Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: hZOHcneXLL4nXvmt+mKbgYKWVWGst3stSiQeBzHWXK8=
Subject key identifier: EE:23:4F:40:D5:68:C7:CA:B5:13:70:D4:54:95:D4:00:4A:68:D3:8A
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 0194BD178A9773A209220366CD128635CB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: mxKyGDsVrapXD/k+6ZouyyHrmynX1U5n1DGxIyH9qDQ=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8a:97:73:a2:09:22:03:66:cd:12:86:35:cb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=ee234f40d568c7cab51370d45495d4004a68d38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:1c:a7:f0:19:26:ce:ea:c0:c1:be:f4:55:
f7:02:26:01:14:f1:40:e3:37:c5:ea:6b:c3:ce:9c:
c7:68:1c:ee:2e:dc:ee:5a:3d:9d:48:55:41:9c:b2:
11:24:b9:94:1d:58:b8:8e:19:b9:11:9c:5d:46:5d:
41:4e:a4:cb:25:52:84:31:16:0b:5f:5e:a9:54:30:
2e:c4:0c:c8:aa:c8:54:13:c5:32:4f:4c:21:8d:3f:
5f:52:77:4a:be:54:c7:d6:76:84:6d:ee:2d:8c:25:
07:7e:5e:aa:f6:c2:91:bf:6e:cb:82:f5:5f:e3:35:
2a:85:e1:e7:9f:33:5d:da:91:01:58:2f:d0:f7:ba:
f3:af:fb:3b:31:b7:57:23:96:79:7d:98:97:df:a4:
48:4d:86:fe:c0:c3:af:dd:ce:7d:e7:3b:1e:17:42:
f4:bb:7d:73:03:9b:93:de:7f:f6:d5:a7:94:56:88:
77:65:8c:a0:70:8e:24:30:e9:0d:c5:8c:36:f2:0d:
15:8f:bb:ad:2a:b1:a0:05:6d:b3:ac:f0:88:88:8a:
13:dd:6f:cf:12:d6:5d:fb:33:6f:e4:75:59:b8:ca:
91:99:53:75:a8:33:4a:e1:ee:1b:18:d3:18:f7:15:
27:c1:b5:6e:5e:e4:f3:bb:10:bd:39:0e:1d:59:66:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:4F:40:D5:68:C7:CA:B5:13:70:D4:54:95:D4:00:4A:68:D3:8A
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:44:37:52:00:24:d6:90:18:8e:d4:77:90:eb:44:58:22:31:
bd:5c:b1:45:58:14:9b:a6:03:2d:2d:e6:0a:e4:6c:fc:d1:51:
1f:c5:e7:16:e4:7f:59:65:f9:69:70:1b:f1:8b:94:60:7b:82:
ed:a2:cf:09:ca:a0:95:34:64:df:5b:f8:e6:e8:f5:c3:a6:40:
75:04:74:58:7a:48:57:e6:63:85:8f:de:67:5f:d6:29:a7:52:
ca:96:73:e3:df:b7:31:2b:04:24:eb:60:db:92:a7:ff:4d:2f:
39:02:c2:03:5f:f9:ee:ed:8c:1e:ea:2f:f4:99:71:5b:f5:4b:
69:7f:5e:d6:7f:ab:df:70:64:2f:dc:1f:7a:59:9a:cb:dc:74:
28:73:11:04:32:f1:fd:6e:0d:67:46:02:18:e1:16:87:a2:d4:
48:31:ff:58:32:26:c9:0a:fa:c2:b6:48:ca:20:b6:c3:a9:b4:
57:d0:73:a5:4c:e8:f3:56:79:6b:6a:d8:40:44:83:b5:b7:07:
35:69:f0:a5:55:90:bd:a7:c5:e0:41:c5:20:16:8c:7d:8d:53:
e0:ee:b1:2a:64:d9:70:d3:0c:33:63:6d:06:c8:e1:8c:ed:27:
54:19:88:4d:92:70:a8:32:8e:b7:e0:da:e1:3f:5d:46:3f:cd:
78:d6:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:13 2025 by rpki-client