Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: ZkDvLaGy+wxfHSKi77VtslTdyQ/YgPjvaA8BSSliFLA=
Subject key identifier: A4:44:A3:A1:06:33:85:1A:44:22:C7:1C:41:12:26:12:50:6A:B0:5C
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 0194BC05314226B2F3484703BBB6DCDFCB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 0E39
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: j0DWS0QS7QxDWCMgq60OXU40y2tcWVSSrquW2U6oVy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:31:42:26:b2:f3:48:47:03:bb:b6:dc:df:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=a444a3a10633851a4422c71c41122612506ab05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:7e:01:51:fa:ad:26:09:e7:cf:7b:23:70:
52:a9:54:b1:07:06:a9:c4:70:0b:88:5e:19:5d:d4:
de:df:a9:df:08:29:3c:6e:ab:e0:57:70:45:6f:b2:
d3:71:8c:39:59:20:f5:30:b9:63:e0:1d:b6:64:64:
f3:0a:45:45:b6:52:cc:fe:e4:48:c9:de:be:cc:3d:
f9:7c:e2:c5:95:17:79:a0:f2:39:bf:d9:27:9b:26:
e1:da:c9:ae:f2:5b:9a:86:46:4c:2d:c4:1a:72:5a:
7d:90:24:37:9f:f8:c2:dc:0b:c4:f5:b5:34:54:15:
e8:cf:d6:1d:f3:b9:9d:31:31:68:99:49:37:d8:a6:
be:0a:02:c0:e5:5b:e0:fd:6a:c7:87:8d:7e:7e:f7:
8c:a8:c4:77:59:1e:35:c8:14:a5:44:4e:99:3b:84:
c8:00:84:be:47:4b:0d:49:ef:dd:c4:fe:99:28:4d:
86:19:91:c6:67:52:2e:0a:fe:3c:23:08:c7:26:b3:
0d:eb:91:16:2e:2b:7c:b0:2b:c1:3a:0a:de:08:4a:
3a:18:5f:48:60:a2:f2:28:cb:ac:62:17:16:d3:ec:
89:2d:27:fb:03:e7:dd:1c:3b:ca:6e:5d:8b:4d:bb:
26:56:4f:65:78:e8:f1:ad:77:83:d1:df:c4:ba:ab:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:A3:A1:06:33:85:1A:44:22:C7:1C:41:12:26:12:50:6A:B0:5C
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:89:2e:b1:54:56:df:33:5b:67:c1:53:f6:28:38:12:55:
6a:95:92:81:5c:8d:fa:ec:fa:62:d8:46:eb:bf:64:9d:34:e7:
c0:8d:cd:c2:17:da:ae:70:fb:1b:3f:1e:4f:46:24:6b:4f:fc:
0f:a0:89:8c:ad:12:24:c4:b8:8b:9e:66:52:a3:b3:08:3a:71:
ed:1d:e2:32:82:35:03:58:59:4f:bf:93:73:14:8d:d9:26:e2:
79:58:63:be:37:f9:0a:f6:f3:72:ec:12:7d:28:4d:4b:cd:03:
c8:49:a0:c3:89:84:41:0e:ee:38:a1:6e:63:23:db:02:ac:5d:
df:8f:a1:c2:b0:c0:4b:25:eb:4e:39:d5:be:65:2f:2b:d8:18:
4e:2f:a2:d1:cd:b8:b0:0c:db:74:11:39:08:c4:58:d6:f9:97:
8b:24:1d:ac:7c:3c:51:d7:96:1d:01:99:cc:9a:90:a0:d7:aa:
25:33:af:76:ef:dc:78:4e:bc:a5:c7:0b:28:ad:1a:c3:33:d3:
85:0a:79:cd:0c:04:cf:88:cf:c6:cb:16:71:d5:77:80:82:98:
62:3a:5d:8e:93:4c:05:ef:2c:51:04:64:84:80:8a:14:7b:b2:
39:28:61:ee:2d:99:7d:d3:f2:82:59:55:77:84:bd:8b:82:0f:
d6:8e:52:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BTFCJrLzSEcDu7bc38s9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5
YTUyNzcwHhcNMjUwMTMxMTEwMDQ0WhcNMjUwMjAxMTEwMDQ0WjAzMTEwLwYDVQQD
EyhhNDQ0YTNhMTA2MzM4NTFhNDQyMmM3MWM0MTEyMjYxMjUwNmFiMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouZ+AVH6rSYJ5897I3BSqVSxBwap
xHALiF4ZXdTe36nfCCk8bqvgV3BFb7LTcYw5WSD1MLlj4B22ZGTzCkVFtlLM/uRI
yd6+zD35fOLFlRd5oPI5v9knmybh2smu8luahkZMLcQaclp9kCQ3n/jC3AvE9bU0
VBXoz9Yd87mdMTFomUk32Ka+CgLA5Vvg/WrHh41+fveMqMR3WR41yBSlRE6ZO4TI
AIS+R0sNSe/dxP6ZKE2GGZHGZ1IuCv48IwjHJrMN65EWLit8sCvBOgreCEo6GF9I
YKLyKMusYhcW0+yJLSf7A+fdHDvKbl2LTbsmVk9leOjxrXeD0d/EuquYMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKREo6EGM4UaRCLHHEESJhJQarBcMB8GA1UdIwQY
MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et
MThlOGI5ODE0Njk1LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1
LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW6JLrFU
Vt8zW2fBU/YoOBJVapWSgVyN+uz6YthG679knTTnwI3NwhfarnD7Gz8eT0Yka0/8
D6CJjK0SJMS4i55mUqOzCDpx7R3iMoI1A1hZT7+TcxSN2SbieVhjvjf5CvbzcuwS
fShNS80DyEmgw4mEQQ7uOKFuYyPbAqxd34+hwrDASyXrTjnVvmUvK9gYTi+i0c24
sAzbdBE5CMRY1vmXiyQdrHw8UdeWHQGZzJqQoNeqJTOvdu/ceE68pccLKK0awzPT
hQp5zQwEz4jPxssWcdV3gIKYYjpdjpNMBe8sUQRkhICKFHuyOShh7i2ZfdPygllV
d4S9i4IP1o5ScA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:41 2025 by rpki-client