Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
File: DRLgx3dBkaVcPRkx-_IABDNf0hw.mft (raw, json)
Hash identifier: aK4N6/QjWPKdG9C4s3CSP23tU4eQm0zN2BYJHq4jUmE=
Subject key identifier: 67:B6:01:8E:96:83:F7:62:F6:56:0D:0A:38:F5:B1:68:E1:C7:BF:4C
Authority key identifier: 0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
Certificate issuer: /CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Certificate serial: 0194BD85812955ADF1C6DCCE50990620AA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: DRLgx3dBkaVcPRkx-_IABDNf0hw.crl (hash: jYgyxmez9zJZszFGCiBIyyM6Ja/TDcXS+1ih+OKxmLE=)
2: RSYdG5gg-YCPUfslf96tr_CDk9g.roa (hash: M9FWyf6d3I10rIL5aBwIBRBiTbEoITfpKpVAl4zvaYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:81:29:55:ad:f1:c6:dc:ce:50:99:06:20:aa:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=67b6018e9683f762f6560d0a38f5b168e1c7bf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:66:d5:d4:3b:f3:30:b5:f4:56:73:d8:a5:
f5:54:5b:15:3d:8c:77:90:8f:ba:5e:2f:6c:c2:0b:
b5:de:ae:1b:78:59:9c:1c:63:a9:bc:d4:e3:81:e9:
80:75:6a:b0:bf:a9:c5:4b:2b:5d:54:26:ad:d9:75:
b3:23:78:b6:6f:25:21:30:f3:3e:5a:49:59:c6:44:
0b:c9:07:00:18:a4:36:df:89:4b:b2:ad:ef:64:bb:
16:e5:3a:b9:a3:a7:7e:ac:7a:b2:db:82:88:68:dd:
9b:1b:45:09:7e:15:26:c8:49:2f:c2:60:9a:83:54:
3a:b9:4d:7c:bf:f3:63:6f:3c:25:ad:4f:1e:54:0a:
d4:ef:9f:ab:5b:d8:2b:5f:78:6e:ee:9c:fb:7a:7c:
62:67:54:b5:2e:fc:19:56:8e:c5:e2:03:3a:a5:f9:
bc:be:2d:c2:c7:52:38:c7:54:f6:d4:2c:c0:2a:77:
77:95:9e:4c:d2:e5:f1:db:77:76:d3:b3:a4:82:41:
09:16:6d:09:5c:d0:50:03:d4:4e:b9:29:33:6b:bd:
af:a3:f2:05:8f:af:4a:3d:46:80:cf:b1:38:ea:ea:
94:62:b2:15:62:89:f6:86:84:bc:bd:ca:26:29:da:
f4:6a:2d:91:31:11:47:5a:df:2a:fb:7b:93:6b:48:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:01:8E:96:83:F7:62:F6:56:0D:0A:38:F5:B1:68:E1:C7:BF:4C
X509v3 Authority Key Identifier:
keyid:0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ca:c3:1f:fe:a0:f0:54:e1:e3:72:bb:95:3a:03:4a:26:35:
c0:e6:8c:ad:d5:a3:1f:a1:d5:99:8c:49:3f:90:9e:31:f9:0a:
ce:0e:b6:ba:c7:6a:63:16:b2:70:99:00:60:81:a2:17:17:50:
d4:a3:98:c1:5b:05:a7:78:67:3b:2d:f0:fb:32:d0:5c:2b:f8:
07:45:67:64:f5:85:72:04:eb:c5:95:22:80:c1:4a:25:c7:d1:
5e:db:80:7d:79:02:92:e5:25:c8:5b:89:88:8e:99:97:37:4d:
cf:fa:66:0c:3e:d1:b9:88:b4:8d:5c:26:af:95:3f:70:ea:f0:
57:55:ca:8e:37:d5:85:dc:f6:83:c0:26:9d:ca:a3:07:90:86:
8a:8c:42:14:c0:8a:72:08:8b:b5:19:5f:95:98:5f:60:b3:f9:
88:91:40:d3:46:93:1f:12:c8:82:2c:18:8c:f2:fd:80:54:52:
89:5c:ce:f3:8c:d2:16:73:3c:aa:57:45:e4:82:13:ca:1f:ba:
63:d8:95:23:d8:77:93:12:eb:38:6b:1d:af:b7:cc:3b:43:12:
39:f0:bd:b3:07:70:1b:23:35:c1:f4:0e:09:71:da:65:cf:54:
55:f3:a0:c0:39:6a:32:b1:a9:74:1e:3e:cc:e9:58:a9:00:8c:
49:e4:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:24:50 2025 by rpki-client