Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json)
Hash identifier: T0Y+H7jXisIuY8CXdV4m91B8DY+qhB1Ajdb6K9HScVE=
Subject key identifier: 1D:27:69:1E:E3:00:7D:5C:ED:8F:7A:51:AB:BA:FB:57:F7:23:96:48
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 0194BCE08BDF1242C5D2EF6D17B75DC6998E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
Manifest number: 0C14
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=)
2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=)
3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=)
4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=)
5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=)
6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=)
7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: lBMpxo7fCUoPsvjl6DAYj6Rkd9IYcZcDDSA3y2sCflg=)
8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=)
9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=)
10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8b:df:12:42:c5:d2:ef:6d:17:b7:5d:c6:99:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=1d27691ee3007d5ced8f7a51abbafb57f7239648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:3d:0f:45:53:70:a5:c8:cc:ea:61:49:bc:
5f:3c:3e:a7:d3:73:52:bd:85:ba:79:d1:fd:03:c6:
18:7d:a4:39:f6:69:b1:a6:43:1f:49:f9:28:da:39:
29:4d:82:c8:aa:df:ba:ab:ab:fc:ad:bb:01:4f:12:
68:85:83:65:7c:92:04:e0:06:ce:bf:6d:df:26:40:
fd:eb:d4:b3:4c:fe:09:47:4f:3e:e0:c6:44:e6:ad:
9a:af:6b:31:49:ac:50:6d:c8:c5:86:c0:31:4b:a1:
ab:9a:f9:3b:87:ca:71:03:72:d7:fb:f9:7f:5c:d8:
7b:ac:e4:0f:b4:15:c2:8c:a1:86:00:37:16:d2:a3:
25:75:09:8d:02:a7:e4:8b:88:30:26:94:15:fc:86:
b0:91:13:c5:e2:a4:7e:b2:bb:97:29:1b:af:35:0b:
50:f2:24:4a:88:1b:20:80:11:eb:79:4e:16:c6:a7:
11:69:52:d8:c8:60:26:0e:8f:31:05:8a:b4:bf:02:
1b:b6:0a:0d:44:1f:db:95:31:f9:8e:1c:7c:51:0b:
ce:8e:f5:80:e0:7b:a7:4a:d8:cb:77:1d:d1:29:6a:
dd:9a:d5:c3:3a:74:78:54:5b:ab:54:dd:83:a9:5e:
b2:ad:56:d8:7f:fc:f7:d6:50:a8:98:42:d8:49:65:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:69:1E:E3:00:7D:5C:ED:8F:7A:51:AB:BA:FB:57:F7:23:96:48
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:72:c7:74:9d:4f:ae:6b:81:43:1c:33:ad:47:95:1b:a5:09:
f2:c6:32:1c:1a:4c:9a:1b:14:70:6e:29:06:76:ae:38:1e:47:
ab:66:78:f8:49:91:e0:12:df:e2:c8:b8:b4:00:8d:42:bf:06:
8a:9a:df:ce:71:f4:42:1e:90:eb:75:e4:3e:d9:56:19:bf:b1:
de:33:e2:e0:7d:d5:ee:13:f9:e4:78:8e:84:b2:5f:ec:7c:75:
c5:cb:aa:d0:bb:4a:7e:20:3b:22:b0:27:2b:c6:21:04:69:f4:
74:11:18:ab:24:01:55:f9:75:cf:0d:cf:30:06:b0:84:b6:4f:
09:b4:ad:cc:cc:2a:f5:a2:7a:df:47:06:01:c1:2e:87:16:9a:
c9:78:6f:f5:15:d0:c2:a9:f5:41:7b:8e:f0:62:09:36:de:f1:
73:69:dd:2c:6b:b2:23:18:b9:f5:e5:d0:58:22:c7:18:80:e7:
49:8c:77:c5:9f:e8:e1:4a:f6:03:74:95:9f:af:75:80:7b:cd:
35:f5:83:c5:4f:48:58:a7:b8:3c:6c:22:99:98:f2:6a:6c:f5:
23:4b:67:9a:02:17:49:79:2c:85:4b:1c:ab:d1:76:2c:ba:dc:
0d:ee:7f:a2:c5:f7:7e:12:6e:fa:c0:01:08:27:93:7d:31:f2:
24:6b:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:49 2025 by rpki-client