Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: LPRSArL4sOaKYfEp5IOAekwWrv6Ru0g3AMBcy/4LyK0=
Subject key identifier: 21:32:11:9A:1A:51:0D:7A:ED:05:1A:0E:A4:85:01:2D:0C:0E:5F:87
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 0194BCA99D120A6A9BA5973B47BF62D29B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: 8E289fbhEqnDbEvcMAgKRPsJS8M7qhpbp1g04Iq+ggI=)
2: Zq2Gqix4-qvuYOb17f6YN_l9GEA.roa (hash: Wf/420eSD8VWWCAKz9KngjlA14TpkC9t4fqu9jJME/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9d:12:0a:6a:9b:a5:97:3b:47:bf:62:d2:9b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=2132119a1a510d7aed051a0ea485012d0c0e5f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:4e:0f:9c:60:43:54:7e:62:ed:ac:6b:45:
d5:2b:bb:67:cd:4e:f1:1e:71:40:00:9a:44:70:48:
7f:6e:be:75:ba:c7:14:0f:5d:66:ad:ce:a0:50:d8:
1b:13:28:5e:10:fb:c1:f1:f2:c9:4b:ab:dc:36:2c:
97:b7:c2:3a:6c:42:85:16:dd:af:cc:dc:c1:b3:27:
ed:8d:43:f9:87:67:f1:42:b7:27:e2:88:03:6f:db:
af:e0:f0:71:e0:66:fc:7b:c0:ab:31:8e:5e:d6:2f:
0b:37:7b:9a:61:06:8d:9c:e5:7d:b0:b0:5d:56:e2:
5e:34:78:81:99:cf:b8:06:42:a3:bd:f3:df:4b:73:
37:52:5b:9e:d8:5f:c9:9f:5a:b0:3f:e9:16:7b:54:
9d:3a:ec:e8:54:0b:ca:63:fa:de:8a:1a:37:91:3d:
5e:3c:51:47:67:60:85:c0:ef:7f:ab:7f:d9:ec:ed:
9c:40:8b:45:d7:d3:ea:e2:de:0d:3b:34:f1:74:f7:
b7:93:b5:e7:79:7e:b7:c8:ab:69:10:73:e9:5b:34:
29:8c:87:89:8d:45:3b:ae:29:05:9f:b2:f4:c2:3c:
06:78:2d:aa:53:67:92:25:c9:45:ea:39:32:98:32:
35:f9:62:fb:ee:9b:cd:9e:76:91:8d:37:5c:96:54:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:11:9A:1A:51:0D:7A:ED:05:1A:0E:A4:85:01:2D:0C:0E:5F:87
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:e7:75:c8:4d:2f:b6:15:8c:01:70:0b:b4:92:95:52:f8:
e6:9c:08:ff:5b:de:e2:9c:36:48:d7:e7:4b:bf:31:dc:ce:dc:
e8:93:44:03:1d:c2:fb:2c:21:c2:0e:92:15:aa:e5:95:69:6d:
6f:76:27:2d:7d:97:53:3b:46:20:9d:ef:ce:45:01:ba:2c:e5:
7e:85:e9:73:67:f0:a0:97:9e:a9:33:73:9e:05:f6:4d:fe:b3:
73:b7:1a:6a:78:29:8d:0d:9a:ff:bf:50:6f:4f:b7:27:a4:f4:
53:9b:38:eb:53:6f:50:e9:d3:64:b7:b6:f1:9b:e8:94:38:94:
b1:6e:79:c4:d0:fb:e8:fa:a7:93:50:05:15:c3:b7:a2:6b:f3:
8f:b1:8b:0c:8a:3b:44:ab:95:70:70:d6:44:0e:ab:a7:33:1a:
9d:2e:b6:62:9a:48:f1:bd:b6:e3:58:d0:24:e9:33:bc:2c:b3:
73:20:a7:0e:59:55:76:36:2a:71:f4:09:56:86:69:27:83:87:
b0:23:b1:60:fa:52:9d:9c:be:08:0b:71:d5:60:e4:a5:3e:9a:
cd:cc:85:be:7d:9f:d7:0b:96:1a:43:ff:fe:8c:42:93:f6:da:
49:fa:ea:9c:9e:7f:7c:bd:30:b8:27:1c:8d:7e:e1:6d:e1:cb:
0f:f3:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:45 2025 by rpki-client