Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: CYnFO+4RZ5nSccb1J3uTqzv4iWCxnTRd3gN3XnADm4E=
Subject key identifier: 6B:CE:C3:41:21:4B:61:6C:1D:4A:99:B9:D2:19:CD:C2:25:C2:6B:43
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 0194BC3BFDACDFA7FDB6C2B8B11A6C30A98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: GF22tpGu4jfFR3FDZVAzxVX2XAEtWZ+GaAw5eHnD5bk=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fd:ac:df:a7:fd:b6:c2:b8:b1:1a:6c:30:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=6bcec341214b616c1d4a99b9d219cdc225c26b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:5f:c5:1f:29:ed:c0:28:fa:b3:18:e7:46:
c9:56:80:17:be:53:23:cb:4d:1a:6c:a7:c3:7a:a2:
e7:7a:66:bd:21:6b:16:c2:13:c6:2c:55:ff:00:48:
e1:06:ab:20:92:f3:d9:69:a7:bb:77:c7:f5:97:00:
75:a3:64:aa:6d:d7:da:c3:8d:89:28:4a:5b:ad:41:
ec:4e:8a:bf:c9:66:81:01:e2:e1:ac:59:ea:a8:12:
f9:5a:79:b0:e6:07:ee:90:a2:5e:40:11:16:88:27:
3c:70:b7:04:52:9a:c5:3a:17:b7:b8:2b:ed:a3:9e:
8e:38:1e:da:80:13:3a:f0:ef:32:e2:c1:0f:38:50:
52:ff:6d:17:ed:74:4f:c8:38:d3:02:2b:56:64:45:
3e:47:c6:de:d3:72:2c:63:2a:fe:6f:14:10:ef:50:
0f:29:92:88:3d:8c:e5:5e:b5:c4:11:19:c9:1b:1a:
cd:b6:29:3d:f0:0a:95:63:89:07:b5:27:d4:68:93:
27:22:c9:32:02:9a:0d:4d:70:c6:7d:fd:d9:f8:0a:
7a:13:cd:8e:96:23:db:5c:78:0f:81:72:65:e2:1a:
33:9e:f6:e1:ec:b6:9b:15:20:c0:6f:07:38:5f:7b:
6a:a2:a1:b4:ce:9f:b9:a8:0c:1d:bc:a7:e9:56:5c:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:C3:41:21:4B:61:6C:1D:4A:99:B9:D2:19:CD:C2:25:C2:6B:43
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:1e:94:95:59:d2:d5:0e:91:c2:a3:6c:a1:e7:f0:74:6c:
77:1c:76:82:8c:1c:b8:a5:64:00:6c:8c:18:03:2e:86:cd:c8:
94:0c:71:05:14:27:50:30:96:94:87:ae:74:05:0d:5a:a8:9e:
32:bd:e0:c6:f3:bd:50:ea:40:9d:4b:00:f6:ef:1e:3c:d9:29:
49:12:db:ba:1e:85:12:5c:b9:aa:c4:ef:97:34:1e:a1:49:87:
90:90:65:49:4d:0b:77:39:7a:f1:9f:79:bf:25:ff:a8:b5:14:
c4:7a:db:81:dc:db:4b:66:65:8b:82:ac:b4:bd:90:7a:85:c0:
5a:6d:84:1c:f7:e8:be:d1:1c:1f:95:f8:2d:ae:cd:b0:0d:b2:
1d:01:cc:57:5f:c9:1a:64:ca:67:77:fb:90:a3:70:b7:2f:de:
ce:3f:0b:a2:74:13:90:aa:4e:ec:65:2c:69:76:03:c6:79:2e:
b2:9b:27:d2:b0:a0:48:33:86:e4:83:e8:19:24:7a:78:5a:f3:
32:ee:46:7f:b8:12:26:f3:15:f5:15:51:a5:f3:5d:62:41:59:
61:15:1a:96:90:c9:76:6c:91:7b:4b:81:eb:45:4a:50:19:27:
0d:29:52:26:5b:49:24:a3:92:ee:ab:b4:f7:d0:96:df:42:96:
c5:c5:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:04 2025 by rpki-client