Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: ROJ9P4JzO67ZMm/TrjcoZtS9TlG27Mlj1z3FxMK7bDE=
Subject key identifier: EC:A0:53:11:D0:6C:4B:E4:F0:FE:7E:B8:C0:82:15:48:1D:08:9C:B1
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 0194BBCEA84B6B3DFA5FAE1F2625AFE31372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 09FE
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: BXcp3glPV7nKFyFjU79ROMm5RVhk+aVUXhpajMYhqBs=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a8:4b:6b:3d:fa:5f:ae:1f:26:25:af:e3:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=eca05311d06c4be4f0fe7eb8c08215481d089cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:b0:ee:f9:41:40:35:d1:31:08:1c:92:7a:
ca:26:7b:71:f8:30:88:0a:db:5f:cb:92:0c:45:58:
48:c0:46:b9:ed:f3:3e:f3:40:43:ca:eb:02:1e:ea:
e9:0f:15:f0:63:21:91:a0:b4:4b:1c:76:ca:51:57:
30:30:36:f4:77:07:e8:c0:b2:fc:c4:a0:c9:47:86:
ff:2f:b7:a7:ba:91:9d:0b:90:de:00:fa:c5:bb:f7:
be:e5:f6:e4:de:13:0c:03:fd:db:1b:73:63:3e:bb:
7a:88:b6:cb:22:57:ed:60:d2:3f:30:84:44:7d:70:
e6:4e:ff:4e:ed:1f:e6:f9:f3:4c:de:91:57:cd:ec:
8a:18:f8:07:f4:6f:62:50:d3:2a:c7:83:a9:93:ce:
99:c1:f0:ae:4b:d8:71:78:18:17:2e:38:d3:70:e5:
72:19:3a:b7:18:80:5c:7f:75:25:ca:b7:86:a6:95:
7d:ca:74:2e:a3:6b:ac:71:34:41:af:60:40:90:59:
1f:89:08:e6:05:8b:fe:ac:d4:04:f7:76:1f:13:a3:
63:cf:7b:90:56:0a:6a:68:eb:5a:d6:88:41:52:8f:
b9:26:9f:06:ff:fe:f7:ee:fd:00:bc:0d:e4:9e:a4:
8b:f3:f6:f3:6a:61:9d:43:a5:6a:44:6a:8a:75:9b:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A0:53:11:D0:6C:4B:E4:F0:FE:7E:B8:C0:82:15:48:1D:08:9C:B1
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f9:89:07:6d:58:ce:8f:fd:b1:b7:0f:84:06:8d:6b:f2:b0:
ba:ea:82:ea:84:21:50:d0:da:4a:ba:fd:41:ef:d9:3f:e3:e0:
4f:84:77:04:2c:89:60:86:f2:48:a3:39:e0:f4:21:85:84:a9:
70:4f:38:b0:0a:fa:97:e9:80:a2:ef:1a:fa:74:65:50:bf:8a:
6d:f2:fc:50:aa:0b:b2:1e:1a:fc:88:e4:e2:29:1f:97:75:42:
00:6f:70:f8:a7:2f:cb:5b:32:ee:a0:3d:15:84:b5:c9:26:f1:
a0:a4:46:01:4c:c2:6a:45:4b:b8:5d:2b:78:de:1f:2a:25:02:
0d:14:53:ba:b0:c0:83:d4:12:09:a8:b0:f6:58:ba:b7:aa:4e:
5f:3f:2b:20:18:3f:8f:81:b6:3f:2b:c8:fb:11:37:97:67:03:
f9:48:be:39:8a:79:cb:0f:1c:d0:b7:a2:9c:16:85:a5:17:15:
98:98:17:c3:b8:81:0b:b6:74:29:f4:a6:c8:1c:4f:f2:60:30:
a8:27:1c:06:b5:b0:5b:08:33:1a:c1:f1:85:ce:1f:fb:ce:99:
25:d9:a2:78:ad:28:a0:76:07:6d:4b:80:29:24:e4:96:48:16:
a2:b9:77:c8:30:0c:d9:5c:bf:34:4b:85:77:0f:2e:a3:eb:86:
cd:fd:68:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqhLaz36X64fJiWv4xNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh
MDY1MmMwHhcNMjUwMTMxMTAwMTEwWhcNMjUwMjAxMTAwMTEwWjAzMTEwLwYDVQQD
EyhlY2EwNTMxMWQwNmM0YmU0ZjBmZTdlYjhjMDgyMTU0ODFkMDg5Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb+w7vlBQDXRMQgcknrKJntx+DCI
Cttfy5IMRVhIwEa57fM+80BDyusCHurpDxXwYyGRoLRLHHbKUVcwMDb0dwfowLL8
xKDJR4b/L7enupGdC5DeAPrFu/e+5fbk3hMMA/3bG3NjPrt6iLbLIlftYNI/MIRE
fXDmTv9O7R/m+fNM3pFXzeyKGPgH9G9iUNMqx4Opk86ZwfCuS9hxeBgXLjjTcOVy
GTq3GIBcf3UlyreGppV9ynQuo2uscTRBr2BAkFkfiQjmBYv+rNQE93YfE6Njz3uQ
VgpqaOta1ohBUo+5Jp8G//737v0AvA3knqSL8/bzamGdQ6VqRGqKdZtfUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOygUxHQbEvk8P5+uMCCFUgdCJyxMB8GA1UdIwQY
MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt
YzQ0ZGRmZmE2OWFiLzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi
LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPmJB21Y
zo/9sbcPhAaNa/KwuuqC6oQhUNDaSrr9Qe/ZP+PgT4R3BCyJYIbySKM54PQhhYSp
cE84sAr6l+mAou8a+nRlUL+KbfL8UKoLsh4a/Ijk4ikfl3VCAG9w+Kcvy1sy7qA9
FYS1ySbxoKRGAUzCakVLuF0reN4fKiUCDRRTurDAg9QSCaiw9li6t6pOXz8rIBg/
j4G2PyvI+xE3l2cD+Ui+OYp5yw8c0LeinBaFpRcVmJgXw7iBC7Z0KfSmyBxP8mAw
qCccBrWwWwgzGsHxhc4f+86ZJdmieK0ooHYHbUuAKSTklkgWorl3yDAM2Vy/NEuF
dw8uo+uGzf1okA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:38 2025 by rpki-client