Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File: DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier: F99CwBPGdCwjym8gUI7cb1TYSFW0l0a85bBvIh+FbPo=
Subject key identifier: A5:29:95:8C:30:2C:C7:7A:A4:3E:DA:CE:95:F2:61:01:8D:56:82:90
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial: 0194BCAA22DB05EBDB14F6347111169A3813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 1XNJWBeFIM2IRAvxd79b-HcAo9o.roa (hash: FW3/MZh4Uk7LDpQNsxMFINYM6j9D7wIMnyrZzis42ZE=)
2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: /TUreOoDES3keLMPHRiikzgfoYbNbezq1y3dE2CRuX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:db:05:eb:db:14:f6:34:71:11:16:9a:38:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=a529958c302cc77aa43edace95f261018d568290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:2f:c6:99:59:c8:06:16:f2:49:97:24:e3:
91:1a:d9:06:b3:e8:34:fd:db:b9:36:bc:1a:c9:87:
47:ed:3d:e1:14:fe:88:3b:3a:4b:85:f3:0d:35:65:
c8:5e:84:13:5b:be:e1:24:0f:cc:da:57:e2:04:15:
95:2b:fa:6e:1a:30:23:4c:97:60:8a:4c:aa:df:33:
00:c2:e8:ee:5a:70:4f:42:15:0c:55:46:6e:9c:95:
ed:77:14:08:f4:96:65:d6:b7:be:78:6f:17:3b:b3:
3a:36:85:6c:fc:b8:83:b5:d0:3b:45:de:68:43:3c:
e4:cd:51:65:94:2e:28:26:ca:68:48:fc:f0:24:23:
cc:90:bc:26:d4:9a:01:b4:2d:16:64:b6:fb:8f:7c:
a6:a6:79:ae:55:de:aa:f6:3c:23:12:88:4d:1c:5c:
bf:d9:9a:ad:e9:89:4a:5a:23:bb:82:26:b0:a1:da:
37:e5:7b:92:0b:fe:88:8e:65:7f:7c:ba:1a:16:e1:
e6:27:88:93:76:65:45:79:a9:dc:9c:66:4c:78:93:
d1:3a:55:f8:7f:16:99:8e:ad:35:a4:53:79:27:91:
68:11:6c:e8:d2:60:c2:2d:c5:b3:30:ab:75:1e:6a:
ff:0f:69:e0:69:d9:1a:fe:89:10:a9:9c:46:98:85:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:95:8C:30:2C:C7:7A:A4:3E:DA:CE:95:F2:61:01:8D:56:82:90
X509v3 Authority Key Identifier:
keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:35:f4:a5:53:db:37:73:c8:30:ad:14:70:88:60:be:de:76:
44:9d:5c:14:21:03:a2:d2:de:02:d7:02:ec:8b:1b:5b:df:58:
10:56:e2:5e:2c:c4:60:7d:3a:d1:ca:59:1e:86:91:e7:df:e5:
7e:45:1d:55:82:43:42:34:fe:64:ed:6a:88:4f:4b:a8:ff:67:
8c:dc:b5:f3:54:a3:3f:e4:e1:30:b3:f5:16:62:e7:b0:2f:83:
63:95:d2:4a:7e:50:86:6a:6c:c4:ae:98:c2:f9:40:ad:f1:bc:
52:09:eb:66:49:98:9a:68:fa:5d:88:ce:e3:a6:b1:2c:98:d6:
f6:09:ae:84:bc:55:a2:00:03:7d:59:c6:b8:8f:0a:3e:3a:30:
56:0b:94:9e:37:44:96:e5:7f:2d:a8:7a:98:84:80:2c:2c:25:
f4:2e:80:ab:a8:25:88:18:c9:2c:5f:d5:e7:01:83:a1:91:63:
b0:57:ea:91:00:2f:38:34:cf:26:bd:f1:28:35:f0:ad:3e:45:
65:a4:c6:4e:f6:e2:9e:d7:cb:9f:35:d5:50:24:9d:c6:bb:61:
03:9f:58:cc:26:2d:ff:88:d2:1e:b5:2f:04:27:03:a7:35:00:
de:ea:57:64:63:b7:0f:1e:c6:43:ba:89:99:ae:f6:53:14:fa:
ad:d6:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:41:13 2025 by rpki-client