Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
File: DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft (raw, json)
Hash identifier: cetOkLQLWkdgw4vwnoIT9KVMmH9UhDnVcPxNeD1YxWA=
Subject key identifier: 2C:0B:46:7E:92:C2:4F:43:F5:C0:24:C6:E3:77:4C:5C:2B:AB:6B:D4
Authority key identifier: 0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
Certificate issuer: /CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Certificate serial: 0194BD4E84A81DFE0E8D40EE79F2A0FC927B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
Manifest number: 060C
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl (hash: C0WD++/xLvgLUUc45B/vMh8oZBFgwI8ED9sPTaDFIrA=)
2: tn341Lzi5MPGO9EUcmk0M7cXZxM.roa (hash: FFlSPwmOxmVm+VW9zVZtaZMl/pgjePvamNa1bTrjlRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:a8:1d:fe:0e:8d:40:ee:79:f2:a0:fc:92:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=2c0b467e92c24f43f5c024c6e3774c5c2bab6bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:fd:26:47:a8:91:8e:2f:85:17:91:4e:92:
f5:5f:23:83:bd:6e:8c:79:d2:89:b8:ef:49:09:d8:
15:c1:09:db:34:4b:f3:5a:7f:b5:a3:a7:b2:ab:99:
5d:b4:ba:a7:5f:c0:3f:5a:2e:6f:08:90:cb:3a:cf:
e7:58:e1:01:75:f7:c9:8d:9d:b9:7f:57:4b:6f:e0:
97:23:2c:aa:4a:f9:49:2f:58:0b:21:13:f2:e8:83:
3c:96:80:9c:5d:8a:af:7a:3e:5f:b4:e0:2e:92:61:
df:f0:07:5b:88:86:61:5f:de:25:3d:0a:b2:07:ec:
46:b8:ae:78:bd:82:02:04:7d:55:9a:9b:b5:24:65:
74:6d:b6:3a:54:93:fd:fb:03:2a:92:d6:5c:c2:e2:
58:a8:d6:05:7b:37:d5:54:c3:28:3d:76:bb:ac:6d:
42:31:77:65:14:86:0c:83:b9:13:91:b5:29:40:3d:
21:f2:6d:87:77:54:43:b9:70:f0:22:5e:b0:f7:20:
36:a6:37:45:ea:68:a3:74:7a:5e:ac:a4:0d:8e:4f:
64:ce:c2:3c:6e:de:2b:16:76:9c:3f:72:a0:40:f5:
dd:2e:21:04:e3:c6:d3:0d:24:12:1f:fe:01:91:29:
7b:24:e3:df:e9:95:66:1a:25:ff:ab:f4:ed:ff:17:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:46:7E:92:C2:4F:43:F5:C0:24:C6:E3:77:4C:5C:2B:AB:6B:D4
X509v3 Authority Key Identifier:
keyid:0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:0b:a1:0b:0d:c5:cf:14:06:1a:e3:74:87:67:2b:f0:33:51:
df:a6:fa:b8:fa:4a:ab:79:57:22:35:16:94:27:05:e6:92:8c:
de:0c:55:0b:bd:70:7e:ca:d4:5f:f5:12:47:c1:84:b7:1d:48:
4a:35:1c:33:a0:2a:54:48:5a:c6:e2:84:c5:d1:bd:2b:fa:02:
59:c7:33:04:7c:41:bc:8e:6d:62:a9:c0:90:65:0a:f6:63:9f:
85:57:40:71:83:6d:57:3c:f9:ce:bc:bc:c4:cc:ac:df:c2:10:
9c:90:bb:e0:d1:2e:79:a5:10:3e:23:cd:88:88:bc:48:0a:db:
06:de:da:c1:56:57:75:1a:4e:36:cc:81:40:31:19:f5:96:42:
c7:5a:0e:6b:7f:c3:68:fa:9e:fb:27:4f:b1:fc:9f:b2:71:a0:
ef:79:59:49:20:7c:9f:ba:2d:b0:fe:97:1a:56:8f:ba:c0:08:
61:15:0a:03:10:a6:51:79:84:e2:dc:0b:5f:c2:ad:41:5c:39:
e0:04:96:86:ba:24:69:93:13:65:4c:77:5f:fb:0f:b8:50:d3:
c9:5a:3a:2d:2c:70:a7:b1:e8:ca:5c:8a:c8:4c:66:ad:38:d7:
86:42:47:85:9f:63:30:e8:a4:66:e0:51:69:8a:fd:4f:d6:cb:
80:c1:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:01 2025 by rpki-client