Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: cJ5hegEjf879hDCd4vZV/y25/3nIFEBqRdC2umqJcyU=
Subject key identifier: EF:69:34:CA:48:D4:64:11:BE:FF:CF:85:6F:AA:70:71:25:25:9F:71
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 0194BD1776754F16F418365A2ACFE08834FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: pzFHU0ajqUpefzHcGP2SwlJ9WxUs08QWUVUt70FS/Hw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:76:75:4f:16:f4:18:36:5a:2a:cf:e0:88:34:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=ef6934ca48d46411beffcf856faa707125259f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:19:5b:2c:5c:8e:fe:3b:77:f7:a9:11:54:
16:9d:2a:27:df:e1:7f:e4:81:e2:5d:40:7e:c0:6d:
52:39:71:67:30:e5:8c:e7:40:97:a6:2a:8c:ea:fa:
b5:e1:82:93:0e:cb:da:1d:77:32:1d:9d:41:c2:2d:
bc:29:48:b6:2c:d0:e5:ed:83:de:79:5a:3c:40:47:
20:12:cc:63:74:7f:14:ee:97:c7:ee:e2:62:47:ba:
e3:b0:01:ce:c4:ba:b5:96:bb:83:db:7c:13:03:46:
60:44:81:f3:f9:6f:5d:9f:09:8c:ad:4c:ef:29:f6:
d6:d4:7f:f2:e5:63:51:34:8a:40:ef:37:dd:7e:77:
40:2d:11:58:5c:f1:44:8a:5b:6d:e9:b4:d0:b4:be:
f7:46:30:2c:60:e5:06:c6:a6:a7:36:4e:d5:ba:eb:
18:ae:b2:cb:2a:1c:b4:12:2f:ca:a7:f5:2d:38:bd:
53:06:a1:76:4a:d9:92:4b:90:18:a5:7c:1c:57:d0:
ce:bd:d1:12:3e:69:f9:97:d5:b1:ee:f8:85:0f:00:
59:8d:11:4f:72:24:f4:a2:b5:0a:77:e8:44:41:b8:
d1:df:a0:f3:9e:bd:ff:1d:17:01:f6:f0:1f:ba:dd:
2b:3b:37:b1:ca:9d:dd:3d:e4:6d:1c:e3:f8:0d:54:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:69:34:CA:48:D4:64:11:BE:FF:CF:85:6F:AA:70:71:25:25:9F:71
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:aa:37:c7:f9:4a:4a:53:85:25:98:09:94:e4:9d:5e:b8:09:
f6:80:23:dd:7d:00:50:c1:15:ff:a7:ae:15:23:34:30:9d:df:
ea:3d:b7:ed:f9:24:16:b0:b7:f0:90:d9:9d:1d:3f:9d:1a:a8:
28:09:c7:bb:39:01:8b:83:34:2d:fa:2d:c4:8f:f5:35:ca:f4:
2d:7a:a0:1f:05:b1:b4:0e:f1:a4:07:dc:91:a7:15:7f:81:90:
d3:07:68:1a:12:0b:64:1d:7a:01:ed:2b:8d:ce:1c:4d:ba:0d:
ed:e3:b4:cb:f6:c0:bc:60:86:d8:9c:cc:79:ec:41:02:ef:d4:
52:72:01:60:68:fb:76:62:da:93:58:30:e4:65:0a:8c:55:9b:
1d:d4:f7:a4:24:32:6c:46:1d:61:9f:2d:b3:4a:5e:e5:4f:a0:
49:e4:2a:6a:a0:c4:dd:96:cd:37:4a:cc:76:0b:f9:ae:27:0b:
99:a8:27:4c:58:24:1b:1c:00:c1:56:ce:19:69:b3:fc:f6:3f:
01:16:51:ac:e1:3d:35:14:ec:8c:51:78:5c:ba:80:9b:23:7b:
53:d6:76:92:01:70:05:ad:6f:5e:84:b9:71:ff:da:24:b3:9f:
14:b7:a8:b5:76:ea:ba:e6:43:e4:cb:21:82:3c:de:d6:a6:fe:
a0:09:ee:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3Z1Txb0GDZaKs/giDT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDgxZDM1ODhjN2UxMGE4OTliMGQwNDgxNTY2ZTZkOTQ4
ZGFkZDAwHhcNMjUwMTMxMTYwMDE4WhcNMjUwMjAxMTYwMDE4WjAzMTEwLwYDVQQD
EyhlZjY5MzRjYTQ4ZDQ2NDExYmVmZmNmODU2ZmFhNzA3MTI1MjU5ZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWYZWyxcjv47d/epEVQWnSon3+F/
5IHiXUB+wG1SOXFnMOWM50CXpiqM6vq14YKTDsvaHXcyHZ1Bwi28KUi2LNDl7YPe
eVo8QEcgEsxjdH8U7pfH7uJiR7rjsAHOxLq1lruD23wTA0ZgRIHz+W9dnwmMrUzv
KfbW1H/y5WNRNIpA7zfdfndALRFYXPFEiltt6bTQtL73RjAsYOUGxqanNk7VuusY
rrLLKhy0Ei/Kp/UtOL1TBqF2StmSS5AYpXwcV9DOvdESPmn5l9Wx7viFDwBZjRFP
ciT0orUKd+hEQbjR36Dznr3/HRcB9vAfut0rOzexyp3dPeRtHOP4DVSb4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9pNMpI1GQRvv/PhW+qcHElJZ9xMB8GA1UdIwQY
MBaAFA3YHTWIx+EKiZsNBIFWbm2Uja3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzkt
Yzc2YjhkYjVhZDE0LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzktYzc2YjhkYjVhZDE0
LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJao3x/lK
SlOFJZgJlOSdXrgJ9oAj3X0AUMEV/6euFSM0MJ3f6j237fkkFrC38JDZnR0/nRqo
KAnHuzkBi4M0LfotxI/1Ncr0LXqgHwWxtA7xpAfckacVf4GQ0wdoGhILZB16Ae0r
jc4cTboN7eO0y/bAvGCG2JzMeexBAu/UUnIBYGj7dmLak1gw5GUKjFWbHdT3pCQy
bEYdYZ8ts0pe5U+gSeQqaqDE3ZbNN0rMdgv5ricLmagnTFgkGxwAwVbOGWmz/PY/
ARZRrOE9NRTsjFF4XLqAmyN7U9Z2kgFwBa1vXoS5cf/aJLOfFLeotXbquuZD5Msh
gjze1qb+oAnuGw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:28 2025 by rpki-client