Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: oUH7zkgXZT133dfu3AmUTTsLrQ90sN+8G58eBQeBPGQ=
Subject key identifier: A8:E9:D9:71:87:56:E2:A3:DD:C5:67:82:5A:5C:5B:AB:EC:C6:7E:B0
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 0194BD854CB08F9274A14F9C2A1DC087C18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: VlRK87wJ7SZtofurRBlkyfLtp7ISjyRMukoulMoD+zE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4c:b0:8f:92:74:a1:4f:9c:2a:1d:c0:87:c1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=a8e9d9718756e2a3ddc567825a5c5babecc67eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:d4:eb:0b:32:68:ac:d0:d2:b4:0c:73:86:
80:2d:91:11:d7:d3:36:94:25:e3:45:24:99:38:1f:
f4:59:56:dc:0b:9b:d0:ce:18:0f:7d:85:eb:fb:68:
60:62:35:67:77:8c:de:3a:80:e1:e1:1b:8b:5e:62:
6e:dc:5c:29:a0:bc:25:1b:81:10:f0:b3:06:d9:8c:
a6:d4:4d:39:94:1c:ce:d1:dc:53:80:58:15:b7:ee:
5f:77:06:4e:c0:da:0b:79:77:73:eb:84:4e:bb:49:
65:56:4c:40:ad:bd:32:49:6e:cb:bf:b0:a8:80:b9:
86:f2:09:a7:7e:0d:c7:af:81:e1:46:27:c7:88:9c:
b0:05:ca:a9:fd:c1:76:c4:84:f9:06:a4:a0:a5:80:
8c:e9:ac:fb:dc:b4:10:c9:b6:5f:f0:9f:91:7b:21:
c3:c6:44:02:dd:7a:8d:18:73:bd:4a:e1:d9:c1:ad:
e1:1c:e9:17:57:cd:e2:f5:38:6f:40:fd:51:fa:66:
c3:5f:ad:81:03:55:94:1e:3f:2c:c4:53:37:aa:e9:
16:33:d9:9c:7c:ff:2c:dd:68:83:85:89:78:9b:4d:
a0:30:39:da:da:0d:d0:f3:16:e7:b0:ad:ca:c2:ab:
af:f1:86:37:2a:1a:3a:42:b9:e5:8c:1e:f2:f0:48:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:D9:71:87:56:E2:A3:DD:C5:67:82:5A:5C:5B:AB:EC:C6:7E:B0
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bf:80:89:d4:97:b7:bc:5d:53:00:80:7b:56:6c:95:dd:6c:
f0:23:1e:2c:4f:15:e5:c3:24:b3:22:93:1d:e4:0b:1c:c4:dc:
26:85:bf:79:1d:4f:55:1c:69:1a:23:30:73:9f:31:49:6c:5c:
c6:70:9f:ef:0b:86:e9:d1:cb:a8:bd:b1:2b:a8:9f:02:32:5b:
53:bd:84:43:97:5d:54:6c:fb:bb:a6:c0:a6:fe:30:48:a6:e7:
a7:3c:d3:4b:ad:1f:c8:0a:8a:f9:e1:03:59:73:d9:19:ca:48:
9f:e8:6a:84:36:80:c4:bc:bf:4e:23:69:f1:9a:e5:55:02:0c:
1d:62:5a:2e:0c:a9:61:a7:9f:35:a7:3b:61:77:c6:c1:ac:37:
38:1e:4a:b7:fe:85:b6:bb:f3:47:8f:58:48:71:99:95:9b:0b:
53:8b:a9:65:08:ee:97:f6:cd:33:53:64:1c:92:8b:9c:13:cf:
8b:7e:65:86:25:b1:a9:95:7b:c8:91:8d:3a:40:0b:c3:bf:18:
22:a0:a9:f9:86:0b:e3:3b:2b:a5:99:6f:1f:f1:2a:5b:f5:02:
b1:9a:ba:35:42:65:97:20:f0:69:31:a3:44:d7:15:9c:60:8c:
b4:de:f4:c7:6d:3c:f9:1f:cf:69:46:60:4b:b2:fc:c4:e0:8e:
29:c7:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:38 2025 by rpki-client