Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: 96gsjnlq3q4l9MEAGAw6v0uMHj4oFEfY2ykPEL7nDtE=
Subject key identifier: 4D:4C:14:AB:23:BC:9E:19:51:06:8B:2F:ED:00:60:70:A0:1D:83:3D
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 0194BCAA0276E27C42AAEC7A8686D3903C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: 9EfOaoTSCOaW9PE4ndTanSGvisLpxfj6t/n2LGyHQHU=)
2: meyQlZ2V2fFm7jP19tS1SnwZU8o.roa (hash: Rjzn7WIqlB0uqbC7++KFiY3Pm+Td1rmouk6fxkElj30=)
3: u8p2k1kowabt5V010HcHbUdny4A.roa (hash: +zIIZMzEVP0HgE88S7aeA3JokmowyYpTKNzs1+R3c2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:76:e2:7c:42:aa:ec:7a:86:86:d3:90:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=4d4c14ab23bc9e1951068b2fed006070a01d833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c1:36:18:e6:df:9f:5c:8c:6f:ab:41:4d:17:
93:a9:55:d1:13:d3:69:27:db:6c:b7:e6:7d:0d:57:
d5:ab:d8:ef:41:2a:14:92:81:30:74:be:a8:ce:ab:
f4:45:37:97:f9:ab:4d:63:c2:00:02:77:b3:05:dc:
0d:47:9a:87:5c:06:9d:14:f7:a1:c5:e6:56:46:11:
94:93:8d:82:6b:da:49:89:af:27:01:c1:2a:a6:74:
60:30:6c:6b:ca:c7:17:af:68:66:65:b6:13:26:df:
45:3d:d2:2d:57:a0:c1:e4:3b:99:35:f5:01:d6:1f:
af:cc:aa:24:92:4b:3e:d9:d8:02:4f:17:9e:66:47:
dc:66:86:69:d1:1b:43:9d:87:4c:ad:32:d0:de:de:
10:47:47:13:0e:61:0f:18:1f:95:11:2b:d3:76:47:
44:0d:42:85:71:73:09:dd:96:bf:79:10:12:95:75:
f2:9a:a6:fc:18:5b:e0:9b:44:5b:a5:2b:a2:63:e0:
e9:a2:4c:31:95:2e:f9:0b:9f:05:78:a6:d4:a0:a9:
7c:11:cb:eb:73:01:d0:b8:fe:fd:9b:cc:b0:20:ec:
c2:07:a4:c2:e5:a4:ba:46:ef:8e:58:7e:b4:68:3a:
64:c3:19:ba:fe:96:3a:5e:0b:af:8f:b8:d8:53:b6:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:14:AB:23:BC:9E:19:51:06:8B:2F:ED:00:60:70:A0:1D:83:3D
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:72:08:26:2d:0a:c0:31:f9:e3:53:18:2b:24:e7:2a:07:bb:
27:dd:79:0b:9c:c3:cc:1e:a4:49:d0:d4:ea:d9:f8:aa:f5:43:
67:92:7e:ea:9a:c3:b1:ea:cf:94:08:be:17:23:03:c4:50:cd:
0b:57:9a:2d:48:5d:ab:aa:02:7d:14:2c:7f:81:fc:16:a6:d7:
e1:ec:6b:29:89:2b:e8:c9:6c:38:ba:7a:63:2c:a0:fe:2d:34:
60:9f:ed:56:50:8a:71:fb:5c:d1:79:f8:87:15:f9:06:ab:cb:
92:63:ff:27:70:82:5f:bc:fd:5f:b7:92:f4:8c:7f:5f:82:58:
80:2e:22:7a:a3:3d:80:98:e8:f3:3d:ee:5a:2a:9c:31:e1:60:
7a:0e:eb:30:4f:b0:78:9e:bb:0f:c3:fb:0d:bc:9f:b8:b8:ee:
1b:71:96:e6:0c:45:2e:a0:96:f4:8c:91:03:ab:3d:bb:ff:a0:
73:09:ee:db:d9:d1:16:ae:df:73:c7:e9:ee:6f:ca:c2:c1:f1:
6d:b9:88:3e:57:71:99:fd:68:f1:49:01:bb:5c:13:98:98:67:
98:41:3b:11:3d:53:b1:3f:a6:df:2c:c9:ac:0c:dd:4a:b7:e9:
0d:89:32:4a:cc:71:ef:22:de:8d:32:b0:ea:9d:9d:85:1b:f1:
60:1b:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:03 2025 by rpki-client