Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: iFQjC+9BKJ6RHviSA8MG9JI8gX8KdMtgwOSeEEx7yD4=
Subject key identifier: A3:10:0D:DA:A6:7E:0E:DE:D6:14:D9:D0:67:B9:2C:23:D8:45:5D:23
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 0194BC050A6989E2D44FE5CC6D1411AB4894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: BANFT/GaMAdx/s/6YpTrnHopXMDo+L0SqtkBJB/cPLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:69:89:e2:d4:4f:e5:cc:6d:14:11:ab:48:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=a3100ddaa67e0eded614d9d067b92c23d8455d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:9e:33:63:d0:bf:ab:c7:50:7d:3c:30:2b:
4f:3c:18:47:59:08:a7:4d:02:34:a9:aa:30:14:e9:
06:8c:6f:5a:1e:85:5f:23:71:39:91:6f:fd:27:e2:
ae:ce:85:26:7a:74:0f:aa:fd:0d:b0:4b:cc:f4:d6:
5a:29:07:ff:43:13:d1:3e:ab:90:4f:cc:33:34:fb:
c5:5d:99:90:47:c5:07:11:bc:08:c8:57:63:30:f8:
ef:c7:e9:c6:48:b4:d5:d4:44:e3:99:9e:45:7b:1f:
55:29:fb:e3:04:aa:62:d0:de:d6:0a:b7:07:bc:8c:
96:5e:11:da:f0:96:f4:eb:1d:d6:d5:22:72:80:05:
aa:f9:c3:b0:e8:a2:34:d7:12:9f:dd:55:f7:6a:d1:
b9:5d:8e:ae:f9:37:9e:89:d4:43:53:01:3c:e2:ad:
1e:63:73:b5:70:28:b5:87:e5:41:bd:e2:15:36:0c:
54:5b:7f:80:99:6f:c3:0c:a0:24:d1:8b:6e:af:40:
8b:54:42:67:98:5c:d2:f3:bd:51:b1:23:a5:cd:9e:
f5:92:db:2e:d6:58:ec:37:e7:5b:e8:83:d5:f6:52:
50:fd:73:c8:44:3d:92:1b:f8:4d:25:70:74:17:05:
0e:b9:2a:56:a4:7a:12:1b:f4:0d:f9:4b:fc:41:11:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:10:0D:DA:A6:7E:0E:DE:D6:14:D9:D0:67:B9:2C:23:D8:45:5D:23
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:14:d6:9b:53:18:45:81:5a:42:c1:73:e3:02:fa:d5:84:0d:
ca:14:03:03:94:24:45:10:5d:68:20:64:d8:e2:1e:78:37:7b:
1e:8a:46:13:ac:33:a5:68:80:f8:bc:d8:be:e5:dd:2a:d0:2f:
75:fa:6c:8d:9f:73:66:c3:aa:96:14:b2:a7:a5:af:92:08:73:
5a:c1:8a:5b:d3:a0:34:1a:bf:0e:cc:39:f6:d2:a9:c8:40:05:
59:3e:d1:36:be:7f:86:28:7a:5a:15:e8:58:bf:06:bd:a0:42:
42:41:17:9e:72:0b:d3:f6:02:e2:40:d1:0b:0f:e9:1e:69:33:
87:f2:3f:2f:23:45:03:6e:02:da:fc:da:74:24:e1:95:e9:57:
24:5c:f6:5b:95:72:d8:dc:58:6f:ee:38:94:11:e7:a0:0c:7d:
08:6f:39:a2:b9:98:32:9a:f0:ad:42:6b:15:c5:27:fc:7b:cf:
57:1a:c0:6c:9f:c2:7e:ad:8d:e2:a7:59:cf:49:46:25:02:c1:
5f:65:c4:ad:b3:e8:58:75:ab:02:2c:6c:9a:fd:75:73:6c:66:
25:d2:fb:75:b2:bc:0d:25:72:bc:1c:61:d4:b6:84:83:6c:4b:
7a:0a:8f:1d:ea:05:88:43:8c:73:74:3b:c3:67:13:e9:39:25:
6e:51:41:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQppieLUT+XMbRQRq0iUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj
MGRkMWIwHhcNMjUwMTMxMTEwMDM0WhcNMjUwMjAxMTEwMDM0WjAzMTEwLwYDVQQD
EyhhMzEwMGRkYWE2N2UwZWRlZDYxNGQ5ZDA2N2I5MmMyM2Q4NDU1ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnyeM2PQv6vHUH08MCtPPBhHWQin
TQI0qaowFOkGjG9aHoVfI3E5kW/9J+KuzoUmenQPqv0NsEvM9NZaKQf/QxPRPquQ
T8wzNPvFXZmQR8UHEbwIyFdjMPjvx+nGSLTV1ETjmZ5Fex9VKfvjBKpi0N7WCrcH
vIyWXhHa8Jb06x3W1SJygAWq+cOw6KI01xKf3VX3atG5XY6u+TeeidRDUwE84q0e
Y3O1cCi1h+VBveIVNgxUW3+AmW/DDKAk0Ytur0CLVEJnmFzS871RsSOlzZ71ktsu
1ljsN+db6IPV9lJQ/XPIRD2SG/hNJXB0FwUOuSpWpHoSG/QN+Uv8QRE3tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMQDdqmfg7e1hTZ0Ge5LCPYRV0jMB8GA1UdIwQY
MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt
ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2
LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRTWm1MY
RYFaQsFz4wL61YQNyhQDA5QkRRBdaCBk2OIeeDd7HopGE6wzpWiA+LzYvuXdKtAv
dfpsjZ9zZsOqlhSyp6WvkghzWsGKW9OgNBq/Dsw59tKpyEAFWT7RNr5/hih6WhXo
WL8GvaBCQkEXnnIL0/YC4kDRCw/pHmkzh/I/LyNFA24C2vzadCThlelXJFz2W5Vy
2NxYb+44lBHnoAx9CG85ormYMprwrUJrFcUn/HvPVxrAbJ/Cfq2N4qdZz0lGJQLB
X2XErbPoWHWrAixsmv11c2xmJdL7dbK8DSVyvBxh1LaEg2xLegqPHeoFiEOMc3Q7
w2cT6TklblFBwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:57 2025 by rpki-client