Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
File: duK6XMFQs1PL00ufBF6gUJdAhE0.mft (raw, json)
Hash identifier: +MknWZd38+VF1cCyXcJ+cBol7RSlzXCyy7ChvpiL5ro=
Subject key identifier: 5C:92:32:A8:FE:67:F1:7C:C0:CD:C1:09:ED:58:70:EB:46:88:E5:C2
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 0194BBCE8A0C1507869AA8DD6DB8192AD568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: duK6XMFQs1PL00ufBF6gUJdAhE0.crl (hash: DnsLVd9GM6sK0gbepf9zMDDwmUQ7eMfmjStZOnw12nQ=)
2: iAKwu0FCFCsG-u4j0uUU3e7V0to.roa (hash: aFD2zsZtjltC/vwpNr5sAlXxHDjwIU9VRcONuFQwgo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8a:0c:15:07:86:9a:a8:dd:6d:b8:19:2a:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=5c9232a8fe67f17cc0cdc109ed5870eb4688e5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:01:b8:33:ee:a5:b0:94:93:b3:0f:1c:55:
6a:48:c6:78:08:51:70:ea:28:23:d8:51:30:25:d9:
1e:0b:be:a6:30:2e:95:0b:71:de:bf:7f:2a:48:cc:
82:7a:51:af:47:52:38:31:e8:af:1d:37:52:b1:ca:
7c:75:cd:6c:ce:3e:f5:fc:6d:b4:5c:7f:1b:a5:5e:
a4:a8:0b:00:74:3d:91:1a:21:13:b3:50:9e:61:f0:
e2:06:60:bb:27:40:25:94:9f:fe:96:33:17:b7:a9:
04:e8:53:f8:d7:b4:01:63:0a:fe:27:a8:f0:0c:96:
3d:b4:71:63:28:4e:f3:f9:35:1e:3a:67:40:55:a2:
b6:eb:6e:dd:04:b0:10:83:e8:ea:b6:c1:85:45:65:
d6:73:5c:52:62:51:a8:51:15:32:bb:4b:0c:18:b2:
25:b9:72:81:7e:16:da:28:ae:8e:7e:36:e7:08:ec:
92:3f:ca:10:35:5b:bd:b8:53:c9:71:ae:55:d5:64:
59:ec:41:4a:e0:32:01:3c:b5:2c:4f:6b:88:5c:bd:
30:36:6c:7d:f5:8d:95:55:fc:dd:e7:9d:02:c3:77:
f2:5a:c4:84:3a:3f:2e:7e:f5:d8:ae:88:3e:d6:a1:
02:42:98:9c:d1:a9:89:91:e4:31:e1:5c:30:e0:0e:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:92:32:A8:FE:67:F1:7C:C0:CD:C1:09:ED:58:70:EB:46:88:E5:C2
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c5:c4:74:58:b1:8a:f3:cc:d8:05:1e:c5:f2:02:f4:94:80:
37:52:24:16:a2:27:a6:88:32:8d:8e:11:40:66:90:8e:98:81:
27:f3:75:a3:50:68:6e:de:83:24:92:2f:bd:1d:79:c2:60:64:
95:ae:b7:c4:a2:d7:6c:06:58:ad:d5:cb:e9:9b:e8:4b:bb:4f:
2c:2c:7d:0f:1b:4f:7c:c8:ab:cc:b4:d2:fd:d0:c5:9a:2b:c3:
d1:31:f8:18:b7:bb:c3:8d:fd:2a:f4:af:97:72:ec:1b:4e:76:
ec:a9:70:a8:df:0c:ff:3d:b6:63:69:dd:5b:8c:4a:d7:93:c6:
3b:06:68:a7:bd:78:68:99:4b:8d:25:35:ab:4b:08:af:19:b7:
e4:1d:46:ef:6a:33:48:e7:a0:cc:6e:bd:a3:17:ba:56:89:fb:
51:76:a7:e2:f8:02:f4:c9:2c:1f:21:36:93:ea:75:73:29:97:
d9:54:97:4d:4e:8c:48:c0:e6:19:8e:78:96:3d:68:b6:02:39:
d3:3f:24:e2:c1:c5:d7:14:4d:5a:0b:a9:e6:eb:6d:bb:53:8e:
ca:a6:7b:d7:26:e2:96:66:17:75:e7:ac:97:f3:d3:1a:3c:42:
33:0e:30:dc:2e:f5:66:b8:37:83:6e:c8:e4:ee:8b:b3:bc:27:
00:bb:a3:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zooMFQeGmqjdbbgZKtVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZTJiYTVjYzE1MGIzNTNjYmQzNGI5ZjA0NWVhMDUwOTc0
MDg0NGQwHhcNMjUwMTMxMTAwMTAyWhcNMjUwMjAxMTAwMTAyWjAzMTEwLwYDVQQD
Eyg1YzkyMzJhOGZlNjdmMTdjYzBjZGMxMDllZDU4NzBlYjQ2ODhlNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CsBuDPupbCUk7MPHFVqSMZ4CFFw
6igj2FEwJdkeC76mMC6VC3Hev38qSMyCelGvR1I4MeivHTdSscp8dc1szj71/G20
XH8bpV6kqAsAdD2RGiETs1CeYfDiBmC7J0AllJ/+ljMXt6kE6FP417QBYwr+J6jw
DJY9tHFjKE7z+TUeOmdAVaK2627dBLAQg+jqtsGFRWXWc1xSYlGoURUyu0sMGLIl
uXKBfhbaKK6OfjbnCOySP8oQNVu9uFPJca5V1WRZ7EFK4DIBPLUsT2uIXL0wNmx9
9Y2VVfzd550Cw3fyWsSEOj8ufvXYrog+1qECQpic0amJkeQx4Vww4A4bywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFySMqj+Z/F8wM3BCe1YcOtGiOXCMB8GA1UdIwQY
MBaAFHbiulzBULNTy9NLnwReoFCXQIRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMWQyZWQtOGUyZi00ZmE5LTgzY2Et
NzA0MDVlMzUyOGFmLzEvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMWQyZWQtOGUyZi00ZmE5LTgzY2EtNzA0MDVlMzUyOGFm
LzEvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsXEdFix
ivPM2AUexfIC9JSAN1IkFqInpogyjY4RQGaQjpiBJ/N1o1Bobt6DJJIvvR15wmBk
la63xKLXbAZYrdXL6ZvoS7tPLCx9DxtPfMirzLTS/dDFmivD0TH4GLe7w439KvSv
l3LsG0527KlwqN8M/z22Y2ndW4xK15PGOwZop714aJlLjSU1q0sIrxm35B1G72oz
SOegzG69oxe6Von7UXan4vgC9MksHyE2k+p1cymX2VSXTU6MSMDmGY54lj1otgI5
0z8k4sHF1xRNWgup5uttu1OOyqZ71ybilmYXdeesl/PTGjxCMw4w3C71Zrg3g27I
5O6Ls7wnALujtA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:06 2025 by rpki-client