Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
File: dLM_sg3VV80LFO3-EIgPDg0hxSk.mft (raw, json)
Hash identifier: HB2y9Q8+qpIJSaV8VO79n882yq0Yh/E3eKfwu5dD6mk=
Subject key identifier: 37:8C:F1:72:FF:86:36:83:FF:0F:B6:70:82:CD:6C:09:FC:E5:1B:49
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 0195A80EBEF2EEA23EA487B35703AB12D04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
Manifest number: 14A6
Signing time: Tue 18 Mar 2025 07:01:33 +0000
Manifest this update: Tue 18 Mar 2025 07:01:33 +0000
Manifest next update: Wed 19 Mar 2025 07:01:33 +0000
Files and hashes: 1: 7XzhjrOg-Z7qBV45mobEyhWoPO0.roa (hash: PcT7axGWrzmC1UC4BdMVD7KNq4KOcnvcH7qwOmp2S40=)
2: JmU1zZ_s32x0xTiVO1Ld5c9a0iE.roa (hash: bYm30H+hk6LyQs89QWpfVlG6uGHxd4o6fuhs92pT8Og=)
3: dLM_sg3VV80LFO3-EIgPDg0hxSk.crl (hash: KkvFWCu2szZJ6/bqQFda9ZR9qmcoNpwsD8i6eIL4xRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:0e:be:f2:ee:a2:3e:a4:87:b3:57:03:ab:12:d0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Mar 18 07:01:33 2025 GMT
Not After : Mar 19 07:01:33 2025 GMT
Subject: CN=378cf172ff863683ff0fb67082cd6c09fce51b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:2b:80:c2:e3:5e:7b:26:a0:c6:5f:23:eb:
c6:8a:fc:e1:5a:0f:72:4e:ca:fd:81:59:d4:5f:1e:
ee:ed:27:c7:4e:f6:4c:f3:1d:59:3b:47:b8:14:52:
47:26:d0:e2:b6:a4:48:6d:5e:77:b4:44:f3:23:c5:
77:74:d4:de:7c:c0:90:8e:0e:e9:a6:e6:88:7d:d6:
c1:60:67:04:d0:f5:7c:f6:9c:16:22:87:85:4e:89:
e2:3d:ed:c2:1f:de:b8:e1:86:40:22:28:03:f1:6a:
6b:67:ec:8a:ae:cb:b2:6e:4b:d5:04:21:48:b9:1d:
96:9d:43:aa:1a:11:9a:1d:c0:eb:7f:e6:24:6f:4f:
f4:16:be:a5:46:13:03:9b:e5:2d:4b:12:04:a1:e8:
82:5e:ee:fb:e5:c6:1d:70:9f:84:85:95:e3:4e:fc:
31:95:5d:8d:98:c2:86:ce:fa:08:04:f6:d2:5a:df:
fe:88:d4:8a:6f:d5:e7:8f:c9:7f:ee:1c:0f:fb:98:
22:4f:3f:d2:14:4e:a6:84:8a:f2:a4:38:5b:49:f0:
01:05:cc:41:a3:0e:32:49:36:b8:f1:84:7d:92:15:
45:a4:8c:99:ca:81:d1:48:c2:1d:74:ba:37:83:81:
67:fa:ec:8e:77:1c:c6:10:07:3b:bc:b0:10:d5:27:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8C:F1:72:FF:86:36:83:FF:0F:B6:70:82:CD:6C:09:FC:E5:1B:49
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:d3:04:ee:2b:82:84:56:92:17:61:5d:74:61:27:9b:11:
a3:8c:1c:4f:b1:fb:04:33:ca:b7:ff:53:56:66:e0:60:7a:2d:
28:b1:c8:56:4d:e8:67:a6:64:04:f5:c1:a9:d3:1d:c9:a9:d7:
e2:b7:17:77:5e:75:42:ed:d9:6e:fd:7a:82:f6:fe:61:61:8b:
41:b2:de:03:c2:bb:40:12:3c:06:8c:e9:2a:f9:ab:b0:c2:80:
e7:93:03:dd:86:1b:f1:76:6d:64:c8:1f:d5:48:69:f2:01:d1:
8b:8c:29:d8:96:fd:f7:6a:f9:7d:2f:9a:c9:54:d3:b6:94:b5:
8a:56:64:98:b5:74:2f:cc:bb:47:f9:8b:17:06:0a:df:70:0d:
17:f6:7d:d7:33:0e:94:cd:91:83:a5:f5:6c:35:0e:b2:c3:3b:
5a:ab:39:42:89:05:72:37:c9:18:22:12:5a:12:bc:8c:57:97:
1b:8c:e9:28:15:66:72:1d:64:71:44:c4:f7:09:b8:1c:7c:b3:
f5:87:c0:3b:47:27:84:af:dd:17:fc:d4:83:33:49:f8:04:a0:
ab:32:50:b7:58:30:c2:3f:2e:76:a9:ac:bb:fb:c4:c1:c5:22:
57:52:af:d9:5b:54:b0:4c:9c:db:bd:7e:7c:18:b3:90:4f:31:
a0:a4:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:50 2025 by rpki-client