Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: u0DYAqBfYw6LaE6uiEvqvwUK+WTmQ4wkb3mhxyzMuWY=
Subject key identifier: F2:EA:00:E2:45:6B:11:9C:EC:5E:7D:DE:2E:9D:38:1E:54:64:42:73
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 0194BCE0975E2617460B5C50BDE9A726C0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: +CiaUhmIfNLjGz/Ua2nIdmS5RohxlWYPygFuipcWpqc=)
2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:5e:26:17:46:0b:5c:50:bd:e9:a7:26:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=f2ea00e2456b119cec5e7dde2e9d381e54644273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:a5:f5:2e:aa:fd:35:93:34:01:62:a9:70:
c4:f5:35:be:f4:89:d7:1e:92:8b:30:03:34:7e:21:
4b:cb:64:61:5e:b7:1e:51:7f:d2:2c:05:d7:b0:9a:
0a:04:bb:23:35:63:d8:f9:9b:51:ad:03:4a:62:5a:
e2:86:bd:a0:93:de:a6:f9:1f:23:f6:0b:4b:b1:3c:
4f:38:84:23:d5:b0:14:93:18:71:5c:5b:cc:84:d1:
46:bf:c4:5b:19:f4:1b:bd:9b:da:63:98:a8:d8:9c:
a6:47:b3:4f:17:13:f6:1d:8f:52:9c:80:4f:e8:99:
79:73:27:62:33:ed:18:c8:b2:25:cb:ee:f6:f4:be:
d4:b0:bd:d9:39:6d:b4:b3:5e:bc:98:c4:70:7e:d6:
be:bc:ca:28:69:a5:81:23:d4:79:70:65:cb:cf:ed:
79:74:1b:4e:cb:4f:c7:da:c8:14:e2:44:b6:d3:36:
d1:c1:ed:8b:53:db:c2:78:d1:51:e0:7b:e3:04:3d:
d9:da:4e:dc:e3:b3:3a:1d:fb:19:be:41:6d:74:ba:
87:4d:70:3e:8a:c2:14:06:43:dc:5d:29:d5:64:00:
e1:15:98:de:9a:2c:14:47:72:63:04:20:3f:d8:ce:
63:f4:e5:fe:78:90:1c:6b:7b:06:a9:3d:7c:62:53:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:00:E2:45:6B:11:9C:EC:5E:7D:DE:2E:9D:38:1E:54:64:42:73
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ef:27:a1:d5:d4:d8:fb:ab:28:21:6e:13:71:28:69:b8:94:
14:5f:7a:6b:b4:3c:1c:5a:15:b4:10:e9:9c:98:a4:1d:08:98:
2b:3b:c9:fd:cb:19:fb:46:82:e3:12:a2:ed:41:e6:00:40:ef:
3f:2a:1b:48:7a:36:bb:81:af:15:61:d0:6d:14:f5:4b:06:a2:
de:04:01:cd:0f:d5:2f:48:d0:f5:85:77:b4:6e:18:3e:0a:5c:
2a:58:90:88:0b:a2:8c:51:3a:fa:e7:ce:ef:0f:ee:2e:3a:a3:
00:b0:2c:4a:c5:78:bb:51:13:57:07:fa:47:9a:85:a4:a2:ca:
a7:1c:82:bf:f8:23:79:9e:ee:c6:50:ea:50:95:7b:e6:2d:55:
6a:12:c4:04:0c:78:85:34:22:7c:f3:0c:f2:bd:32:68:2d:34:
92:96:86:85:c0:6d:24:e2:d1:4d:2e:e7:03:fe:ee:23:6f:73:
f3:fd:b2:13:a2:50:7e:28:8e:43:27:ce:0d:9a:fa:fa:e8:aa:
ee:00:39:ea:14:50:45:c7:f6:75:05:9a:22:7d:bd:52:9e:5a:
30:3e:7e:b4:d2:5a:05:63:16:58:27:69:c4:9e:21:4e:f4:ae:
f4:d7:98:43:44:d9:8a:18:5e:b0:77:5a:f2:92:1a:cb:5c:f4:
51:e4:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:52 2025 by rpki-client