Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: LhTrCnb+DuSuXEJ07IrgSCB4JpxIrP7jsVNdz6ftDLQ=
Subject key identifier: 69:57:C9:8A:E5:5C:58:AA:4F:74:DF:CC:FD:0F:85:47:50:64:F8:A9
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 0194BC04DCA39CB024BE1A1683D1946AD99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: JWL25p6AsILXhbWV8zgUqgBC0AIamht72fWoxKiJmGo=)
2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:a3:9c:b0:24:be:1a:16:83:d1:94:6a:d9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=6957c98ae55c58aa4f74dfccfd0f85475064f8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:31:66:a1:96:c1:5f:1e:d0:a3:e5:d9:89:
bd:b5:b4:7a:d0:93:cf:56:d7:f3:c7:9c:79:77:dd:
0f:48:fb:e6:8e:d7:20:da:5a:ac:af:90:e9:1e:03:
ab:16:67:60:ef:1d:f9:a8:28:6d:6a:1b:60:81:4b:
96:bf:28:1a:d2:05:54:96:45:bf:35:03:d2:92:a1:
d5:3b:1e:b5:34:6d:b5:29:81:e6:05:91:20:7d:b5:
95:59:10:2b:2a:35:6e:0a:70:5a:aa:be:d1:95:37:
4f:cf:16:e9:55:c2:f8:1d:b5:93:5b:d2:4a:77:4d:
9d:85:04:61:f6:9d:00:3e:6c:34:e4:93:c5:dc:6a:
4a:f1:87:1f:09:3f:ae:41:2a:19:0b:40:63:50:e0:
77:55:b5:12:bd:0c:f6:b3:15:3a:7f:78:79:3c:de:
0f:73:32:64:2b:39:5f:10:2e:0f:17:72:04:12:98:
af:56:2b:27:e8:ce:0d:3d:27:09:91:65:e9:dc:6a:
5d:c2:a5:4b:aa:d6:f7:c3:ac:b9:cd:4d:b8:fb:cb:
6b:15:3c:bd:e1:ff:5e:c3:46:42:4d:f8:80:f2:51:
87:9f:e9:20:13:05:88:67:84:bf:a6:21:ce:01:73:
b8:39:d9:7a:51:8a:fa:0b:10:db:d4:94:d3:b6:7c:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:C9:8A:E5:5C:58:AA:4F:74:DF:CC:FD:0F:85:47:50:64:F8:A9
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:03:c8:12:61:20:db:5b:d2:dd:b6:47:27:7d:70:25:73:71:
ad:8f:9f:e8:4e:e9:81:ce:ca:8a:f8:b7:5d:76:4c:1c:05:60:
f6:93:89:73:3b:7c:27:2f:cf:ce:dd:92:c0:4b:94:4f:cd:ea:
04:83:17:04:ee:5a:4b:3d:c6:24:0f:d2:24:7b:fd:0b:10:6d:
61:a9:3f:d0:5f:a0:03:78:1c:d0:ed:9b:4d:73:96:68:a4:5d:
9c:0c:e7:ab:28:b1:0b:5f:76:a4:18:4b:6c:d8:92:93:1d:bf:
74:7e:27:86:eb:00:91:0b:4e:11:80:13:48:55:65:8e:e5:7d:
fe:96:34:2a:ba:aa:09:98:dd:02:77:bb:a7:d5:fe:8e:b8:f4:
3c:33:58:08:04:a6:e6:db:14:45:43:61:a4:a9:54:63:4d:1a:
b4:22:52:63:fd:89:3e:2d:3d:71:31:86:32:71:81:b6:53:cc:
2a:bb:e7:93:2d:ea:01:e9:bd:b8:f3:a4:36:79:81:bb:ef:1c:
7a:84:bb:00:50:d0:05:34:c3:ad:14:31:bc:e6:b0:70:6a:be:
40:6f:c7:6a:a8:82:46:f1:09:82:84:7a:90:13:40:cb:17:cd:
da:78:d9:fb:ef:4c:06:5f:4f:c3:c8:99:6f:aa:52:75:54:59:
ec:8b:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:46 2025 by rpki-client