Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: junKMGtL7Zzr1ALG82vJemOyw+4POvV81q4oTxJ8BIE=
Subject key identifier: 57:CA:9B:82:73:F5:F0:06:35:6E:E3:BB:B7:A6:23:1D:4E:6B:AA:3C
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 0194BC3BDD8AFCB3231FD446C22A0B36100C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 104B
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: aKyeS6Ab7fDOi4pNts02HPIq+HyIAxrv+67ZBFcXTtU=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:8a:fc:b3:23:1f:d4:46:c2:2a:0b:36:10:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=57ca9b8273f5f006356ee3bbb7a6231d4e6baa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:f4:dd:f5:8f:9c:dc:8c:21:30:41:29:f4:
c0:60:14:37:83:bc:3a:b7:c1:56:e4:53:d3:a0:df:
31:37:ba:c1:6a:5b:58:34:73:de:e1:c9:24:78:cc:
1f:da:2d:8d:ad:ac:24:48:b3:4b:8a:37:af:1d:2e:
6c:a0:e7:ef:c7:44:2e:4e:ec:f3:43:40:06:a5:fd:
a4:00:ef:a1:30:e9:52:25:03:a9:4f:86:33:96:5d:
26:b4:50:b8:45:ea:fb:98:3a:e2:e8:f4:9a:1a:69:
be:c9:a0:a4:4c:40:c3:0f:ec:98:8f:e8:83:5b:b0:
63:d9:11:ce:fe:64:9d:c7:91:6f:d6:f3:61:54:7b:
69:e8:66:13:98:d1:98:5d:88:27:97:ba:eb:ad:64:
96:8f:4b:57:c4:4b:ab:68:62:4e:ab:50:26:5f:55:
d9:0b:b8:bf:d7:56:2c:d5:2b:27:83:e4:7f:53:64:
69:84:7c:c8:4b:bc:d1:72:7c:74:39:e3:ee:46:ec:
58:f4:5a:fd:59:a3:c5:1f:59:c3:69:14:0b:b9:ab:
ee:57:e0:77:30:b1:12:fa:31:b6:39:de:b6:7f:f0:
95:f9:ac:cb:37:6a:51:f3:82:ad:f1:df:49:cb:ce:
31:b5:23:ee:ef:32:f0:76:e3:3a:3e:6f:16:38:02:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CA:9B:82:73:F5:F0:06:35:6E:E3:BB:B7:A6:23:1D:4E:6B:AA:3C
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c8:ad:16:d9:e4:e8:59:c6:c5:e2:c4:71:fc:9d:89:15:cc:
cc:a2:49:fd:31:07:d7:42:d6:92:bc:50:56:1d:10:84:67:b6:
18:49:0b:57:9f:7d:58:e6:ff:23:0c:1d:74:52:b5:c0:aa:a1:
9d:b1:b7:c9:38:42:74:ff:5f:9a:b1:ea:2a:cd:19:41:26:fb:
28:9c:b3:15:f4:50:74:0d:f1:91:3b:2b:62:f9:3f:82:f6:d0:
82:d0:41:90:21:53:99:3a:b8:f1:79:49:2b:d9:cc:d8:a9:00:
c2:6f:6a:67:73:44:e4:8c:48:62:fe:9b:dc:ab:31:d7:bb:8b:
61:17:7f:b9:50:12:88:0b:ee:c9:1b:63:0d:56:2d:a4:26:f1:
34:b9:ad:8c:29:e7:e3:05:98:7d:4f:1c:19:7e:61:aa:25:c6:
d8:ca:4d:ea:7b:6e:1e:3c:20:d5:8b:64:2a:de:72:43:36:19:
ac:d5:aa:a6:fb:5a:4d:31:f5:69:af:8a:fd:05:c7:2b:49:0f:
4e:2b:65:6d:3d:7d:b2:9d:bf:cd:04:c0:9b:c4:0d:a8:fd:b3:
b0:a4:ee:50:74:8b:aa:3d:f0:b9:80:69:00:48:f4:ba:ca:31:
09:a6:7a:4e:f2:7f:17:a9:5a:fa:66:eb:99:39:80:b7:7c:c8:
36:28:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:48 2025 by rpki-client