Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: gI5iUTmeZj6hiFYoy9Vuc4+2aCIeDC7LS2CBelTql00=
Subject key identifier: 06:57:43:E0:D1:73:96:EF:F6:08:34:3A:68:A7:18:97:34:A7:4C:29
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 0194BC04A68ABAD3D0339243DCACFF9DE328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 1397
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: 2b7HpoujY+Rq3z9kfv0laRZvwVcNngOhnC9EgB9Zfyk=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:8a:ba:d3:d0:33:92:43:dc:ac:ff:9d:e3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=065743e0d17396eff608343a68a7189734a74c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:47:d5:5b:2f:fd:b2:76:64:85:fc:fa:5d:
78:af:5f:db:4a:d6:14:ab:b0:cc:3e:31:f8:cf:44:
f3:b8:23:d2:48:80:10:84:40:b1:c5:e8:0f:15:68:
e1:8d:c2:d0:41:91:ec:d2:bb:be:a9:e7:7c:9f:97:
dc:c0:f5:e9:de:77:7b:c7:8e:e7:7c:bc:b7:f9:8d:
d9:bf:25:fb:f0:73:4b:e3:b1:e3:95:e2:1d:71:da:
94:39:f3:9d:65:41:d1:1e:e2:5d:9b:0e:16:01:36:
7a:69:2f:db:ed:bf:b4:d3:23:f3:2f:40:de:cf:07:
a6:e4:37:4b:c9:1f:a3:a5:b5:13:c5:39:8e:59:2a:
48:1e:f7:7f:ba:0b:1f:a8:17:d2:78:97:bc:98:89:
80:eb:ae:e9:8a:09:19:82:95:e7:0a:43:0a:66:47:
2f:e8:4e:a6:55:bf:f0:47:8b:c2:7a:8f:3c:15:a9:
7b:a2:6d:41:7e:7e:56:c4:f4:c8:06:71:41:a6:9b:
17:fa:9b:b1:16:38:9c:4a:c2:0a:fc:86:a7:70:dd:
db:d0:64:a7:e4:57:6b:c7:bc:9e:88:96:29:4e:c5:
80:17:b2:f5:dc:2d:0b:ac:32:93:31:2f:a5:37:2a:
7c:90:0d:ed:1e:47:f4:40:91:e9:9b:7d:f4:39:4c:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:43:E0:D1:73:96:EF:F6:08:34:3A:68:A7:18:97:34:A7:4C:29
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:41:88:fe:06:2a:a1:ae:60:90:24:c1:50:c0:9d:6a:37:d0:
41:ae:92:50:67:30:56:63:f7:e7:81:34:72:2f:8d:b0:2a:d5:
f2:c2:4c:07:58:2d:83:38:67:4a:ea:71:9a:63:d1:7e:03:b8:
4e:f1:6a:ec:02:6c:60:69:4f:ff:e6:eb:5a:47:a2:c2:e8:5a:
7d:35:96:5a:76:a5:bd:a3:50:6e:7a:6d:82:c5:0c:e7:8c:ba:
d3:ec:3c:73:63:63:fd:87:3f:8e:fc:3d:8a:81:c4:02:c7:b0:
af:a6:f9:5b:fa:7d:4d:d6:f5:a3:96:c2:c2:c0:c2:62:66:f7:
04:7a:b1:8d:c8:36:a8:a1:3d:b2:21:8a:e9:da:2f:b8:92:65:
d8:b8:89:7c:2c:be:d4:06:8c:1c:f7:5e:0c:56:35:8a:da:a7:
d0:1e:2c:fc:3b:18:e4:1b:f7:f4:04:b8:a9:6c:ff:16:9c:c5:
8c:01:ab:51:72:40:2f:76:23:3e:43:96:32:ba:79:cd:75:4c:
ca:30:17:f9:11:3b:10:fc:0d:d9:5b:45:02:3e:a5:30:d9:65:
75:0e:93:3f:a3:33:cb:33:b0:f9:9b:76:11:e9:10:88:56:49:
66:c2:8b:3b:cb:23:f6:38:d2:14:45:5b:98:8e:5e:5d:fa:66:
05:f8:fe:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKaKutPQM5JD3Kz/neMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDMzY2E4M2FmZmJiODAxMTcyZDUwOTRiMDBlMDY4NTZl
NmY1NDcwHhcNMjUwMTMxMTEwMDA4WhcNMjUwMjAxMTEwMDA4WjAzMTEwLwYDVQQD
EygwNjU3NDNlMGQxNzM5NmVmZjYwODM0M2E2OGE3MTg5NzM0YTc0YzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rVH1Vsv/bJ2ZIX8+l14r1/bStYU
q7DMPjH4z0TzuCPSSIAQhECxxegPFWjhjcLQQZHs0ru+qed8n5fcwPXp3nd7x47n
fLy3+Y3ZvyX78HNL47HjleIdcdqUOfOdZUHRHuJdmw4WATZ6aS/b7b+00yPzL0De
zwem5DdLyR+jpbUTxTmOWSpIHvd/ugsfqBfSeJe8mImA667pigkZgpXnCkMKZkcv
6E6mVb/wR4vCeo88Fal7om1Bfn5WxPTIBnFBppsX+puxFjicSsIK/IancN3b0GSn
5Fdrx7yeiJYpTsWAF7L13C0LrDKTMS+lNyp8kA3tHkf0QJHpm330OUzcNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZXQ+DRc5bv9gg0OminGJc0p0wpMB8GA1UdIwQY
MBaAFA3TPKg6/7uAEXLVCUsA4GhW5vVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wZmNmYmQtMjc5MC00ODUwLWJhZmEt
ODkwZWIyMjY2NjU3LzEvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wZmNmYmQtMjc5MC00ODUwLWJhZmEtODkwZWIyMjY2NjU3
LzEvRGRNOHFEcl91NEFSY3RVSlN3RGdhRmJtOVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkGI/gYq
oa5gkCTBUMCdajfQQa6SUGcwVmP354E0ci+NsCrV8sJMB1gtgzhnSupxmmPRfgO4
TvFq7AJsYGlP/+brWkeiwuhafTWWWnalvaNQbnptgsUM54y60+w8c2Nj/Yc/jvw9
ioHEAsewr6b5W/p9Tdb1o5bCwsDCYmb3BHqxjcg2qKE9siGK6dovuJJl2LiJfCy+
1AaMHPdeDFY1itqn0B4s/DsY5Bv39AS4qWz/FpzFjAGrUXJAL3YjPkOWMrp5zXVM
yjAX+RE7EPwN2VtFAj6lMNlldQ6TP6MzyzOw+Zt2EekQiFZJZsKLO8sj9jjSFEVb
mI5eXfpmBfj+6g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:36:44 2025 by rpki-client