Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier: Kz8JVbCEzNvCKuv5dCuZI9lFNYrc0KW9gANC6+qRmfo=
Subject key identifier: 8F:51:F9:CC:EA:F4:68:0D:87:D8:A1:1B:56:E7:9C:26:A7:6F:EC:BA
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer: /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial: 0194BC04F771C3B36657915FE0A711A5B93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number: 12D9
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: 14oUm695yi9uamG3lk52I3XhGnMLYB1wSIEXF3v/CBg=)
2: JaWvot76MTHHQ4kBFw9C82j2y4o.roa (hash: ixhJz3sDrdmmh9ldkvtB24V24cIIJCj92AgCDmIoozM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f7:71:c3:b3:66:57:91:5f:e0:a7:11:a5:b9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=8f51f9cceaf4680d87d8a11b56e79c26a76fecba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:d8:06:b8:32:d4:21:f7:b6:6c:25:e3:73:
d2:3b:59:dd:c0:bf:8e:07:64:d9:3a:d1:a6:a6:05:
26:ff:9e:f5:a5:4e:bf:5e:bd:b1:cb:c6:87:34:96:
e7:be:3b:c2:54:92:2b:80:11:fb:b1:fc:35:a4:ab:
37:1e:0b:c0:0a:ef:81:ba:aa:5d:39:b5:c5:60:20:
fe:39:38:ad:a5:19:c9:28:a9:ed:2b:ba:49:57:b0:
d5:4b:be:5f:1a:39:e7:a3:a8:e3:dc:ee:c8:0d:34:
f4:b2:42:ab:c2:54:ac:83:82:ba:e7:bc:c3:06:de:
f5:d4:62:98:a0:f2:fc:68:5f:d8:41:24:7b:24:e7:
ed:00:19:13:65:d7:ba:66:d9:c1:dc:03:45:fb:ad:
e8:2f:6c:f2:64:54:29:7d:e7:97:e3:96:21:55:de:
44:9b:a0:20:8d:c2:95:da:e5:20:23:da:9c:e9:91:
2d:fc:57:3d:a0:31:b8:b6:fe:81:bb:12:2e:a9:b8:
bf:07:7e:5f:04:07:e8:7d:81:d2:e8:ee:6f:17:ab:
39:56:7a:32:82:59:04:b6:4b:96:40:0e:86:b8:09:
e0:ed:a3:41:f9:12:20:ed:d9:36:68:1a:38:1a:23:
84:54:63:71:98:f1:98:a7:4d:49:ff:64:fd:f8:5a:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:51:F9:CC:EA:F4:68:0D:87:D8:A1:1B:56:E7:9C:26:A7:6F:EC:BA
X509v3 Authority Key Identifier:
keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:37:e9:12:c1:fe:5d:bb:f7:ee:32:1f:51:95:5c:a9:dd:8d:
1c:69:73:ba:88:53:e2:ca:bd:bf:ac:3b:31:ef:23:96:ba:16:
2d:63:7b:6e:87:a5:c5:39:56:1e:88:ef:63:8a:9a:2a:16:38:
8e:74:6d:56:15:75:a9:b5:ce:e2:3e:05:62:a6:11:86:6b:79:
55:c5:96:60:5f:2a:dc:9a:ad:53:e2:9a:d7:6c:67:8b:55:f0:
5b:c9:5a:e4:97:9c:56:53:e8:8c:0f:0d:d4:11:35:2c:b8:1a:
47:87:d6:3b:00:fd:92:99:1b:df:7a:8e:2b:57:5b:5f:1a:41:
d8:25:cd:ed:3e:b9:34:23:e3:32:02:48:27:20:81:c2:d9:0b:
15:bd:25:35:e0:54:64:8d:9a:ab:e9:80:b8:83:d4:a8:b9:7f:
f3:1a:39:4f:32:8f:6e:cf:a9:ac:80:e5:f1:c6:7b:48:bb:32:
8a:32:87:dd:5b:e1:b6:9c:aa:d9:d7:a6:21:36:d1:ab:59:0d:
87:f5:ba:04:66:7e:e1:8f:7e:2c:63:0c:63:f5:99:08:61:f9:
ae:17:94:ce:00:56:fb:fe:de:16:00:bc:bc:c9:a7:4c:b9:28:
80:2b:2d:e7:ca:83:65:b3:0f:a4:cc:6f:f6:9c:97:a2:ad:8f:
f7:ed:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:46 2025 by rpki-client