Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: THrKvCq1UiGNhdbrRm8cQ0uQ8uXhYcQVAaIsnhrfFzw=
Subject key identifier: D5:8C:B6:B6:FA:3C:9E:70:B6:A4:9A:AD:CB:03:A3:4B:06:42:7C:45
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 0194BC3BD5CCBBA6CD30C80137DFC112DD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 10D8
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: dBDrqVpRWT5Ics0uuSvJyBVPuWnYYDQw5BtDYtyEXSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:cc:bb:a6:cd:30:c8:01:37:df:c1:12:dd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=d58cb6b6fa3c9e70b6a49aadcb03a34b06427c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:4a:52:70:dd:96:34:aa:a2:37:50:7b:ef:
a7:08:98:d9:06:ab:5c:36:4e:3b:9b:8e:94:1f:00:
c3:6b:b9:5a:11:ab:50:35:e9:ab:f1:9a:33:c2:bf:
68:55:c0:5a:2a:0b:11:7d:ca:ee:fb:c4:72:a4:e6:
7b:aa:a1:f2:be:dc:24:0b:bb:4b:b5:e9:9e:6b:a5:
dc:fc:49:cd:da:3d:d7:15:58:87:06:cb:4c:d9:28:
b8:fc:98:9d:fc:49:63:bf:a1:59:d2:85:93:e1:0c:
2f:98:ee:95:15:54:c4:01:dd:6a:f6:68:6f:87:95:
da:ce:a8:f8:96:1c:b6:82:0d:d3:cb:90:e0:73:13:
1f:08:d5:18:11:0c:02:7f:34:f7:e7:43:29:a4:bc:
3c:ec:76:53:fb:38:4a:f3:31:19:67:81:69:cf:f4:
e1:82:b4:a7:bb:86:7d:c1:5a:9f:42:95:28:19:1c:
43:57:ba:9b:6f:e5:de:04:42:53:8c:12:a8:11:33:
9e:f1:e8:41:6d:a2:10:fc:f1:7e:4c:9d:bb:d2:57:
c0:e7:fc:06:8c:aa:f8:f7:fd:8d:17:54:a7:74:7d:
3b:ba:d1:99:1e:ec:41:67:85:7a:e1:75:4c:be:a5:
02:d6:f9:a9:b4:b2:61:ce:82:04:3e:8a:56:65:d9:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8C:B6:B6:FA:3C:9E:70:B6:A4:9A:AD:CB:03:A3:4B:06:42:7C:45
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e1:ce:67:1b:41:e1:21:de:77:b5:d7:ea:43:b1:c2:9f:15:
b4:2e:4d:02:91:ac:8a:10:a8:0b:5f:e5:3e:0e:74:46:8e:3c:
a9:27:c7:d9:bc:bc:d9:9e:28:f6:7a:ef:df:7c:21:03:cb:6f:
bf:eb:4b:32:90:fc:dc:b3:c5:dd:b9:51:6c:53:2f:f6:12:49:
0d:82:fd:54:eb:9b:15:4f:fe:46:37:a0:71:fd:8b:b5:90:8a:
fc:9f:1c:80:a2:cb:34:2d:de:02:a5:df:63:76:25:c2:bb:6d:
7e:fb:3d:d6:bd:13:77:8d:72:8d:a8:cb:4c:82:1e:0e:7f:38:
6e:93:fb:2d:3c:b5:65:ea:a1:8f:56:33:b5:0a:99:15:45:d0:
2b:fc:db:82:12:11:f5:50:6f:d7:dd:5c:7d:85:a8:f8:80:f1:
c0:a6:80:4f:02:1d:89:0d:80:d6:2f:f6:b6:fd:d2:e7:14:02:
59:a8:44:74:60:16:c9:d6:13:81:70:53:11:90:3b:f0:52:d9:
73:c8:a7:45:54:81:af:05:a1:2f:f5:dd:24:5a:ac:5e:11:05:
56:a8:81:a9:07:d0:16:3b:1b:e5:bc:5d:ce:dc:0c:01:f1:7e:
ee:4f:bc:86:43:83:09:d4:74:9b:f4:e8:d1:e7:b3:22:45:48:
62:6d:ed:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9XMu6bNMMgBN9/BEt12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy
NzkxYjAwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
EyhkNThjYjZiNmZhM2M5ZTcwYjZhNDlhYWRjYjAzYTM0YjA2NDI3YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyydKUnDdljSqojdQe++nCJjZBqtc
Nk47m46UHwDDa7laEatQNemr8Zozwr9oVcBaKgsRfcru+8RypOZ7qqHyvtwkC7tL
temea6Xc/EnN2j3XFViHBstM2Si4/Jid/Eljv6FZ0oWT4QwvmO6VFVTEAd1q9mhv
h5Xazqj4lhy2gg3Ty5DgcxMfCNUYEQwCfzT350MppLw87HZT+zhK8zEZZ4Fpz/Th
grSnu4Z9wVqfQpUoGRxDV7qbb+XeBEJTjBKoETOe8ehBbaIQ/PF+TJ270lfA5/wG
jKr49/2NF1SndH07utGZHuxBZ4V64XVMvqUC1vmptLJhzoIEPopWZdm0GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWMtrb6PJ5wtqSarcsDo0sGQnxFMB8GA1UdIwQY
MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt
NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj
LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+HOZxtB
4SHed7XX6kOxwp8VtC5NApGsihCoC1/lPg50Ro48qSfH2by82Z4o9nrv33whA8tv
v+tLMpD83LPF3blRbFMv9hJJDYL9VOubFU/+Rjegcf2LtZCK/J8cgKLLNC3eAqXf
Y3Ylwrttfvs91r0Td41yjajLTIIeDn84bpP7LTy1Zeqhj1YztQqZFUXQK/zbghIR
9VBv191cfYWo+IDxwKaATwIdiQ2A1i/2tv3S5xQCWahEdGAWydYTgXBTEZA78FLZ
c8inRVSBrwWhL/XdJFqsXhEFVqiBqQfQFjsb5bxdztwMAfF+7k+8hkODCdR0m/To
0eezIkVIYm3tEQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:50 2025 by rpki-client