Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File: dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier: fFoimbIYAVnn48iJl7hl50HsRQsrO+3Nyj6I3pRocvc=
Subject key identifier: 17:13:2A:2E:AA:21:15:0F:EB:7A:19:C6:41:13:97:19:88:47:2B:C4
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial: 0194BD17D741EDAD667B75EA07374AED3FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: KdvLvA1uIYqgiahWR5/6l94HSHcFyZC4IrhfpCPivgI=)
2: dldB0wg3sOKFlgEWz6LNxn-RMtU.roa (hash: A/mZd0VT9lvf5tIKF1PGUACWDIq15nwU2xObWbHt5Q0=)
3: fGaPq4YA6maqB6noR_KA3CoM-Rc.roa (hash: INJZ5oK620NZUOOr9nOKGmnHUYB9fAHODj6emd7n2KE=)
4: fVcVxVJ7p62rticmypgxz96e8JQ.roa (hash: 0G0V21w8vjbyE9Yv5tuFynWy+aBCDfEtQfkWhN6p7OY=)
5: muQqhNcFqaAhliY1Xe6uhTF-w60.roa (hash: 5ol3Dy/oyYKpD5jnMaSN9uea7FQti15q53TRbPs48Kg=)
6: z1dSMhrf6i9m8VW8FnaeYoIuN2Y.roa (hash: s3koYJ0MAG3XeNvRc7EhqxMmZm+M8QlbPEJh3Wi8tyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d7:41:ed:ad:66:7b:75:ea:07:37:4a:ed:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=17132a2eaa21150feb7a19c64113971988472bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:95:94:04:61:6a:61:42:29:21:4b:62:b8:
06:2b:27:27:25:f7:e1:ca:bf:45:6f:da:07:51:59:
ce:46:73:ab:9c:60:a9:15:81:c8:74:12:2e:0c:67:
22:4a:02:a6:ca:1d:d1:77:27:36:a7:8b:e1:43:30:
4b:1c:14:76:3f:ef:65:ae:7b:fe:08:c9:51:ca:ca:
6f:de:d5:2b:97:37:2d:ae:99:05:52:b9:88:a4:24:
e1:01:01:2e:36:a4:19:0e:11:5e:87:d8:2e:3c:39:
4f:a4:97:d7:45:ea:19:9a:53:be:ea:32:c4:4f:83:
3f:9b:34:54:c0:70:91:0f:af:e2:1a:60:5f:e9:9f:
57:65:20:b2:95:10:ad:b6:78:fe:7f:df:53:3b:cd:
c2:27:aa:18:0a:bf:32:7d:93:e8:57:40:d0:99:83:
68:fb:ac:bb:82:71:64:6d:4a:2b:fa:c4:10:fb:c3:
69:42:f1:47:8d:b8:c5:d5:ea:cf:9d:fe:82:e5:3c:
ae:f5:fd:77:af:a4:00:76:47:fb:6a:80:5d:b3:d3:
ba:90:63:3a:bb:e8:8f:cb:52:93:ba:8e:a6:13:57:
ae:89:e9:8d:3d:6b:9e:75:73:6b:00:53:10:b5:9f:
c7:a0:63:36:d3:bb:9d:fc:8a:ad:d1:01:77:04:3d:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:13:2A:2E:AA:21:15:0F:EB:7A:19:C6:41:13:97:19:88:47:2B:C4
X509v3 Authority Key Identifier:
keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e7:ee:7b:6f:57:84:4b:54:6b:63:44:29:eb:23:2a:84:42:
81:50:59:05:8d:92:77:fe:0b:28:b6:27:7f:98:69:29:11:50:
48:57:30:a6:43:6d:bc:cb:12:66:bd:17:fb:1c:7d:cd:f5:94:
a5:dc:55:08:08:4f:20:d3:96:3e:e2:41:02:3b:81:87:b2:c8:
53:6e:b2:2c:0d:40:42:04:ba:bb:7b:2d:47:40:51:02:1c:39:
b8:2d:17:29:10:05:f0:00:3c:b5:18:d9:90:d8:fd:b1:57:5a:
60:8c:ba:9f:a0:ba:8e:d2:43:80:84:ad:bc:7a:46:07:33:4d:
b3:26:b5:9f:20:78:51:df:48:d7:23:e7:5f:7a:8d:1e:32:9b:
f5:79:cf:9a:82:a5:65:ed:42:bf:aa:df:8d:79:60:2d:7c:de:
ec:2a:9a:de:5e:a1:50:d4:45:14:09:a8:a5:3e:c6:83:d1:43:
9d:91:de:f2:95:fc:d9:e6:a9:6d:92:47:e1:d3:5c:3a:25:5a:
02:f7:af:ee:ae:7d:ec:21:e8:4c:69:e2:f1:4d:10:6b:20:f5:
50:13:a4:96:5a:d6:36:7c:93:a9:a2:72:32:32:a9:65:f8:78:
06:be:b7:98:f7:ef:d7:9d:21:71:8e:22:57:a3:2d:11:93:74:
85:ea:f6:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9dB7a1me3XqBzdK7T/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw
NjY5NjUwHhcNMjUwMTMxMTYwMDQzWhcNMjUwMjAxMTYwMDQzWjAzMTEwLwYDVQQD
EygxNzEzMmEyZWFhMjExNTBmZWI3YTE5YzY0MTEzOTcxOTg4NDcyYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnOVlARhamFCKSFLYrgGKycnJffh
yr9Fb9oHUVnORnOrnGCpFYHIdBIuDGciSgKmyh3Rdyc2p4vhQzBLHBR2P+9lrnv+
CMlRyspv3tUrlzctrpkFUrmIpCThAQEuNqQZDhFeh9guPDlPpJfXReoZmlO+6jLE
T4M/mzRUwHCRD6/iGmBf6Z9XZSCylRCttnj+f99TO83CJ6oYCr8yfZPoV0DQmYNo
+6y7gnFkbUor+sQQ+8NpQvFHjbjF1erPnf6C5Tyu9f13r6QAdkf7aoBds9O6kGM6
u+iPy1KTuo6mE1euiemNPWuedXNrAFMQtZ/HoGM207ud/Iqt0QF3BD2jjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcTKi6qIRUP63oZxkETlxmIRyvEMB8GA1UdIwQY
MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt
ZDQyMDlmYzdmM2M5LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5
LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOfue29X
hEtUa2NEKesjKoRCgVBZBY2Sd/4LKLYnf5hpKRFQSFcwpkNtvMsSZr0X+xx9zfWU
pdxVCAhPINOWPuJBAjuBh7LIU26yLA1AQgS6u3stR0BRAhw5uC0XKRAF8AA8tRjZ
kNj9sVdaYIy6n6C6jtJDgIStvHpGBzNNsya1nyB4Ud9I1yPnX3qNHjKb9XnPmoKl
Ze1Cv6rfjXlgLXze7Cqa3l6hUNRFFAmopT7Gg9FDnZHe8pX82eapbZJH4dNcOiVa
Avev7q597CHoTGni8U0QayD1UBOkllrWNnyTqaJyMjKpZfh4Br63mPfv150hcY4i
V6MtEZN0her2lQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:16 2025 by rpki-client