Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: csIGI1g2x12tuBNaWS/EIKk7v0zprJHsD2FzWsVzcno=
Subject key identifier: A9:FD:04:BC:84:40:60:86:71:1F:CC:55:EE:7D:95:DF:F2:20:D3:17
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 0194BD4E62DA4CFF67B2A14B4C3CFDF9159B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: OBYO4oYqK6JRl6QJm2Sd6htQN3dSGoDjv0IQnbi8KaY=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:da:4c:ff:67:b2:a1:4b:4c:3c:fd:f9:15:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=a9fd04bc84406086711fcc55ee7d95dff220d317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:72:02:ba:cd:0e:bb:67:b8:e6:4a:29:bc:
b7:cf:95:05:d9:0b:17:85:83:64:0d:ec:7f:70:2a:
6f:f5:7a:29:1a:74:a6:79:6b:97:14:1d:11:7e:b6:
8a:a5:c9:43:a1:3c:7c:46:ce:c0:23:e7:51:08:db:
34:ce:62:77:42:de:4d:1f:1e:8f:7a:52:15:d2:de:
07:d0:1f:29:1c:05:fb:fb:53:0b:63:f9:bc:71:8c:
bd:fa:b9:65:94:a1:30:cf:f0:24:fd:36:84:96:ab:
2a:81:19:ab:ce:f7:82:e9:13:f6:05:dd:64:d9:81:
17:63:67:7b:35:19:16:84:bf:b7:0b:53:b5:2b:0d:
1b:0d:75:8f:ca:f5:77:b3:61:12:ec:d5:e4:24:2d:
19:73:3f:6b:c0:db:60:24:aa:f1:c1:57:57:27:fb:
af:9a:8e:4f:3e:04:79:71:88:94:f2:82:ee:10:bd:
52:c8:39:7b:cf:77:13:da:38:16:2a:48:22:9a:e2:
39:8a:3e:93:75:e7:9c:f0:f3:f1:42:1e:2f:b1:d3:
9a:49:d5:15:a4:92:f4:ac:11:7e:8c:b7:eb:49:f0:
9d:7b:f6:bd:60:1b:c2:7b:31:e2:3d:c1:f2:ca:44:
d7:18:38:d3:fc:ca:ab:64:7d:13:46:d1:18:aa:33:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:04:BC:84:40:60:86:71:1F:CC:55:EE:7D:95:DF:F2:20:D3:17
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ae:41:ee:cf:0b:3b:db:77:dd:08:50:de:ba:b5:37:52:7d:
ca:c2:67:af:e7:61:27:e2:e3:73:60:73:fe:91:c7:b2:d9:58:
8c:08:23:f6:e2:df:1d:7d:c1:d2:3e:1c:af:52:5e:0b:62:11:
98:5f:50:ca:33:04:db:e6:32:13:f9:6e:bd:f2:07:7f:81:87:
9b:c1:c1:ad:42:e7:54:8c:5e:d6:c9:ef:7d:e7:ce:81:2f:7f:
4e:5a:51:16:8a:47:4a:a2:ba:f5:65:ae:10:fb:5c:f5:27:38:
9c:12:ba:b2:ad:8b:81:29:a8:97:4e:42:61:5a:71:b1:c7:1f:
a1:68:aa:4c:70:60:4d:a5:9b:ac:f1:bc:0c:cc:20:a2:0e:67:
53:b1:9d:6b:59:5e:19:41:07:18:8e:78:89:e5:34:f8:98:a1:
51:89:64:25:09:c6:78:81:d7:67:8a:06:fd:6b:ef:f5:bf:fd:
da:94:e3:68:a1:04:5b:2d:e5:6f:9c:53:f4:2f:ec:0b:29:5b:
6a:58:4b:25:1e:57:d5:84:58:cb:08:0e:e5:8f:e2:ca:d8:cb:
a0:cf:69:13:b9:e6:af:e7:ba:ea:10:43:d6:35:45:6c:1a:08:
ec:de:4c:b8:e7:79:fa:57:d4:11:1d:92:62:fe:4a:dd:ee:74:
71:8e:49:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmLaTP9nsqFLTDz9+RWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlM2M5ZWUxYmUzMzA4ZmQ2YmQ0YTdjN2FjMmI5ZDkxMDA4
OWI3NzkwHhcNMjUwMTMxMTcwMDE4WhcNMjUwMjAxMTcwMDE4WjAzMTEwLwYDVQQD
EyhhOWZkMDRiYzg0NDA2MDg2NzExZmNjNTVlZTdkOTVkZmYyMjBkMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVZyArrNDrtnuOZKKby3z5UF2QsX
hYNkDex/cCpv9XopGnSmeWuXFB0RfraKpclDoTx8Rs7AI+dRCNs0zmJ3Qt5NHx6P
elIV0t4H0B8pHAX7+1MLY/m8cYy9+rlllKEwz/Ak/TaElqsqgRmrzveC6RP2Bd1k
2YEXY2d7NRkWhL+3C1O1Kw0bDXWPyvV3s2ES7NXkJC0Zcz9rwNtgJKrxwVdXJ/uv
mo5PPgR5cYiU8oLuEL1SyDl7z3cT2jgWKkgimuI5ij6Tdeec8PPxQh4vsdOaSdUV
pJL0rBF+jLfrSfCde/a9YBvCezHiPcHyykTXGDjT/MqrZH0TRtEYqjM4zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn9BLyEQGCGcR/MVe59ld/yINMXMB8GA1UdIwQY
MBaAFA48nuG+Mwj9a9Snx6wrnZEAibd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUt
MDhmM2U4OTA3YzQyLzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUtMDhmM2U4OTA3YzQy
LzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi65B7s8L
O9t33QhQ3rq1N1J9ysJnr+dhJ+Ljc2Bz/pHHstlYjAgj9uLfHX3B0j4cr1JeC2IR
mF9QyjME2+YyE/luvfIHf4GHm8HBrULnVIxe1snvfefOgS9/TlpRFopHSqK69WWu
EPtc9Sc4nBK6sq2LgSmol05CYVpxsccfoWiqTHBgTaWbrPG8DMwgog5nU7Gda1le
GUEHGI54ieU0+JihUYlkJQnGeIHXZ4oG/Wvv9b/92pTjaKEEWy3lb5xT9C/sCylb
alhLJR5X1YRYywgO5Y/iytjLoM9pE7nmr+e66hBD1jVFbBoI7N5MuOd5+lfUER2S
Yv5K3e50cY5JdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:22 2025 by rpki-client