Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
File: DjGYqYJ97q-rHSe1U3lPRLkabAY.mft (raw, json)
Hash identifier: w5uCXtU2MoE2F03mLIac4OD74QWtgYMmmVddqXbdcfA=
Subject key identifier: 98:4C:C9:86:98:AB:0A:F4:97:C3:67:17:24:EC:8B:DF:66:4D:A4:49
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial: 0194BC3C26F6F0D1B24CD77034A598D6787E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: DjGYqYJ97q-rHSe1U3lPRLkabAY.crl (hash: RofL/EqEZ5BaO+chH3jV6LBll/dLlrSSU42dmqU6l5Q=)
2: Q2G86FF3yJmX8igU3QYVD4ZCivo.roa (hash: 6/LUNvPV45MHYpMpmogqr8zL/TAfgvM+oAX3YS1oNRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:f6:f0:d1:b2:4c:d7:70:34:a5:98:d6:78:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=984cc98698ab0af497c3671724ec8bdf664da449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:fe:25:23:3d:04:6b:a8:89:6a:59:63:32:
0e:c6:e5:0a:60:f2:fb:19:24:59:ef:b6:39:d8:62:
6d:e4:c8:5c:7f:ad:55:da:45:1f:98:5c:0b:0d:b8:
c3:e8:6b:fe:27:71:77:b2:77:c0:10:2e:65:38:5c:
b6:29:3c:63:c8:af:77:ad:f9:93:ad:15:4a:15:1c:
3c:d8:09:af:6f:9e:08:07:29:85:b3:40:da:ff:64:
7e:53:40:c2:51:0d:d0:ff:50:4d:6b:65:ec:14:b0:
60:41:ee:5f:3f:cc:6a:a8:c1:78:8c:41:96:b6:ba:
5f:a9:25:1a:7e:8b:59:03:4a:59:bd:99:fe:25:f5:
ca:4e:c8:b7:10:f2:71:18:90:be:b3:5d:6a:14:0d:
22:47:d6:70:5a:3b:68:f7:96:59:2c:c8:56:3d:f7:
1c:76:5e:15:e9:de:c0:51:c3:5b:ed:e4:3b:39:98:
76:7f:d2:3e:db:c1:91:e2:8a:90:bf:f0:1f:c5:a3:
6d:c5:c7:1d:4d:ea:86:10:22:f8:0e:00:40:98:02:
f0:98:78:83:66:b6:7e:a3:1b:98:1e:91:a6:39:c1:
25:c7:f7:3a:a1:a0:36:fd:8d:31:0b:65:c0:b6:12:
8c:79:38:88:93:a7:5a:c5:27:c2:3c:a0:48:2e:33:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:C9:86:98:AB:0A:F4:97:C3:67:17:24:EC:8B:DF:66:4D:A4:49
X509v3 Authority Key Identifier:
keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a9:8c:ed:7f:d6:19:23:2a:ca:db:ec:98:5f:1d:a4:5a:41:
1e:6c:0c:a9:9c:e9:39:d5:a1:5c:d6:6f:ae:25:99:fe:19:75:
34:c1:b3:14:2c:8c:8a:3c:4d:77:c7:87:cc:24:c7:27:d0:04:
e3:97:01:8e:1e:a3:5e:10:43:bf:9f:77:7a:a3:25:03:f9:e8:
b6:9a:20:7d:06:53:c2:42:37:2d:08:77:ee:cd:4b:6a:2a:bb:
70:6e:29:55:c3:a4:98:13:6f:2d:91:4b:1c:e8:0e:e4:ca:9b:
5a:65:9b:cf:72:84:7f:31:69:35:cd:1c:05:45:48:a4:7f:f6:
c0:79:e1:ff:73:57:92:58:a7:c2:6a:78:e6:8f:fc:8d:40:1c:
84:ef:57:56:27:ba:7e:03:b1:54:14:5c:e2:26:ca:18:69:bb:
b2:70:0a:1c:53:08:97:1e:38:5c:e5:9a:87:49:61:6c:02:a2:
41:8d:89:4f:47:20:4f:9d:7b:03:e6:88:ac:c6:f6:e7:cc:51:
96:91:2f:70:99:d1:a6:b0:76:49:f2:0f:e8:dc:18:42:8f:63:
c9:e7:00:8f:1d:1d:2b:16:91:74:0b:2d:5d:b8:f1:f6:e0:42:
5f:03:75:77:cf:33:ae:d4:4b:2a:33:4c:33:b8:49:67:0e:85:
91:51:37:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCb28NGyTNdwNKWY1nh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzE5OGE5ODI3ZGVlYWZhYjFkMjdiNTUzNzk0ZjQ0Yjkx
YTZjMDYwHhcNMjUwMTMxMTIwMDQ2WhcNMjUwMjAxMTIwMDQ2WjAzMTEwLwYDVQQD
Eyg5ODRjYzk4Njk4YWIwYWY0OTdjMzY3MTcyNGVjOGJkZjY2NGRhNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pn+JSM9BGuoiWpZYzIOxuUKYPL7
GSRZ77Y52GJt5Mhcf61V2kUfmFwLDbjD6Gv+J3F3snfAEC5lOFy2KTxjyK93rfmT
rRVKFRw82Amvb54IBymFs0Da/2R+U0DCUQ3Q/1BNa2XsFLBgQe5fP8xqqMF4jEGW
trpfqSUafotZA0pZvZn+JfXKTsi3EPJxGJC+s11qFA0iR9ZwWjto95ZZLMhWPfcc
dl4V6d7AUcNb7eQ7OZh2f9I+28GR4oqQv/AfxaNtxccdTeqGECL4DgBAmALwmHiD
ZrZ+oxuYHpGmOcElx/c6oaA2/Y0xC2XAthKMeTiIk6daxSfCPKBILjMbQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhMyYaYqwr0l8NnFyTsi99mTaRJMB8GA1UdIwQY
MBaAFA4xmKmCfe6vqx0ntVN5T0S5GmwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZjdiOTEtMTdiZi00YzJhLWE4MWUt
NDE1Mjc5NjFkNDhlLzEvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8yZjdiOTEtMTdiZi00YzJhLWE4MWUtNDE1Mjc5NjFkNDhl
LzEvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqmM7X/W
GSMqytvsmF8dpFpBHmwMqZzpOdWhXNZvriWZ/hl1NMGzFCyMijxNd8eHzCTHJ9AE
45cBjh6jXhBDv593eqMlA/notpogfQZTwkI3LQh37s1Laiq7cG4pVcOkmBNvLZFL
HOgO5MqbWmWbz3KEfzFpNc0cBUVIpH/2wHnh/3NXklinwmp45o/8jUAchO9XVie6
fgOxVBRc4ibKGGm7snAKHFMIlx44XOWah0lhbAKiQY2JT0cgT517A+aIrMb258xR
lpEvcJnRprB2SfIP6NwYQo9jyecAjx0dKxaRdAstXbjx9uBCXwN1d88zrtRLKjNM
M7hJZw6FkVE3dQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:30 2025 by rpki-client