zIAkljB5TXwDm3LX6blUR76E1cM.roa (hash: wRjbpGvhPGm4F6HKMim4dqg2G1D+22hkrm2Ex5ViOL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:65:3d:36:d3:5a:b2:5f:4e:71:fb:d6:74:7e:85:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743f16710bac6a3bceeb5e4bb175c4482aa50a42
Validity
Not Before: Nov 16 07:44:11 2022 GMT
Not After : Nov 17 07:44:11 2022 GMT
Subject: CN=e57ebc5ec8191e1103aa836424a91fadf79f3705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:98:e1:96:47:a9:6e:c0:67:8c:b7:55:51:
1e:a5:eb:a3:e3:17:82:69:19:0e:43:7b:aa:34:fa:
c7:88:9a:45:ae:6f:a0:c2:8b:12:a7:af:c8:15:c2:
a5:31:fc:c6:16:28:1a:c7:f3:72:96:4f:53:98:ea:
8b:4e:2a:89:11:a9:19:1e:a2:2c:7a:8e:23:8c:bd:
03:8a:8f:f1:2f:90:92:6a:78:d7:60:be:a3:42:d6:
9d:49:b4:96:1d:fd:62:72:d6:24:a3:33:96:a2:5d:
29:7e:72:df:6d:e2:82:10:f7:57:da:5d:f0:14:3a:
e3:41:00:1e:f1:88:c4:ee:ac:20:6c:aa:ec:55:a9:
bb:41:6f:4d:d8:33:cd:87:a5:0e:1b:f4:eb:a9:de:
3e:df:85:10:8f:2d:5f:15:0a:aa:99:ca:a4:55:5a:
73:46:28:86:cb:ec:e3:8b:5a:10:4b:0c:73:db:4c:
af:85:49:14:6d:99:fd:54:dd:92:b1:3c:f8:a7:0c:
0a:9b:81:31:0c:db:e9:b7:78:1a:64:d1:c7:23:3d:
ac:cd:1a:37:c1:5f:64:f0:99:5e:df:70:6f:52:24:
ec:22:d6:cc:cc:1e:6e:27:8a:08:46:78:95:08:d1:
39:81:52:c8:c9:48:f7:95:da:39:9b:d0:7b:63:f7:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7E:BC:5E:C8:19:1E:11:03:AA:83:64:24:A9:1F:AD:F7:9F:37:05
X509v3 Authority Key Identifier:
keyid:74:3F:16:71:0B:AC:6A:3B:CE:EB:5E:4B:B1:75:C4:48:2A:A5:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD8WcQusajvO615LsXXESCqlCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a6fa7d-1285-44c2-8e64-f5453f6e31af/1/dD8WcQusajvO615LsXXESCqlCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a6fa7d-1285-44c2-8e64-f5453f6e31af/1/dD8WcQusajvO615LsXXESCqlCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e4:b8:45:2c:17:15:84:a6:f9:e3:10:b7:0e:07:f4:ec:ae:
bc:00:22:61:3a:31:76:f5:5d:8a:b2:f0:59:3e:ca:06:2f:db:
1b:19:5a:8b:04:f6:db:65:c6:9a:85:8d:d9:29:57:3f:42:f9:
98:b2:87:af:96:ed:45:ee:aa:63:30:d7:61:f6:e5:1f:a1:fc:
fb:b3:9b:cc:d8:5a:cf:9e:85:de:41:9a:75:0d:97:7c:cd:b8:
85:49:49:95:e0:d3:05:02:d7:77:38:be:c5:43:10:10:ba:79:
6a:d5:4c:d2:f8:55:1f:0e:f2:19:3c:74:e9:43:33:36:ed:dd:
f8:0f:9b:94:bf:d2:44:5c:7a:bf:2d:7a:a0:e2:e6:c6:71:0e:
ee:1a:8b:70:67:d8:1c:82:b7:c7:10:fa:e0:c9:8c:f8:84:cb:
92:f2:2b:11:53:df:dd:59:ca:e3:61:97:d3:f0:0e:8f:6a:08:
d0:ae:31:a5:30:6b:69:20:1c:1a:3b:b0:c3:68:fa:ff:12:27:
f9:51:4d:a3:f3:10:1d:52:1c:6e:ee:1d:e7:9e:1e:e6:9e:9f:
b1:9b:d0:c0:05:3c:1a:9c:a0:6b:1a:e7:ee:c7:7e:7a:09:a4:
c4:dc:42:67:ad:82:7d:8f:12:fc:5a:48:38:5a:c1:d5:a5:1a:
d8:9c:fe:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:07:34 2025 by rpki-client