Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: BqFuK4zeykyltVwZtrmWwNlZm8mYTITHUG/JCng2Tu0=
Subject key identifier: 33:DF:86:33:55:BD:19:58:61:73:AA:8F:96:32:5A:9C:E5:8B:6D:37
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 0194BCA99390FF6FE08B0D7264F5BC41A241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 0394
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: c+AewsXxTK/3kI49NCTYXexqi0M8Q/34sBdJggFsvaA=)
2: tDD9B-lEcyqNvoNAET5cpeS9CP4.roa (hash: rKwo3X/3AKqFNwDQChvvjw66ToIOE4+PnSG73JsvhIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:93:90:ff:6f:e0:8b:0d:72:64:f5:bc:41:a2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=33df863355bd19586173aa8f96325a9ce58b6d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:eb:e9:19:cb:2d:61:c9:08:61:93:21:d5:
b6:24:8a:bd:df:d8:35:d4:97:15:87:9e:55:3f:44:
e4:24:13:89:dd:3a:e9:f2:46:2a:79:f5:b1:b0:4a:
d8:b8:d9:db:61:6a:99:2d:db:1a:0c:96:78:69:50:
9c:01:70:71:4e:b0:78:8f:89:6d:5e:b8:b7:ef:a3:
c3:99:32:6b:38:e5:4e:ff:8d:2c:32:7c:19:4d:9f:
e5:1c:7e:41:76:d0:76:94:7b:91:59:63:68:eb:b8:
94:d8:15:a7:76:5e:17:c7:2d:ed:72:b3:e6:73:9d:
96:6e:ac:63:fc:e2:1b:e2:79:92:8f:ea:0f:f5:63:
c0:d6:ca:5c:44:69:46:5d:9e:af:79:98:7e:ba:8c:
d9:46:3b:a2:86:60:5a:39:5d:54:1f:c0:20:6e:fc:
00:76:d4:e3:76:02:da:88:cd:68:d3:bd:92:b2:41:
d7:38:da:5f:4b:18:be:ba:37:fb:5c:f1:23:82:b5:
fd:1a:e2:6d:02:44:a4:34:2a:54:d0:91:ae:12:2a:
bd:d1:64:31:98:37:df:19:b3:dd:d6:f1:0c:81:c3:
d8:a0:09:30:66:1b:98:f5:19:2d:97:9f:80:d7:b9:
20:76:1c:a6:07:1c:3a:48:e8:09:af:e3:b1:33:ed:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:86:33:55:BD:19:58:61:73:AA:8F:96:32:5A:9C:E5:8B:6D:37
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:85:83:17:97:26:80:5a:e0:05:67:ca:86:34:1d:f6:55:de:
54:5d:0f:ed:1f:23:f6:2b:08:52:1a:91:63:29:8d:fe:47:4e:
02:18:85:92:46:4d:5c:7d:dd:d9:f1:81:44:bf:c2:a6:be:aa:
11:9f:0c:03:35:b4:8a:08:57:86:24:2d:18:c2:98:02:5c:6b:
e2:ef:c7:8f:03:1b:89:e2:91:cd:e4:4b:09:28:db:e2:ed:f8:
c6:1c:85:de:64:11:41:b3:1e:18:2c:f6:22:ca:ef:cf:0a:d0:
8c:83:27:1f:ad:bd:3e:dc:8a:91:17:1e:1c:44:e8:f8:96:8f:
d6:ff:01:e3:59:46:02:89:68:e8:81:38:38:f7:79:b5:53:70:
9a:e4:19:a6:e8:45:ee:48:eb:54:1c:09:a5:b2:e4:36:1d:55:
b6:8d:42:5a:bc:65:2e:6a:9c:42:b5:b6:b1:ee:ee:4e:64:f8:
1f:42:42:02:aa:f9:d7:c1:85:3c:74:42:45:c3:92:0f:0a:e4:
d4:49:37:9b:14:20:f7:ad:20:c7:59:7b:6a:90:e1:59:d1:05:
c9:4c:fe:d8:6b:0e:8f:2d:99:0f:77:c9:a8:cd:00:24:0c:06:
8c:84:d6:55:5f:7a:84:ea:31:10:43:70:72:91:df:73:44:96:
16:87:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:48 2025 by rpki-client