Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: 6kDriLKR4dvZfOp4E92Yt8HuWqr0z41uWKwrVpb+KPU=
Subject key identifier: 9D:AE:18:AA:A1:B0:62:73:BA:12:A0:A5:34:DD:59:E3:77:18:88:0B
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 0194BCAA23C981C91A407EB7851CBC0A6A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0C09
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: zAorKpHyIc0dPsF+PYXy8YJsFv+MucqzhOfFaQObwuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:c9:81:c9:1a:40:7e:b7:85:1c:bc:0a:6a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=9dae18aaa1b06273ba12a0a534dd59e37718880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:a8:4d:60:e6:6f:52:30:ef:0b:ae:00:e7:
56:fa:5d:35:c4:97:27:17:5c:d8:71:c7:c2:79:98:
49:64:a0:59:6d:4c:d3:2e:3b:42:73:79:90:dc:be:
e4:cb:c5:7e:9e:9d:5f:e2:94:c0:4c:da:7c:16:21:
df:2f:a8:9d:e0:e3:a8:10:b6:3b:a5:71:b8:33:97:
2a:d0:1c:47:c8:75:d7:9a:5a:05:fd:e2:ce:2a:9b:
22:97:72:ca:bc:ec:5e:2c:05:12:4b:a4:a5:f4:da:
ad:ef:ab:0a:13:b8:81:b4:d3:b5:16:20:55:6f:00:
dd:af:09:02:c6:7d:a4:38:a0:a4:f9:25:49:ad:53:
a2:58:16:6c:b9:04:8c:f0:e5:ef:90:1d:57:6c:84:
2b:c4:82:2a:43:20:56:9b:77:7e:55:70:14:98:6e:
16:30:99:2d:bb:59:4d:d2:45:21:1b:09:1e:71:98:
f9:6f:22:6d:a9:49:ed:d5:98:27:78:30:75:36:8d:
66:c7:41:17:db:82:0c:df:8a:19:62:83:c6:4b:fc:
e3:23:e9:e1:66:44:99:31:eb:ea:ed:8b:7d:3e:df:
68:c3:e3:10:65:db:68:56:f0:d7:94:52:b9:6c:8d:
f2:e3:c5:f3:3f:0e:53:e1:ae:f3:a7:d1:1a:fe:06:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:18:AA:A1:B0:62:73:BA:12:A0:A5:34:DD:59:E3:77:18:88:0B
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:65:f1:a6:a3:59:40:44:fa:0e:03:b1:85:88:bf:6c:98:e0:
67:91:1b:1d:99:8c:23:46:a9:75:a3:0b:df:f1:2b:da:00:d4:
7a:51:30:30:7d:e1:1b:f5:00:d0:58:ba:5a:4e:87:ab:8b:d4:
17:33:61:2a:cd:66:e2:87:5b:c5:e3:6d:31:f4:c4:df:f2:5f:
80:4d:47:2f:8c:64:f6:47:28:cb:bf:6a:0c:a2:cb:ad:37:7d:
e3:26:cd:4b:01:ab:31:1a:52:6e:23:12:28:76:80:c6:87:4b:
10:fe:dd:1c:4b:de:ae:9a:33:8c:92:e7:79:82:fc:49:73:81:
0a:c3:91:01:72:cf:ae:b2:8d:af:7e:2d:49:ac:9e:55:c7:a5:
f9:24:ac:80:a4:81:37:b8:9a:73:41:1f:7a:19:ce:1e:a9:a7:
01:40:6d:d2:0a:6c:87:03:dc:37:3e:c0:b6:90:63:40:53:58:
08:56:89:2a:fc:b7:05:ce:b7:50:89:0a:ae:ed:c0:32:ab:ba:
5b:89:70:99:9c:57:3d:7e:0d:13:cf:82:8d:d3:e3:d5:9b:0b:
d4:d7:22:19:fb:e2:a9:04:7c:ba:cf:52:e1:1b:b8:2e:d3:0f:
2d:74:55:f1:67:c1:c0:29:96:31:c0:a6:81:ff:10:72:84:22:
93:14:f3:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiPJgckaQH63hRy8CmqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2
YTc5MjIwHhcNMjUwMTMxMTQwMDU0WhcNMjUwMjAxMTQwMDU0WjAzMTEwLwYDVQQD
Eyg5ZGFlMThhYWExYjA2MjczYmExMmEwYTUzNGRkNTllMzc3MTg4ODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ2oTWDmb1Iw7wuuAOdW+l01xJcn
F1zYccfCeZhJZKBZbUzTLjtCc3mQ3L7ky8V+np1f4pTATNp8FiHfL6id4OOoELY7
pXG4M5cq0BxHyHXXmloF/eLOKpsil3LKvOxeLAUSS6Sl9Nqt76sKE7iBtNO1FiBV
bwDdrwkCxn2kOKCk+SVJrVOiWBZsuQSM8OXvkB1XbIQrxIIqQyBWm3d+VXAUmG4W
MJktu1lN0kUhGwkecZj5byJtqUnt1ZgneDB1No1mx0EX24IM34oZYoPGS/zjI+nh
ZkSZMevq7Yt9Pt9ow+MQZdtoVvDXlFK5bI3y48XzPw5T4a7zp9Ea/gYRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2uGKqhsGJzuhKgpTTdWeN3GIgLMB8GA1UdIwQY
MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt
MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi
LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWXxpqNZ
QET6DgOxhYi/bJjgZ5EbHZmMI0apdaML3/Er2gDUelEwMH3hG/UA0Fi6Wk6Hq4vU
FzNhKs1m4odbxeNtMfTE3/JfgE1HL4xk9kcoy79qDKLLrTd94ybNSwGrMRpSbiMS
KHaAxodLEP7dHEverpozjJLneYL8SXOBCsORAXLPrrKNr34tSayeVcel+SSsgKSB
N7iac0EfehnOHqmnAUBt0gpshwPcNz7AtpBjQFNYCFaJKvy3Bc63UIkKru3AMqu6
W4lwmZxXPX4NE8+CjdPj1ZsL1NciGfviqQR8us9S4Ru4LtMPLXRV8WfBwCmWMcCm
gf8QcoQikxTzLA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:12 2025 by rpki-client