Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: DGWB6GzqPWOGOSfA6TEh3ngTQQ01anT9OrVIbdTOzxU=
Subject key identifier: E3:52:D7:20:6F:C9:98:4E:74:10:DD:46:F2:F0:8B:54:C2:74:F7:65
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 0194BD4EBD49130C8548C2B20E811FC0E659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: jYHMOTLyCqjVYddeODWAYMPjzPilCyPFmQp/TEQsq1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bd:49:13:0c:85:48:c2:b2:0e:81:1f:c0:e6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=e352d7206fc9984e7410dd46f2f08b54c274f765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:45:d1:b3:7c:1c:48:42:54:2d:f4:85:22:
be:df:67:b2:6d:3b:78:db:3e:6d:3a:d6:4a:7a:06:
18:5b:4b:f8:8e:ed:da:61:e3:5f:fa:d1:30:6e:82:
c0:9c:b8:b1:f5:0e:a2:b2:36:5b:91:85:81:6e:58:
cd:c4:be:6b:b6:1b:07:52:f2:d3:0e:0e:65:84:4c:
b0:1a:c8:2f:6b:45:5b:34:78:b7:be:aa:5d:0e:f7:
d6:a6:5a:9a:4b:9c:71:a8:4b:4a:1a:88:59:80:5a:
de:e8:27:cc:38:7e:10:2f:2a:5e:ef:5d:5f:16:c2:
0d:0b:01:38:44:2f:b8:c5:f4:61:f9:63:d2:d5:0a:
17:f8:66:22:5e:8b:e1:1b:af:0c:18:d7:6d:46:bb:
00:3c:b1:b8:10:bb:76:25:e7:84:66:6d:aa:cd:3b:
51:38:2f:9d:c0:72:60:93:6e:6a:db:69:4a:f0:94:
80:81:ca:65:aa:c5:3b:a5:cf:2e:57:58:a9:79:93:
26:5d:f2:be:dc:df:60:00:e9:50:5e:1f:75:6d:5b:
0a:75:94:92:d5:82:83:d2:de:16:27:9e:82:dd:dd:
69:de:83:74:3f:67:c2:46:73:96:50:59:59:f3:ad:
25:b8:d2:8b:08:16:56:63:e2:e0:2f:91:99:26:1d:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:52:D7:20:6F:C9:98:4E:74:10:DD:46:F2:F0:8B:54:C2:74:F7:65
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a3:0f:03:60:ca:f3:dd:9f:81:0b:fa:66:6d:59:64:70:5e:
f7:a4:9c:f5:cf:e8:88:44:e5:cb:80:47:9b:55:b8:94:33:84:
04:30:a3:21:fb:48:a3:d2:2f:29:6b:8d:e9:fc:e5:25:d4:57:
3e:d3:13:50:b3:3b:04:b0:9b:48:2a:61:65:0f:b4:a3:10:c3:
ae:1a:62:5c:58:ba:1d:95:7f:b9:5b:f2:7f:08:9c:d7:11:fe:
17:73:cb:9a:9c:ef:db:69:d4:fb:1b:80:33:04:d7:5b:13:fa:
f4:74:4a:57:02:a7:77:09:3e:ad:cc:15:08:4c:ec:a4:b4:24:
0d:c7:38:de:47:1c:48:b7:81:a4:86:ca:a0:ec:7a:6d:8d:6c:
47:b9:8e:39:37:24:41:dd:11:b9:b8:64:0b:5c:0f:68:a8:c6:
1d:ab:d9:70:04:5d:6d:6d:bd:7e:1d:d9:8e:5f:1d:2f:6e:b6:
3c:77:fe:01:c7:67:73:04:d5:6d:ac:97:df:36:35:45:69:5b:
51:e4:e9:a9:6c:eb:44:57:43:24:a2:32:41:5f:0b:f0:d2:b8:
5a:46:9f:9f:14:25:34:82:a5:8d:ca:2d:96:dd:d6:f0:fc:cc:
5b:4b:c2:13:67:5a:36:4d:34:cd:32:28:85:da:1f:25:5c:38:
55:75:e3:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tr1JEwyFSMKyDoEfwOZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OThjOTk5ZTdmMDQ5M2VlMzY2MzRlODkyYjM3YzlmM2Jm
OTQwN2QwHhcNMjUwMTMxMTcwMDQxWhcNMjUwMjAxMTcwMDQxWjAzMTEwLwYDVQQD
EyhlMzUyZDcyMDZmYzk5ODRlNzQxMGRkNDZmMmYwOGI1NGMyNzRmNzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40ZF0bN8HEhCVC30hSK+32eybTt4
2z5tOtZKegYYW0v4ju3aYeNf+tEwboLAnLix9Q6isjZbkYWBbljNxL5rthsHUvLT
Dg5lhEywGsgva0VbNHi3vqpdDvfWplqaS5xxqEtKGohZgFre6CfMOH4QLype711f
FsINCwE4RC+4xfRh+WPS1QoX+GYiXovhG68MGNdtRrsAPLG4ELt2JeeEZm2qzTtR
OC+dwHJgk25q22lK8JSAgcplqsU7pc8uV1ipeZMmXfK+3N9gAOlQXh91bVsKdZSS
1YKD0t4WJ56C3d1p3oN0P2fCRnOWUFlZ860luNKLCBZWY+LgL5GZJh30+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONS1yBvyZhOdBDdRvLwi1TCdPdlMB8GA1UdIwQY
MBaAFHaYyZnn8Ek+42Y06JKzfJ87+UB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMt
YjEzNmZlNDBkZjRkLzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMtYjEzNmZlNDBkZjRk
LzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaMPA2DK
892fgQv6Zm1ZZHBe96Sc9c/oiETly4BHm1W4lDOEBDCjIftIo9IvKWuN6fzlJdRX
PtMTULM7BLCbSCphZQ+0oxDDrhpiXFi6HZV/uVvyfwic1xH+F3PLmpzv22nU+xuA
MwTXWxP69HRKVwKndwk+rcwVCEzspLQkDcc43kccSLeBpIbKoOx6bY1sR7mOOTck
Qd0RubhkC1wPaKjGHavZcARdbW29fh3Zjl8dL262PHf+AcdncwTVbayX3zY1RWlb
UeTpqWzrRFdDJKIyQV8L8NK4WkafnxQlNIKljcotlt3W8PzMW0vCE2daNk00zTIo
hdofJVw4VXXjdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:56 2025 by rpki-client