Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: Ly0tN4syNPKSRpQHdumTzSncD5QWvUl87ofmW9yCxdc=
Subject key identifier: 06:D2:CF:93:94:27:83:04:C9:C4:6D:71:0D:54:97:DC:09:8D:BF:DD
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 0194BC3BDF240338E582A48116EA2849A525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 0882
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 1ILl-_jBl8vTjilNwWyLb_6kN84.roa (hash: ecF4kJW8L9z29VWA5l2Xp4iuCOJ3lYvBbDFUMxXyKfo=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: FyImqBQf9Pi+5xXzqg1NfSokpWnjzUk2NMNVDPNJTyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:24:03:38:e5:82:a4:81:16:ea:28:49:a5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=06d2cf9394278304c9c46d710d5497dc098dbfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:a1:3c:c6:07:d0:45:35:02:e8:f8:69:c5:
63:10:cf:56:1b:49:00:8b:ff:26:bf:68:52:5d:35:
05:73:19:63:13:a3:d0:90:e4:37:3a:17:0f:2a:1b:
a6:17:e6:51:c0:73:e9:67:6c:70:05:1d:cc:22:7b:
6d:e8:7b:d3:10:96:58:7d:e4:ad:28:64:80:71:6b:
ea:7d:c3:d2:bd:aa:8c:48:cc:13:82:cd:6b:83:08:
f9:ef:9e:1f:24:8d:2f:31:7d:d0:e0:e1:d5:35:2d:
60:cf:cc:21:ce:f2:c6:69:59:dc:ac:82:48:05:5f:
57:ee:dd:c0:87:41:78:4e:a9:aa:72:bf:1b:b6:c1:
64:ef:7c:a8:c3:2f:b1:a8:11:8e:6d:aa:5d:7e:35:
e7:61:e5:ae:05:0f:36:fa:d9:bb:a0:1a:73:fc:fd:
f4:f7:31:72:9b:ab:8e:a8:7e:d6:a8:24:38:23:49:
ad:05:48:69:4e:59:48:29:b0:f4:da:36:24:49:04:
37:e3:64:52:13:16:37:f3:b8:13:e3:58:34:8e:ec:
af:dd:a3:bc:0e:7e:66:da:69:ec:86:ba:70:07:b8:
d5:f2:b4:c5:fd:c3:74:c7:fc:ef:84:f4:8e:24:52:
74:0f:63:13:d8:ef:84:20:4e:2d:c7:f6:3d:ba:e0:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:CF:93:94:27:83:04:C9:C4:6D:71:0D:54:97:DC:09:8D:BF:DD
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4d:28:09:aa:08:0b:5a:e6:9c:57:bf:1f:9a:d0:cd:e6:88:
a0:d2:f1:d5:8b:8e:4b:6c:1e:10:e3:92:4a:e2:1d:06:6a:18:
8b:79:2a:b8:2f:74:dd:68:bc:78:44:18:bb:17:ac:51:16:c4:
d6:75:23:21:e8:59:5d:04:f5:4c:fb:b1:ce:06:f2:5f:1f:ad:
af:9f:d3:fb:63:04:17:55:eb:2f:f8:7e:71:89:94:e6:06:0f:
f8:6a:d2:b0:43:e3:f5:22:b9:d2:c3:67:67:9b:51:66:2d:7a:
a5:6f:d1:6e:2c:f8:b4:c5:1c:63:2f:7c:b7:0b:29:1d:ef:09:
a9:90:11:c9:6c:c1:8b:c2:dd:6e:b6:0c:c1:bb:b6:fb:4e:11:
3c:6a:a4:0d:5f:00:11:fa:ea:1c:6a:d0:48:72:d7:e9:50:63:
3d:5f:0e:52:8a:4c:d3:3f:33:4f:ad:fc:8e:3d:fd:64:29:bc:
c7:46:97:ff:6d:84:ad:01:af:a9:0f:ae:37:3d:af:7e:5a:96:
20:6b:18:70:cb:bb:a6:93:8b:83:a8:e5:52:d8:49:00:83:0a:
2c:68:c3:6a:e8:4e:1d:22:60:eb:d2:37:b0:57:1b:fb:5a:43:
f6:5e:da:78:d7:d6:cf:df:9f:c5:7d:52:b0:f7:3b:55:e1:56:
13:5f:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:10 2025 by rpki-client