Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.mft
File: 108dgnQNHa8ku-4yxYKksaw78Ug.mft (raw, json)
Hash identifier: zsY6FFGx/R3gKtVa0MwoJAF+HhD2Gb5NO5ZmPM1+I2s=
Subject key identifier: 88:32:08:6A:55:F8:27:A4:3E:A5:A7:99:43:02:CC:5B:1C:35:06:3E
Authority key identifier: D7:4F:1D:82:74:0D:1D:AF:24:BB:EE:32:C5:82:A4:B1:AC:3B:F1:48
Certificate issuer: /CN=d74f1d82740d1daf24bbee32c582a4b1ac3bf148
Certificate serial: 01924C09A511184A1DAE1AFB05C3172987D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/108dgnQNHa8ku-4yxYKksaw78Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.mft
Manifest number: 02D9
Signing time: Wed 02 Oct 2024 07:02:33 +0000
Manifest this update: Wed 02 Oct 2024 07:02:33 +0000
Manifest next update: Thu 03 Oct 2024 07:02:33 +0000
Files and hashes: 1: 02vMc21dPaykc1WVuH9FQYWFUUg.roa (hash: rnh24wDGF5C/+sBUB6MWDQ4k2JvxDecmw+5DMz6O+zU=)
2: 108dgnQNHa8ku-4yxYKksaw78Ug.crl (hash: NJ5O5FM0ccSVemKLToyOHCjk5Slz/Cxz/1Dnr8bFpBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:09:a5:11:18:4a:1d:ae:1a:fb:05:c3:17:29:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74f1d82740d1daf24bbee32c582a4b1ac3bf148
Validity
Not Before: Oct 2 07:02:33 2024 GMT
Not After : Oct 3 07:02:33 2024 GMT
Subject: CN=8832086a55f827a43ea5a7994302cc5b1c35063e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:9a:5f:a2:f0:e6:bb:1a:d3:f0:fe:67:82:
62:fe:a4:94:a7:dd:fe:b5:6f:19:a1:c3:d5:33:b2:
e7:22:44:bf:b8:00:8b:47:4b:9e:2c:3f:20:9e:cc:
00:41:8e:29:f0:0d:5a:9c:48:53:6e:2e:64:e0:4c:
11:4d:7e:bd:56:ae:20:2d:8e:71:9d:f8:43:56:d8:
42:09:57:fe:97:34:ac:a2:96:6b:ae:7e:ee:e3:61:
91:90:f1:8c:2b:90:51:28:3e:12:61:e1:ae:b2:5b:
e4:d7:ac:13:c1:af:0a:de:5d:a2:8f:10:23:66:75:
0c:04:af:78:89:91:49:6a:cc:58:ad:99:1e:a8:93:
e7:3c:ac:77:40:75:8a:aa:37:12:9a:0d:e6:85:ab:
c8:03:da:79:de:66:79:2b:a9:76:49:79:09:cd:e7:
65:b8:2a:79:5f:7f:00:8f:b8:b7:46:88:cc:4a:a6:
f9:d0:fa:af:0f:a5:89:0c:a1:7a:fa:c2:6b:32:cf:
00:c7:ac:e8:c1:6e:d4:01:fa:61:34:43:37:0a:41:
6c:8d:a1:eb:fd:b8:b9:42:a5:f0:e4:ef:3b:b9:01:
9c:7c:f3:66:5f:86:40:18:c4:28:32:d7:4d:36:c6:
f8:ec:6b:1b:38:79:88:5d:88:7d:74:a7:ef:6c:11:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:08:6A:55:F8:27:A4:3E:A5:A7:99:43:02:CC:5B:1C:35:06:3E
X509v3 Authority Key Identifier:
keyid:D7:4F:1D:82:74:0D:1D:AF:24:BB:EE:32:C5:82:A4:B1:AC:3B:F1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/108dgnQNHa8ku-4yxYKksaw78Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bf:f3:86:e0:d5:8e:f5:93:86:00:1a:65:44:04:4d:84:d4:
42:6a:72:1f:ed:10:e6:f8:11:95:11:49:a2:8c:5a:a5:10:59:
23:01:d7:d1:47:04:33:82:70:a1:03:21:fc:3b:75:76:62:43:
6a:a7:09:33:ae:19:4f:9c:00:27:f6:2f:70:f0:5f:23:cd:de:
24:31:fc:ea:d3:5e:08:50:bd:a7:b7:cf:6f:75:45:0e:f3:49:
08:d9:46:ed:f8:d7:9f:07:49:ac:35:69:1c:26:e2:06:3d:cd:
af:2d:e2:71:54:14:54:68:ba:35:fe:4f:2c:de:9b:86:24:22:
38:d8:48:0e:52:ac:60:c7:04:93:19:d9:5b:bd:73:c6:5b:a0:
d5:04:08:ea:e9:08:d4:6c:7a:27:fb:0d:e6:8f:ed:1f:ce:c2:
d5:82:a9:e7:f9:62:4b:f5:c2:c2:ce:a5:3a:d4:a9:ea:be:93:
60:72:97:89:6e:60:88:12:07:6e:e7:5d:3b:28:0d:70:a7:6e:
2e:b9:9c:a8:b6:cb:ae:07:8d:da:09:1f:b5:05:51:2a:dc:44:
4b:2e:5d:f5:5e:21:f6:79:39:c3:f3:33:d0:f4:14:9f:69:32:
12:f3:ec:ca:f9:68:f6:21:af:71:77:af:86:2b:63:bf:99:ad:
5f:2a:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:57:10 2025 by rpki-client