Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: 4TXDYioX0ZElRxzHoMmBuA0RsCLOqV0Hu4QtCVmJYW4=
Subject key identifier: 4F:44:CB:8E:A5:A4:0B:5F:56:5D:F6:94:2E:D6:7C:D7:8C:61:4F:B9
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 0194BC04C75E5EFA97EE3D8EE1FD35FFDA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: eAwZykRd9uBcfgax2jIBIX9/eIiGW4ik5EZqff6vEW0=)
2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:5e:5e:fa:97:ee:3d:8e:e1:fd:35:ff:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=4f44cb8ea5a40b5f565df6942ed67cd78c614fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:28:e9:7f:21:38:f7:75:ea:15:13:b4:bc:
f2:d3:cd:5a:f8:69:6f:82:0e:2d:18:e6:e7:ae:9c:
e4:1d:2f:c4:76:b7:02:6f:1b:e2:2e:00:e1:af:17:
be:b0:a2:d3:0d:da:86:20:53:99:52:48:e3:b8:88:
e7:15:7c:25:57:04:b0:5f:2c:db:0e:c0:3d:43:06:
70:c9:91:22:f0:08:ae:e0:63:cd:2d:e4:5a:cd:d9:
c1:da:fa:b1:93:5a:03:40:cc:1b:96:22:22:e0:2d:
95:3d:75:cc:b4:92:79:96:ea:86:2a:82:9c:63:57:
f1:91:0b:9e:01:7d:9c:d9:1a:b2:86:c5:8c:3f:d4:
bb:a0:4b:8d:70:1a:bf:da:90:7b:ab:53:74:7c:8e:
8e:9f:48:74:af:5c:b8:97:c7:fc:ce:9f:d1:22:84:
10:92:47:23:32:37:07:ef:7f:f2:b4:d1:e8:d8:9b:
ab:41:5a:e5:4c:8c:c1:fb:70:85:84:c2:a2:fe:21:
e8:0d:56:d0:2e:f3:85:c4:de:5b:f5:5d:11:a5:4c:
ce:9c:ba:3e:f8:3d:10:34:b4:af:7b:81:74:fd:e6:
2f:d3:80:f5:f9:12:6e:ba:65:c4:2b:07:40:e8:0e:
3f:e2:70:fe:e2:db:fc:1d:90:e8:4e:d7:85:b7:97:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:CB:8E:A5:A4:0B:5F:56:5D:F6:94:2E:D6:7C:D7:8C:61:4F:B9
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ba:fc:43:7a:58:34:a0:c9:f6:4a:09:e1:40:a2:b1:ea:0c:
a9:a7:77:49:af:c9:86:9e:23:9a:2d:5c:0f:f7:bb:f4:69:f3:
ed:37:6e:0c:cc:fa:98:ae:22:7f:ce:60:be:9b:53:9f:23:a0:
c4:ad:5d:91:84:8b:20:d6:28:a9:ae:db:ea:a1:4f:6d:51:84:
54:7c:54:ac:74:e4:6d:09:8a:49:83:98:87:c3:e9:8d:c2:81:
fb:61:a3:c0:95:44:cb:8a:e0:4c:b4:66:79:16:50:12:88:b4:
21:2b:8c:00:66:9f:d9:e6:d6:85:8b:f3:74:31:da:96:e6:78:
70:3c:a1:df:6a:f8:7b:d2:02:12:bc:e6:13:74:79:0e:a7:e1:
a2:45:94:1a:be:9f:22:7d:9c:05:c6:cf:1f:0f:53:a5:0c:2c:
03:8e:0c:d8:2b:c3:15:c1:bb:b5:1b:b5:ec:ac:b5:1f:f2:f1:
ea:74:ed:29:dc:96:0b:20:6c:07:fc:3d:9f:0a:ce:bd:1f:6b:
55:59:61:26:dc:07:17:c5:32:a2:33:a6:1d:f5:26:ca:f8:18:
ab:5b:2e:76:bb:3d:4f:7a:42:48:27:f5:af:78:f4:40:79:a3:
1c:74:42:8f:50:25:a6:50:2b:f4:cf:2d:7c:e9:53:32:5f:06:
1d:be:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:40 2025 by rpki-client