Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: yD1VXf13+2ahZ50g9HpzjWBQqVdxwIwE1JaBnVTjB1M=
Subject key identifier: 3F:35:EC:77:5F:DB:F4:7D:06:53:70:E9:17:62:86:DB:9F:55:84:3C
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 0194BCE0C148182BA53A426DFF39BF77C223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 1039
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: UjWiPviRC2RbaVv0jZicGaf848S3foX27ATBcW8aAiU=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c1:48:18:2b:a5:3a:42:6d:ff:39:bf:77:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=3f35ec775fdbf47d065370e9176286db9f55843c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:45:ea:37:88:dd:19:cb:0d:ec:c6:1f:29:
88:77:64:64:f7:ea:3f:ab:5d:c4:19:5b:b8:18:ac:
34:4d:3a:7e:c2:a1:2b:09:b7:f2:db:c1:08:47:01:
d7:d9:1c:1a:e8:b7:61:b6:fd:97:ba:fb:a9:f4:c1:
f2:6d:91:a2:c8:e2:e2:28:c3:c6:4f:1b:1a:a0:ae:
b3:21:41:3b:eb:0b:a4:34:d2:ab:e8:c4:bb:73:ea:
a9:62:d3:50:20:8e:05:fb:3a:d1:73:86:7c:cb:42:
b4:11:2e:f7:41:9e:ba:7b:ef:83:b9:08:de:90:1c:
30:5e:4a:c4:e6:ca:12:c5:45:a0:fa:fe:6b:38:51:
e1:63:b0:c3:da:80:27:0a:48:0c:9c:0d:e0:54:45:
8b:67:10:44:5a:06:f2:78:3e:a0:c2:e6:be:7b:da:
54:70:a1:e6:a8:4f:78:b1:d3:70:ec:e3:c9:65:f2:
10:38:e3:c9:5c:0a:6c:a1:eb:15:21:9f:e8:ff:27:
0e:1e:90:0c:b0:dc:f7:82:e0:51:af:9d:63:5e:84:
78:72:4e:44:64:d0:ff:21:24:01:a3:82:a3:f4:be:
92:46:49:dc:49:b5:55:55:d5:75:38:4d:8f:89:f0:
bd:e0:97:10:63:22:ef:2f:e1:5c:60:08:33:be:0c:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:35:EC:77:5F:DB:F4:7D:06:53:70:E9:17:62:86:DB:9F:55:84:3C
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ca:8d:db:64:88:62:b1:5e:dc:44:d9:4a:2f:03:a7:99:92:
bb:84:c9:79:49:9f:6c:99:96:7c:4d:6b:42:87:9a:6d:21:63:
53:af:53:3d:51:67:f5:e3:e2:8e:cf:8b:9d:a7:32:30:d1:2b:
25:94:46:5b:94:39:56:98:ef:87:3f:d6:a5:b2:50:ea:f3:f8:
dc:a2:ab:6b:77:fb:f5:57:af:1a:87:4c:a2:f1:96:51:d5:4a:
6f:ab:8c:d2:69:15:11:5f:2d:cd:15:a6:aa:fe:66:ab:7c:f8:
95:65:ea:57:09:9a:92:e8:7f:d7:6e:a9:5c:10:d7:16:0c:eb:
cc:04:8d:2e:33:b8:23:8b:7e:30:4c:4d:79:72:d1:87:d8:5b:
e4:e4:c8:32:95:5e:1b:7e:7b:16:c1:c6:eb:cb:98:7f:38:1f:
a7:1f:f1:fa:d6:ee:40:f3:4f:8c:2f:72:bb:6e:2f:07:62:34:
3d:5d:4a:c5:c9:ef:e4:f2:53:b2:31:ff:90:e3:18:c7:6f:49:
cb:2b:6b:00:20:88:ee:3a:ba:c5:b8:b8:c7:8a:43:ec:59:54:
d6:07:76:8c:48:a4:05:92:de:e6:aa:b4:8f:21:79:4e:99:cd:
e8:18:dc:b2:41:d7:b4:45:6a:01:cc:45:c9:99:6e:a4:cf:1c:
ea:aa:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:53 2025 by rpki-client