Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: wHOxFrP/Bvt8ERAkZnrbB3YO7YM50ZBhcMjqXwvDnBI=
Subject key identifier: 0D:C0:AA:D2:EF:30:EF:4C:16:A0:BF:FE:E1:9C:3E:7C:0A:88:94:DF
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 0194BC73175EF0354235BCAC03069F392F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 09B5
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: OAhIALJoRMp4eXZexgY4LpQFlu/KeWzIhojI/siRYcc=)
2: IMYt28KGsc1J7qdCJ8FZoivbBms.roa (hash: Lt2Qrrojs7l5TEl9OlYCV0+zE4iekqC1xALJxPDqCnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:17:5e:f0:35:42:35:bc:ac:03:06:9f:39:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=0dc0aad2ef30ef4c16a0bffee19c3e7c0a8894df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:4b:53:58:2f:3c:7d:1d:ef:72:99:f9:cf:
59:04:4c:14:28:20:79:fd:4e:b8:dd:a7:42:dd:67:
8b:d6:3a:27:9f:02:5d:04:9e:f6:01:dd:b3:59:86:
2c:ea:7c:aa:75:80:0f:35:ee:ea:73:7f:d7:48:fd:
c3:19:2f:fe:ca:fa:29:9c:86:a2:cd:25:80:7e:4b:
e5:64:e7:5e:84:74:41:78:e9:d5:01:b6:d7:54:4d:
e8:a9:6c:7b:11:68:24:ee:f5:cb:d6:aa:2a:4e:01:
19:21:5c:62:7a:d9:5b:cc:84:cc:49:21:41:d6:81:
ea:99:c6:8a:2f:ce:03:d3:8d:00:20:5b:21:84:b6:
2e:46:fa:30:60:57:ee:c0:09:ac:68:f1:30:0a:ac:
a1:e7:b0:2c:12:98:fc:5f:76:a3:2a:23:61:3b:88:
34:97:9e:61:54:47:b5:f3:12:20:f2:2a:9c:47:37:
54:f1:38:d8:1d:48:7d:30:65:62:b4:98:21:cf:f9:
7f:73:d5:ca:fd:fc:4d:8b:87:18:d0:8f:2d:8a:b9:
25:f8:7f:ee:b1:c5:46:75:9a:8a:32:7a:94:fd:9c:
4b:bc:7e:b9:2d:55:93:73:42:2a:25:09:a9:00:9e:
73:45:fb:19:e2:1b:89:52:be:4b:05:cd:94:10:41:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C0:AA:D2:EF:30:EF:4C:16:A0:BF:FE:E1:9C:3E:7C:0A:88:94:DF
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:17:3a:9d:6a:f7:18:47:e4:fc:4e:80:77:85:3c:41:71:af:
c1:61:f2:44:c0:2b:77:93:50:51:f9:de:d8:0c:43:b5:60:b2:
02:10:6f:70:4c:a8:41:f6:99:4c:03:db:fa:ee:aa:3f:8f:2f:
a1:f1:f3:50:79:82:1c:3f:9c:f7:28:af:52:7c:e4:16:19:ba:
3f:a9:17:da:89:83:5e:9d:9b:2c:77:4a:7b:b1:61:42:d7:3c:
25:ff:f0:51:c2:30:53:b4:14:da:ad:80:74:96:ac:31:79:ea:
8f:d7:9c:a0:ce:f5:81:80:ab:8d:66:c4:83:19:4d:74:da:d6:
48:ff:2f:40:02:79:41:e6:0d:de:c2:5e:be:bc:e8:49:aa:4d:
d7:41:7f:8b:34:b4:8d:d0:ce:4e:7c:89:b7:d1:a3:73:81:05:
9c:c8:94:c8:ca:03:85:b9:ce:9b:8b:92:a6:b9:bb:42:8c:83:
88:6c:e0:56:77:73:fc:e7:2d:c1:5c:08:0d:c4:7e:b8:98:4d:
e0:6b:e6:dd:c8:19:a7:01:e6:f5:7e:10:a2:49:5b:8e:eb:5b:
95:25:07:2e:e0:26:03:a5:2d:a3:92:93:f8:a4:c0:de:3f:6d:
44:94:4d:a4:99:25:62:83:b9:40:a6:b6:da:92:d2:a4:82:80:
cc:1b:73:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxde8DVCNbysAwafOS+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0
YzU2Y2IwHhcNMjUwMTMxMTMwMDQ2WhcNMjUwMjAxMTMwMDQ2WjAzMTEwLwYDVQQD
EygwZGMwYWFkMmVmMzBlZjRjMTZhMGJmZmVlMTljM2U3YzBhODg5NGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPNLU1gvPH0d73KZ+c9ZBEwUKCB5
/U643adC3WeL1jonnwJdBJ72Ad2zWYYs6nyqdYAPNe7qc3/XSP3DGS/+yvopnIai
zSWAfkvlZOdehHRBeOnVAbbXVE3oqWx7EWgk7vXL1qoqTgEZIVxietlbzITMSSFB
1oHqmcaKL84D040AIFshhLYuRvowYFfuwAmsaPEwCqyh57AsEpj8X3ajKiNhO4g0
l55hVEe18xIg8iqcRzdU8TjYHUh9MGVitJghz/l/c9XK/fxNi4cY0I8tirkl+H/u
scVGdZqKMnqU/ZxLvH65LVWTc0IqJQmpAJ5zRfsZ4huJUr5LBc2UEEGxPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3AqtLvMO9MFqC//uGcPnwKiJTfMB8GA1UdIwQY
MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt
YmY5Yzc5MTQ5NDYyLzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy
LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBc6nWr3
GEfk/E6Ad4U8QXGvwWHyRMArd5NQUfne2AxDtWCyAhBvcEyoQfaZTAPb+u6qP48v
ofHzUHmCHD+c9yivUnzkFhm6P6kX2omDXp2bLHdKe7FhQtc8Jf/wUcIwU7QU2q2A
dJasMXnqj9ecoM71gYCrjWbEgxlNdNrWSP8vQAJ5QeYN3sJevrzoSapN10F/izS0
jdDOTnyJt9Gjc4EFnMiUyMoDhbnOm4uSprm7QoyDiGzgVndz/OctwVwIDcR+uJhN
4Gvm3cgZpwHm9X4QoklbjutblSUHLuAmA6Uto5KT+KTA3j9tRJRNpJklYoO5QKa2
2pLSpIKAzBtzqw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:14 2025 by rpki-client