Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: eZ6yZU1IHtAoG0n3DHc9kPBaXgtHuEh11bEyfGBT8LQ=
Subject key identifier: 4E:E2:45:19:7D:04:9D:82:76:8C:EF:85:9C:65:03:C3:4E:F8:EB:0A
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 0194BC730DFF6B258E610877F657365D351B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0820
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: u87UrFf/Ekp7gWwfXuweXzRL2V8GIeyNGxXQzVT/Kf0=)
2: IoDHlDbNXO3jlcqfipIcULBON5A.roa (hash: KOgCTDaSahbElR1Ol4oBVrEjOtYhS4W0VzXtKth8BeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:ff:6b:25:8e:61:08:77:f6:57:36:5d:35:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=4ee245197d049d82768cef859c6503c34ef8eb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:22:bf:24:6b:fb:8b:3c:ea:4b:7f:2e:ce:
c4:25:19:7a:ee:b3:64:91:0c:5c:c2:a6:51:67:45:
2b:6d:12:2b:8a:19:df:03:a8:99:93:20:b6:62:5c:
92:1f:3d:44:57:69:6b:33:ca:a2:7b:89:b0:ab:df:
98:a8:c4:80:16:ff:32:c3:65:9b:5f:12:2c:f2:6e:
88:e8:1d:dd:42:b7:8a:03:c6:89:e9:0d:24:28:18:
59:5a:d2:b6:95:2e:d2:aa:c0:41:3a:5b:f4:18:16:
67:3a:82:b6:b0:60:b4:2e:a0:73:bd:a5:93:6a:f9:
cb:92:69:92:c8:72:d8:27:ec:b6:dd:c5:a8:dd:28:
5f:a3:44:06:6e:9a:55:13:69:09:39:c9:c7:24:a4:
92:24:0e:c1:66:a0:9d:40:f6:fd:04:37:86:00:c8:
22:eb:38:c6:1f:65:a3:66:b1:ce:50:02:d4:45:a9:
87:1b:21:d9:36:94:6d:9a:99:5e:b7:24:84:3a:a6:
f9:d0:66:b0:2f:d9:27:a8:e9:34:bc:97:3e:75:e1:
8f:18:0f:39:fc:f9:87:21:20:f1:60:1c:04:0d:e8:
7f:18:f1:08:0b:1c:4d:b6:fc:62:49:8b:ec:8f:02:
8b:3e:0b:f9:ec:23:61:16:83:58:7c:06:d5:a3:8e:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E2:45:19:7D:04:9D:82:76:8C:EF:85:9C:65:03:C3:4E:F8:EB:0A
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fb:f2:14:85:6f:77:9f:bd:b6:63:7f:5f:10:ec:56:fe:b5:
d3:f3:42:74:ef:0f:62:98:8e:89:39:ba:5e:f9:f8:aa:a7:df:
c7:33:6b:4a:06:97:8f:cc:0e:1e:5e:5e:00:be:e6:f7:9a:e9:
b8:98:62:fd:18:46:fc:b3:56:32:7c:56:ea:7f:ce:4d:00:b8:
3c:08:db:af:e3:d6:6c:c5:14:a1:ac:25:aa:1d:7e:81:6b:82:
d2:61:90:f5:32:99:19:9d:3f:33:52:da:0d:28:d7:6e:3f:62:
d9:8e:41:d1:a7:cb:fe:58:7b:82:0c:eb:4a:d8:c7:5a:11:e2:
5b:2d:15:09:8c:92:97:67:94:d8:bf:55:1f:c0:97:d7:49:b8:
dc:8c:ca:3b:54:30:16:6d:53:61:b7:da:83:22:f1:9b:0c:38:
60:ba:b5:58:12:4e:86:6d:ab:28:10:61:e8:7a:20:2d:94:95:
b1:0a:0b:0a:8d:99:ec:37:c6:9d:43:5b:37:a4:34:52:b1:55:
76:a6:c9:30:b5:3f:23:4e:74:ae:23:7e:6a:1f:df:28:a6:53:
06:95:e4:11:ea:cf:35:ef:0a:53:d6:df:67:57:81:46:c6:38:
00:57:fa:4c:0d:96:82:d4:ad:f0:ae:30:10:88:da:90:d8:a7:
04:5c:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:26 2025 by rpki-client