Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
File: DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft (raw, json)
Hash identifier: vRVb9cKeqO4d/vzezfHJM3mQHvC99IImupwEhgkleug=
Subject key identifier: FC:CD:49:21:01:70:9F:9F:02:35:E9:2D:0E:F8:25:0D:CF:1F:8C:E2
Authority key identifier: 0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
Certificate issuer: /CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Certificate serial: 0194BBCE70A7F9562E7306300DA8F564F077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl (hash: JRym0VPNGfCQch8s1/zxeTdAhWqNDTIWSXwJpqih028=)
2: iQmuyfyS-VZmfPFKC0Z9AaIC4kY.roa (hash: 7DCQpBOfhSoaH0TuGwai+ahzTdDtSNMxfs2ftu0Ew9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:a7:f9:56:2e:73:06:30:0d:a8:f5:64:f0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=fccd492101709f9f0235e92d0ef8250dcf1f8ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:1a:2a:ae:42:9d:7c:de:b2:54:a2:44:60:
ba:ce:7f:af:5f:e3:db:7f:4e:35:0e:66:90:30:7d:
e8:09:fe:3d:37:60:1f:de:bf:08:bc:3b:c3:1c:19:
37:29:1d:3e:67:f3:1c:1a:d7:67:0f:f0:4d:d7:49:
1e:54:6a:97:3a:f3:55:c0:93:ca:bf:e1:e2:94:4a:
63:f8:84:d0:73:aa:f2:9b:49:1a:b1:f8:8d:98:53:
b8:23:b7:01:cf:e3:cf:5f:a7:bb:4a:c0:d6:d8:7f:
26:f0:95:1d:4f:e2:b4:69:24:f1:2a:ab:b3:d5:39:
c0:67:b2:aa:a2:aa:91:e4:e6:15:93:30:90:3f:43:
b2:a7:d3:5b:a8:b4:60:29:52:d8:2e:90:5d:49:62:
8c:1f:5f:d1:47:d3:a2:9a:b3:81:3a:53:66:85:dc:
c7:35:a7:be:b8:88:4f:f9:6e:b0:f3:ed:c3:ac:20:
a6:07:b8:be:b6:df:e6:2d:cb:2f:81:7c:d4:0f:9d:
61:82:9f:48:79:f7:66:3b:9e:c5:89:26:24:59:02:
8a:2e:01:7e:cf:0c:62:ac:44:b1:7a:f3:cc:ab:50:
9a:b1:da:77:62:35:62:ea:9a:11:5d:40:a7:c5:61:
92:a6:b3:01:ad:97:ea:54:89:d5:d0:8e:26:2c:3f:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CD:49:21:01:70:9F:9F:02:35:E9:2D:0E:F8:25:0D:CF:1F:8C:E2
X509v3 Authority Key Identifier:
keyid:0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:72:97:db:7a:0a:b7:b2:01:e1:ca:11:4d:05:d5:24:17:5d:
71:e6:36:4c:f2:e2:66:95:db:e3:b1:93:38:22:b5:80:67:82:
9d:61:88:57:2a:bc:c7:26:28:e1:09:34:bf:c8:69:58:3a:7c:
fc:08:61:b4:8f:07:5d:22:48:e6:d1:01:5b:7f:26:a7:4e:be:
cf:49:58:54:5d:e9:78:a0:25:63:c0:32:d3:27:ed:70:3b:6c:
68:a6:6d:37:57:e7:3e:6e:59:58:c7:5d:7e:7e:68:52:a7:74:
44:c1:17:82:4b:69:67:f6:96:5a:a7:a6:cd:ce:5b:10:44:6e:
7e:57:0e:9d:fc:c9:60:e0:0c:8c:8b:4b:51:e9:d4:fa:c0:0c:
79:2f:a7:2c:1f:4a:9d:dd:a7:8e:d5:36:ee:35:25:6c:83:08:
49:45:fe:65:65:da:ae:bc:45:bd:57:13:21:cf:51:7a:f9:ac:
1c:a1:ea:68:59:83:af:29:17:b5:f1:a7:54:46:9c:5c:0e:a7:
b6:a4:2f:14:54:d3:c5:d9:0e:07:36:ef:97:37:36:bc:36:de:
4f:bd:46:32:c9:26:3e:3c:16:46:95:a5:79:a0:dd:35:fe:d4:
53:1a:ad:52:f0:62:c5:28:80:58:e2:6d:7f:07:dc:c6:9e:2e:
68:1e:1a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:25 2025 by rpki-client