Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
File: DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json)
Hash identifier: uLm2km32P0X1Qwwo4AoEG4UJdCI8qiM/wTX1Gb4P0L4=
Subject key identifier: F9:DA:25:55:39:C2:4C:71:C3:36:2F:A7:0F:92:6D:97:C5:88:7A:26
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial: 0194BCAA2DF87D8D98278D10113850407C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: CFwTUbtYdsQy2F1XlPMiDqN1kK4iw4bVI8huYgv/L6A=)
2: ULOFbzP3h9-3w0H4Yx7Si28ClYo.roa (hash: d25VIffAJQDV7vgvStWkaS/C+7kyYqCn7zctEo0yqWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2d:f8:7d:8d:98:27:8d:10:11:38:50:40:7c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=f9da255539c24c71c3362fa70f926d97c5887a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:38:92:5b:3f:3e:9c:28:38:27:ee:e5:dd:
24:e3:56:3f:35:0f:22:8d:8c:bc:c6:40:ff:d7:77:
bf:27:2e:29:17:97:9e:1f:26:dd:06:0a:55:21:9c:
4e:09:88:40:aa:01:28:58:fe:70:75:67:f4:3f:01:
b7:ed:8c:a5:03:38:cb:e3:81:11:d4:b8:52:c2:16:
96:12:6c:0c:8a:ec:aa:38:f3:49:a4:ec:07:ac:a4:
ab:44:48:59:8c:cd:b5:aa:f2:8a:6c:18:e7:40:ea:
e9:e4:73:a9:ac:33:59:54:6d:50:0b:b0:89:f4:27:
81:9b:d3:9b:1b:90:f6:6f:40:aa:76:89:64:6d:67:
c1:7d:aa:9a:e8:7c:90:65:db:af:32:22:66:9c:ea:
cb:a0:02:d0:f7:03:1e:43:66:45:11:fd:36:9c:b7:
95:56:be:04:7d:9e:d9:49:30:78:f5:36:93:bf:72:
47:19:9b:db:ed:f0:ef:0b:ec:0f:9b:6e:75:a9:23:
ca:2d:be:0e:3c:15:19:97:bc:91:6a:17:e5:3e:70:
d7:6b:ac:bc:3f:dc:b6:2d:7c:d1:8b:ec:8f:6a:38:
e0:97:45:e3:42:98:2f:a9:b7:0e:61:ac:b4:3f:88:
8a:e7:1b:5c:64:7f:bc:c8:d0:93:01:d2:38:71:d1:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:25:55:39:C2:4C:71:C3:36:2F:A7:0F:92:6D:97:C5:88:7A:26
X509v3 Authority Key Identifier:
keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:03:3b:9d:bf:50:57:cd:f9:e7:fc:ac:ae:f4:93:11:38:79:
0e:20:5d:8e:bf:fc:85:a2:40:aa:67:55:e8:0a:f7:2c:33:04:
55:24:9c:e4:ee:99:9a:5c:d0:16:26:b8:d5:dc:9f:08:39:22:
eb:27:07:75:de:e2:99:04:56:b6:d5:84:4c:7e:53:a1:3d:d3:
75:d1:fd:7c:b8:4f:2a:23:b6:8d:13:a2:cf:08:91:e0:40:9e:
f8:51:8d:04:99:73:5a:92:31:85:36:2a:fc:e6:43:14:63:8a:
16:77:44:b7:0c:f4:d9:02:8a:10:ee:e3:0d:f4:b6:33:17:23:
86:7d:7c:bf:17:ec:71:e3:ee:df:e8:af:0d:e0:e9:fb:69:6c:
b0:04:88:84:b9:d9:f9:79:b1:67:42:ab:c6:57:22:25:bc:0c:
d6:be:75:08:c7:53:5e:9a:ae:84:e1:8e:c5:da:6a:e6:5d:f5:
ba:df:8f:cb:15:67:15:b6:7b:01:d8:04:a8:72:b4:11:53:7a:
10:aa:01:3a:6f:7a:92:36:81:eb:80:1b:90:8c:e0:9c:ea:e9:
be:9f:13:1e:42:25:3a:8b:f4:6c:60:21:da:90:da:da:33:7f:
13:de:14:c5:45:86:3c:95:94:d3:cc:1c:ed:01:c8:7a:e1:9f:
43:5f:7a:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qi34fY2YJ40QEThQQHxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTcwZWU4NTllOTFmNDk3M2RlNGE1NzJiMWJhZDJmM2E1
ZDE4MjUwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
EyhmOWRhMjU1NTM5YzI0YzcxYzMzNjJmYTcwZjkyNmQ5N2M1ODg3YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWY4kls/PpwoOCfu5d0k41Y/NQ8i
jYy8xkD/13e/Jy4pF5eeHybdBgpVIZxOCYhAqgEoWP5wdWf0PwG37YylAzjL44ER
1LhSwhaWEmwMiuyqOPNJpOwHrKSrREhZjM21qvKKbBjnQOrp5HOprDNZVG1QC7CJ
9CeBm9ObG5D2b0CqdolkbWfBfaqa6HyQZduvMiJmnOrLoALQ9wMeQ2ZFEf02nLeV
Vr4EfZ7ZSTB49TaTv3JHGZvb7fDvC+wPm251qSPKLb4OPBUZl7yRahflPnDXa6y8
P9y2LXzRi+yPajjgl0XjQpgvqbcOYay0P4iK5xtcZH+8yNCTAdI4cdFAjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnaJVU5wkxxwzYvpw+SbZfFiHomMB8GA1UdIwQY
MBaAFA4XDuhZ6R9Jc95KVysbrS86XRglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jZjcyMGUtNGQzMy00ZGIxLTg2ZTkt
ZmMyZWM0YmI1OTY3LzEvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jZjcyMGUtNGQzMy00ZGIxLTg2ZTktZmMyZWM0YmI1OTY3
LzEvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAM7nb9Q
V8355/ysrvSTETh5DiBdjr/8haJAqmdV6Ar3LDMEVSSc5O6ZmlzQFia41dyfCDki
6ycHdd7imQRWttWETH5ToT3TddH9fLhPKiO2jROizwiR4ECe+FGNBJlzWpIxhTYq
/OZDFGOKFndEtwz02QKKEO7jDfS2Mxcjhn18vxfscePu3+ivDeDp+2lssASIhLnZ
+XmxZ0KrxlciJbwM1r51CMdTXpquhOGOxdpq5l31ut+PyxVnFbZ7AdgEqHK0EVN6
EKoBOm96kjaB64AbkIzgnOrpvp8THkIlOov0bGAh2pDa2jN/E94UxUWGPJWU08wc
7QHIeuGfQ196HA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:03 2025 by rpki-client