Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: shMnK6P5ObxjAdM1GX8l5HokvbquG5TTW6bxZMpyF3o=
Subject key identifier: 7A:32:B4:DD:A7:A4:87:46:56:79:59:81:33:E7:1C:D3:6A:68:E0:A9
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 0194BC3C806B4E84EB9F5D1FC15A973F24F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 28r3lezFt1DhHYHa7zUp6dp6gek.roa (hash: UnpOGH6h0Mhuee/PLRufj5c9ShCIaJkFN7bgA7Z1mp8=)
2: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: a3pKtiAT4Y7ZCHz7+hOGB7Wv0rQP/FcoU+ufAP4Vyko=)
3: S3gytHIiWuDnii46Cee6MjqDODU.roa (hash: WjQ4G+4EZrW+UzIf8d/g5pUPAeGGv9rfo0G8Gxn9x1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:80:6b:4e:84:eb:9f:5d:1f:c1:5a:97:3f:24:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=7a32b4dda7a487465679598133e71cd36a68e0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:4b:b0:7e:86:2d:33:e2:fb:ee:f8:99:62:
9f:b0:c8:14:d2:c9:57:75:6d:b7:b8:84:15:45:a7:
61:bb:82:aa:af:52:c5:6f:ee:2b:20:e5:37:66:cd:
3f:05:49:fa:11:41:ac:07:c3:94:0d:3a:43:08:80:
d4:d5:96:5f:ca:7c:52:74:f6:4d:6a:eb:28:02:ca:
bd:ec:bd:7d:d2:25:46:b3:4a:43:b7:15:a6:e7:f8:
34:8e:28:fe:46:f5:d7:1c:6a:bc:90:d4:1c:90:8a:
db:4e:d3:05:7e:f9:4a:8d:78:65:ea:0d:b0:97:fa:
bf:2a:62:b3:e6:38:f9:ff:87:3e:da:4f:aa:29:6e:
f6:c0:9c:7d:7a:5b:8b:13:a5:3d:33:48:da:49:f3:
b0:e2:6b:0c:19:39:a2:05:17:91:34:15:63:2c:17:
32:c4:a6:1d:1c:f0:3a:a4:78:f4:90:3c:eb:a0:83:
42:b8:18:16:93:91:e9:07:43:f2:4c:e8:2f:c7:15:
99:7b:be:ca:86:e8:d6:42:b8:09:98:18:f5:4e:87:
bb:c7:f7:4b:cc:01:2c:59:39:df:cc:f2:87:49:e2:
f7:ac:d0:15:94:ff:20:69:a0:d7:de:6a:fa:51:72:
01:42:63:d3:4f:43:6f:34:18:90:8a:1a:c9:0c:f1:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:B4:DD:A7:A4:87:46:56:79:59:81:33:E7:1C:D3:6A:68:E0:A9
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8b:70:9c:6b:a4:f0:8e:a6:86:7f:ab:bb:7d:9d:dc:bc:45:
4b:bf:6d:06:37:e7:16:b5:1c:30:95:6f:eb:b7:75:6c:bb:20:
b1:26:17:3e:57:fe:2e:a8:92:be:ff:ca:2a:d6:2d:b7:26:aa:
b0:7a:da:04:39:53:34:09:3e:da:53:70:9f:29:3e:d1:1d:a7:
3c:49:7d:19:34:df:e9:78:91:01:33:3e:ae:0d:15:2d:74:0d:
c6:23:01:58:5a:6b:61:ef:31:b8:b5:7a:70:3d:73:5f:f2:55:
bb:bc:ea:44:02:ed:cc:d1:55:44:b3:55:31:8d:64:6b:03:9e:
6a:0f:98:ec:01:52:29:9e:e6:f3:4a:fd:1d:0d:ac:0a:73:a4:
4e:8c:68:20:22:6c:02:a4:00:63:12:84:1d:8a:c5:e5:94:df:
7d:1d:37:4d:45:1c:d8:50:ba:72:5f:8e:77:6e:a4:1d:52:83:
83:06:3a:f4:8e:3f:7e:f7:9a:c2:35:6b:1b:f0:1c:c3:df:3c:
6a:84:e7:47:91:d7:a9:bd:d2:b5:a3:b7:a6:6e:ed:72:26:fa:
d5:2c:5e:a9:34:d7:a8:ed:db:6a:3b:df:e6:49:0a:27:78:90:
a1:d3:dc:15:e4:dc:82:36:40:cb:72:bd:d3:ab:17:31:40:29:
9e:43:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:36 2025 by rpki-client