Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: aGKRVLPWoD69jTv+90FsFP0WxYF4yYtwgRDLS8PVY8w=
Subject key identifier: 04:FF:03:8B:F4:21:C3:23:E5:FE:F1:90:F4:C9:C7:45:5A:27:05:22
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 0194BD17D0A11FD0C47F751CF62C471F1EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: vMgZuEINr9IM32vBDZJzRDoR6ZFB3LeywS8aJVa3/OI=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d0:a1:1f:d0:c4:7f:75:1c:f6:2c:47:1f:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=04ff038bf421c323e5fef190f4c9c7455a270522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:f2:1d:7c:53:b5:b4:8e:49:ec:cc:d8:09:
dd:6d:49:76:e2:1e:64:8a:5b:d1:9d:9a:03:d7:df:
b8:64:e1:45:8c:4d:d0:ea:16:f1:83:90:65:92:c7:
a3:08:97:06:66:f3:4d:d0:d8:09:13:1c:25:72:c9:
12:25:b4:8f:f2:4a:31:61:a1:a1:92:71:fa:77:65:
2f:19:f4:eb:b5:8d:95:1e:21:da:45:37:76:cc:17:
8c:39:2b:6a:3c:ac:dc:c8:14:1b:68:68:7f:59:30:
5e:7f:82:af:d9:9c:7d:ed:01:1d:0a:27:37:fe:e5:
a8:c3:14:57:bf:8c:52:e8:8f:f8:42:28:2c:7e:e4:
0f:c3:86:dd:04:b7:d1:65:39:77:d7:d0:cb:92:75:
75:00:df:ce:93:61:6c:78:34:51:25:4a:41:13:ce:
11:92:f3:1d:18:80:90:bc:ce:6d:43:a9:e7:13:aa:
a5:d0:4a:57:42:28:e8:7c:82:9b:9b:66:30:7f:b7:
66:53:38:80:e6:f4:5f:e7:ae:53:e1:d6:29:a9:0e:
21:3c:dd:12:b2:03:b9:9a:22:b5:ad:a6:69:5e:99:
e1:f6:7c:55:e4:e1:49:d3:98:95:d2:40:82:5a:da:
cf:45:6f:02:5a:d5:d2:ab:61:69:1a:fa:3e:6b:4e:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FF:03:8B:F4:21:C3:23:E5:FE:F1:90:F4:C9:C7:45:5A:27:05:22
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:86:7a:83:ac:60:25:5f:34:2d:db:77:f6:68:73:5f:bf:8f:
db:cc:8a:01:9d:85:c8:5d:61:ff:bf:de:16:0d:9b:00:44:3f:
37:a8:09:0b:b2:0e:25:a4:5c:ea:2a:2c:9d:07:7d:f9:d3:2c:
99:87:30:2d:66:2f:74:25:fc:c1:01:19:66:13:6c:51:6c:9c:
6f:a3:44:cd:c0:f8:f5:b6:a0:5d:09:37:97:4e:53:31:2a:ea:
ec:6e:8b:a0:d0:54:0b:d1:00:b8:dd:62:4e:1e:92:8c:03:7b:
c2:9c:3c:8c:6d:3e:d3:1f:f7:c8:0c:4d:bb:71:20:cd:d9:83:
0f:39:83:34:21:0d:d3:7b:61:9a:2f:8c:bb:7b:98:5f:60:90:
9c:eb:fe:1c:a5:49:46:be:45:15:7c:b8:4c:f9:3d:d1:45:df:
e7:87:02:be:1e:97:f2:9b:0f:d5:b1:c2:a0:e3:fc:0b:ac:63:
3b:82:a3:8c:8a:31:e9:5c:58:dc:f0:52:c3:d8:29:98:e9:94:
ac:86:fe:44:3b:b8:ef:de:9e:7a:ee:03:37:d5:a3:4d:4c:3e:
89:b0:02:4e:7e:20:60:00:7d:e5:19:77:ca:c0:6d:cd:e9:62:
d0:73:4a:c4:1c:3d:95:4b:59:65:71:5f:19:8b:36:79:6e:fb:
26:10:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:13 2025 by rpki-client