Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: N/o7yZzZ9OhshLwUSjgbvXlITszupp7bER5chPeAoew=
Subject key identifier: 4E:91:13:93:F2:5D:5F:72:94:90:69:C9:BA:30:F3:F5:76:0B:14:CA
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 0194BD17D3DA17FE4C0944D3DA86FA4611DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (hash: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=)
2: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: zG9ypLOI6r09Gv0rMscW1gLkenBu7Pm4Pu+XBxEqBWw=)
3: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (hash: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d3:da:17:fe:4c:09:44:d3:da:86:fa:46:11:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=4e911393f25d5f72949069c9ba30f3f5760b14ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:23:38:dd:e4:ce:28:7e:bb:14:fc:39:67:
25:24:02:39:df:2e:7c:2e:1d:f7:6a:2b:3f:51:f9:
fa:b8:68:c9:62:d7:5f:ef:d1:04:b2:0c:a0:b4:0c:
74:39:8f:68:2e:01:9d:0a:fe:62:fe:8a:24:2d:c9:
0e:e0:c2:ed:4e:61:32:6a:d9:5a:37:36:ef:f3:80:
dd:de:8b:b6:17:96:22:b5:5e:ac:f8:a3:3a:56:55:
b1:3e:02:94:81:8d:83:15:55:5f:6f:db:d2:19:fc:
2c:c2:2e:05:8e:23:15:d4:a5:32:82:92:9b:39:2f:
a8:52:48:19:3c:04:9f:a6:c8:9c:06:fa:32:a5:96:
79:85:de:8d:05:a5:94:b8:ce:32:e5:1b:cc:db:d1:
50:70:62:c1:a9:d2:c2:af:40:d8:2c:76:11:2c:ab:
fa:aa:1e:10:56:7b:e3:8e:1e:87:40:73:4d:3d:8f:
1d:3b:80:52:01:e0:84:2b:56:ac:7d:50:7c:d1:b4:
80:6c:15:25:83:fa:c3:a1:fa:fa:4f:ea:5c:f0:ce:
37:29:f3:90:53:09:34:46:41:80:b7:8c:f9:3c:81:
07:fa:e4:07:3b:7b:56:68:35:8a:8d:91:99:74:c2:
8e:c4:d0:df:4e:0e:b5:03:10:1f:32:40:37:de:af:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:13:93:F2:5D:5F:72:94:90:69:C9:BA:30:F3:F5:76:0B:14:CA
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:19:d9:f1:17:f0:d2:0d:8e:ff:6f:89:9d:28:59:c7:57:88:
10:ba:8c:9b:0b:7c:69:b2:31:35:58:77:0c:79:ab:46:c4:79:
03:03:e9:38:2c:d1:a4:f3:59:72:d4:46:ab:4d:e0:69:e5:13:
21:36:2d:67:b4:39:bc:9b:bd:ca:bf:3f:ba:a5:62:50:e3:bd:
4d:3a:9b:be:10:5c:9b:36:97:26:ef:0b:6c:52:93:ce:80:6c:
4d:0e:3b:10:4a:10:00:07:cd:e1:a9:c7:04:4f:7c:cd:36:ad:
36:ad:cf:95:84:3e:7c:a0:f5:1f:92:a4:2f:b4:bc:6f:45:a1:
38:34:14:ed:69:f8:1a:4d:2d:63:e8:ce:e0:e9:d3:56:78:54:
79:94:de:b8:ce:c8:61:61:0a:9e:77:47:30:87:32:4d:ee:a1:
4c:b9:d0:00:c8:b8:79:7a:36:fc:05:7f:8f:a6:0e:77:27:e4:
ad:81:13:4a:a7:98:99:30:e4:4a:70:39:36:c7:4a:27:a2:7f:
df:00:ec:2d:cc:45:31:7a:d5:0b:62:d5:2d:46:4d:ef:41:c5:
19:65:db:db:8d:37:de:61:0d:2f:13:78:1b:df:4c:51:b4:2c:
56:24:a8:90:da:f3:8b:c8:10:17:28:ef:76:bc:f9:d6:a8:6d:
8e:e4:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:58 2025 by rpki-client