Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: 4R4tk2vNnu9SA6fCN6PyChqTnseEBf5rHkfjU+aIID0=
Subject key identifier: CF:D3:06:80:0C:D9:71:66:F8:F9:9D:24:E4:79:25:F9:CF:C3:1F:8B
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 0194BC72AC73272FA3EC2EB4858DC6194367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0A3E
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: jVB89p2nh6YK51BC9OiEVW/75uTtI8STXPoxTMC9qU4=)
2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:73:27:2f:a3:ec:2e:b4:85:8d:c6:19:43:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=cfd306800cd97166f8f99d24e47925f9cfc31f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:3a:5b:da:c1:87:04:18:46:f9:97:28:c2:
84:d6:79:47:4a:66:06:72:2b:1c:5a:bc:65:14:5f:
66:cb:1d:45:c3:f9:44:ea:b9:1c:08:19:2d:5c:d0:
b1:61:25:11:46:b2:f4:64:ac:3f:0e:c7:c8:b5:49:
3f:7d:50:8d:e0:99:a1:f1:96:7d:ef:cb:36:54:ba:
29:0b:cb:6f:7f:69:cd:a6:b8:aa:2c:2b:3f:5b:84:
cd:a8:47:30:f9:c3:a5:71:b2:04:02:18:61:e9:8d:
c5:9c:cd:c7:cc:0f:5a:b0:b2:2b:30:a0:f5:47:4b:
d4:29:2a:ae:ff:1b:d7:61:c6:38:a8:58:89:a9:c8:
5f:7c:f8:5a:b6:ec:ba:c1:70:e8:a2:a9:0a:b0:81:
55:75:39:f7:64:9d:10:84:8b:70:8a:90:56:f4:d8:
a3:a8:20:71:1f:12:84:56:8f:3d:09:8e:c7:06:aa:
19:f4:cc:8e:a6:2f:64:67:7b:ef:c9:6d:17:e4:8f:
d6:8c:3c:9c:f8:09:50:79:96:6d:67:c9:1f:75:14:
80:b8:37:e5:bf:50:be:64:ac:b0:37:c9:4a:9a:be:
4e:a9:bd:8d:9a:28:7c:a6:12:6a:32:1e:ef:58:db:
da:d6:b6:09:c3:d8:92:d0:9e:88:96:e0:2d:c0:85:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:06:80:0C:D9:71:66:F8:F9:9D:24:E4:79:25:F9:CF:C3:1F:8B
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:55:4e:00:fd:06:67:4c:ba:b2:88:9c:97:7f:1b:d9:ee:bd:
21:33:f3:db:1d:af:87:31:6d:60:d8:ed:08:46:e0:2c:e3:ca:
d0:59:cf:02:11:6d:59:c7:bd:f5:b0:6f:3c:0c:dd:97:96:42:
1f:7c:74:3f:90:95:6b:25:24:f7:be:c0:50:6f:6b:55:29:8e:
8c:30:bc:a3:48:bb:53:ce:3f:d6:e9:2f:13:6b:dc:24:fd:8b:
35:f8:b8:75:79:7e:54:c1:a8:9f:39:b5:80:7f:b5:ae:92:2f:
82:97:88:4a:e0:9a:88:29:6b:a9:9a:30:17:50:42:df:d2:43:
35:f0:ff:c9:d9:40:a6:2f:ff:09:96:e7:c1:b4:69:c8:b9:ad:
aa:61:11:e0:77:73:6b:7f:1c:9c:cb:91:68:72:f2:f1:a4:ba:
9b:c0:96:43:c0:0d:09:31:d6:67:49:0b:7b:ce:5a:78:ed:0f:
0e:35:50:02:72:92:1d:2f:a1:3b:9c:5c:e4:c3:36:03:7c:c3:
4e:c2:25:b0:8b:73:bb:6f:4a:03:70:b9:74:1f:0e:9b:b7:2a:
fa:a9:f8:82:0f:6e:eb:cd:dd:ad:67:65:23:7a:7b:24:7a:53:
2a:cb:0b:fe:76:c7:27:c3:b6:ad:44:fc:65:26:10:50:4c:16:
63:b0:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:26 2025 by rpki-client