Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: 2elfEQuckgva4btXgULBkHx+kGZg6fJg60tEYIlkQQY=
Subject key identifier: 86:8C:7F:8B:C2:89:A2:CC:9B:42:36:7F:EA:F6:14:BC:A5:80:83:24
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 0194BD175DAABD40E47B8C24638943ABEA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 010D
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: H0+6uVptebsHzU5X8i17UEA+WHpLD8dZGpcZywzbf+o=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5d:aa:bd:40:e4:7b:8c:24:63:89:43:ab:ea:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=868c7f8bc289a2cc9b42367feaf614bca5808324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:ce:6d:02:d9:95:f2:f9:93:8c:dc:08:ec:
46:f9:db:ee:d2:f9:ff:9c:26:f2:69:1c:24:dd:fe:
7f:a9:3c:58:5c:76:de:27:16:12:8e:a5:d1:bf:71:
6b:ca:63:6f:09:7b:de:eb:d9:a6:85:1e:33:7e:7e:
48:40:c0:9a:e4:5f:42:41:52:dd:c5:be:7a:f5:f0:
d9:88:e5:71:fe:95:45:ac:7e:e6:c5:80:47:25:b7:
dc:a4:04:0f:a5:f6:da:72:48:3b:fb:6d:56:0d:87:
00:77:9a:e6:62:d2:8e:8c:76:5d:0e:9e:57:94:50:
fd:c3:09:82:c1:d4:bc:06:3c:13:88:6c:0a:00:f5:
04:a5:f7:d1:56:1d:8d:08:25:52:d4:9e:7d:76:6b:
ab:3d:eb:4f:0a:83:1d:a2:76:38:65:13:f9:9e:2c:
27:48:9b:cd:00:42:e6:42:08:cd:85:69:6c:0d:d2:
8e:2e:45:14:48:c6:3e:28:43:5e:2a:70:29:96:16:
10:2d:21:20:4f:aa:24:81:ab:8e:d9:3d:d0:50:35:
0d:3a:21:82:ee:e4:3e:91:39:8a:41:26:c5:36:45:
28:83:d7:88:da:5e:64:f2:ec:dc:80:50:fa:92:f9:
d5:9e:fe:fe:1c:c6:17:4d:23:82:ee:61:b6:1d:b6:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8C:7F:8B:C2:89:A2:CC:9B:42:36:7F:EA:F6:14:BC:A5:80:83:24
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:00:b1:27:bf:c7:b4:7f:aa:d2:57:f2:c4:92:80:dc:d9:dd:
fd:3a:72:77:06:ae:6e:55:0f:95:b3:00:bc:66:98:1d:23:ab:
b8:fe:ee:73:85:38:54:bb:90:89:e7:14:2e:29:a0:30:08:f6:
f9:41:f5:8b:1d:b2:41:cb:8f:d6:d9:21:c2:68:1c:48:69:97:
86:b0:56:69:c7:36:c8:69:b8:17:6c:8b:da:ec:48:92:d5:e3:
9b:31:be:85:64:c3:80:ee:97:9e:26:00:21:15:93:10:64:43:
40:1b:cc:b4:fa:05:60:e1:4b:3d:6b:7c:f5:a2:40:03:f9:6f:
28:b2:68:05:fd:f8:37:0e:13:42:5b:db:fb:3d:e5:b6:ba:ab:
6f:90:74:e4:9d:f9:2b:0f:92:29:4b:29:91:53:87:af:c2:09:
2b:6b:47:cc:aa:18:8c:42:af:7d:23:37:c7:b5:f5:a0:a8:49:
8e:8a:82:b9:e3:a0:e1:a7:35:33:e8:27:38:51:09:db:b4:9a:
67:d4:f7:cc:35:64:6c:ed:95:d6:53:21:83:d1:89:32:f4:bc:
67:d4:fd:18:07:38:35:6d:9b:8f:28:48:82:9c:fb:a7:4c:9b:
90:ba:97:be:46:a3:94:fc:24:e8:a0:9a:bd:6b:8b:ea:45:69:
e2:81:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:42 2025 by rpki-client