Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
File: Dri8RONvrhbTcQL9DVGfKE1mPZA.mft (raw, json)
Hash identifier: NVevTjiz8Se2tunlXM1ITQm8qTTpm1ls2QNyKW0HQn8=
Subject key identifier: D2:6D:E5:2C:AC:E4:B9:E6:AE:14:5D:48:E6:9F:C0:71:20:09:03:DF
Authority key identifier: 0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
Certificate issuer: /CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Certificate serial: 0194BCA9B1BFB65961748081EB1322B471AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
Manifest number: 1375
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: Dri8RONvrhbTcQL9DVGfKE1mPZA.crl (hash: lPugwfDAo/XfRiRSdK4vhc5MMQu5s6aj5L8W4BMIEGo=)
2: EnQM4_whnPJeaxWRQxPEz7dH7rY.roa (hash: anAGsxZMEMPM7WeK+BVeddK3oakg7+TLd3wIh7D05ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b1:bf:b6:59:61:74:80:81:eb:13:22:b4:71:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=d26de52cace4b9e6ae145d48e69fc071200903df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:fe:38:f1:9a:fd:68:f4:c5:93:25:25:db:
e3:c8:d2:24:41:b4:68:20:19:ac:f0:ab:99:45:32:
5e:68:c2:04:aa:01:26:7c:53:24:7e:b0:b7:b1:45:
a8:45:e4:92:4d:1a:07:b1:a9:9f:e5:2a:65:45:c5:
80:e6:e3:06:20:df:ca:be:de:57:ed:cd:27:85:96:
07:93:07:b9:c2:16:81:11:a5:bb:55:3b:23:56:65:
9c:83:0f:92:4a:53:6a:20:51:3b:af:77:32:78:39:
d7:47:77:29:c8:8a:00:09:9f:5f:64:19:cc:9b:3d:
ee:0b:f1:f7:96:69:7a:8b:8b:84:1e:21:38:42:5d:
c9:bd:99:7a:10:3a:f5:51:93:9e:d5:0b:05:16:9b:
dc:e3:66:f0:01:80:e0:40:5c:e7:fa:ac:45:2c:12:
16:3d:68:3a:44:91:a8:4c:e5:4f:3f:a5:52:66:40:
62:34:0c:e6:97:2d:bd:46:16:46:c0:a9:c2:e5:51:
d8:76:64:e3:f6:6c:cb:0d:62:09:08:e0:c6:47:61:
40:e2:5e:92:8b:83:0d:30:0b:7d:e3:03:77:37:be:
d5:d0:2f:13:d9:e4:20:09:05:f5:27:a7:ed:60:42:
c3:b4:09:42:e9:ab:8b:6b:12:07:63:1c:5f:27:c0:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:E5:2C:AC:E4:B9:E6:AE:14:5D:48:E6:9F:C0:71:20:09:03:DF
X509v3 Authority Key Identifier:
keyid:0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0b:ef:4c:67:52:79:f5:7b:6e:96:9d:71:ec:bd:ef:90:54:
26:53:20:2e:e1:a4:12:eb:09:69:03:89:e0:e5:f7:44:f4:ac:
a3:7e:7b:5f:60:50:0a:12:e0:63:21:b9:de:1b:f4:5a:a2:9d:
5d:64:8e:89:fd:67:5d:d9:82:b2:b8:7f:31:d9:96:38:c7:f6:
17:7c:fe:0e:f1:97:02:2c:8c:a9:84:8d:67:2c:73:ef:bb:e1:
92:d7:1b:b0:ea:71:f5:e5:1e:fa:d1:ff:7e:42:e0:2a:2a:1a:
84:31:60:44:a1:38:23:49:62:3e:1b:b4:b6:a7:ca:a9:75:cb:
b3:79:b2:be:8d:e4:55:21:8b:d0:95:c1:94:26:b2:32:00:2f:
0b:93:c4:a6:54:00:40:e3:8e:cc:c8:86:70:99:c9:ea:b8:aa:
2d:fc:14:fd:49:d0:a9:d4:e7:3a:6b:d2:3c:24:70:b8:8f:70:
fd:f1:c0:62:d2:1c:ca:21:c8:24:25:c6:8f:91:3f:19:cc:33:
0d:4a:7b:2d:2e:16:11:ee:6b:f3:b9:74:83:56:e3:e4:c1:cd:
94:73:2b:67:71:41:df:e8:5c:fc:bd:42:0a:9b:68:df:c1:af:
72:36:ac:d3:4c:0a:9a:9d:3d:ce:04:47:12:28:88:dc:31:8d:
f1:3e:1c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbG/tllhdICB6xMitHGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjhiYzQ0ZTM2ZmFlMTZkMzcxMDJmZDBkNTE5ZjI4NGQ2
NjNkOTAwHhcNMjUwMTMxMTQwMDI1WhcNMjUwMjAxMTQwMDI1WjAzMTEwLwYDVQQD
EyhkMjZkZTUyY2FjZTRiOWU2YWUxNDVkNDhlNjlmYzA3MTIwMDkwM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NP+OPGa/Wj0xZMlJdvjyNIkQbRo
IBms8KuZRTJeaMIEqgEmfFMkfrC3sUWoReSSTRoHsamf5SplRcWA5uMGIN/Kvt5X
7c0nhZYHkwe5whaBEaW7VTsjVmWcgw+SSlNqIFE7r3cyeDnXR3cpyIoACZ9fZBnM
mz3uC/H3lml6i4uEHiE4Ql3JvZl6EDr1UZOe1QsFFpvc42bwAYDgQFzn+qxFLBIW
PWg6RJGoTOVPP6VSZkBiNAzmly29RhZGwKnC5VHYdmTj9mzLDWIJCODGR2FA4l6S
i4MNMAt94wN3N77V0C8T2eQgCQX1J6ftYELDtAlC6auLaxIHYxxfJ8A/nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJt5Sys5LnmrhRdSOafwHEgCQPfMB8GA1UdIwQY
MBaAFA64vETjb64W03EC/Q1RnyhNZj2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJpOFJPTnZyaGJUY1FMOURWR2ZLRTFtUFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82MWQxY2UtY2Q4MC00MjlkLWJmZTEt
ODliM2EzZjE1ZGYwLzEvRHJpOFJPTnZyaGJUY1FMOURWR2ZLRTFtUFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82MWQxY2UtY2Q4MC00MjlkLWJmZTEtODliM2EzZjE1ZGYw
LzEvRHJpOFJPTnZyaGJUY1FMOURWR2ZLRTFtUFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgvvTGdS
efV7bpadcey975BUJlMgLuGkEusJaQOJ4OX3RPSso357X2BQChLgYyG53hv0WqKd
XWSOif1nXdmCsrh/MdmWOMf2F3z+DvGXAiyMqYSNZyxz77vhktcbsOpx9eUe+tH/
fkLgKioahDFgRKE4I0liPhu0tqfKqXXLs3myvo3kVSGL0JXBlCayMgAvC5PEplQA
QOOOzMiGcJnJ6riqLfwU/UnQqdTnOmvSPCRwuI9w/fHAYtIcyiHIJCXGj5E/Gcwz
DUp7LS4WEe5r87l0g1bj5MHNlHMrZ3FB3+hc/L1CCpto38Gvcjas00wKmp09zgRH
EiiI3DGN8T4cGg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:53 2025 by rpki-client