Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: d+jZF6UtswXoi0cUH1usjxSGnDQDvYguhBUXmp/gfwA=
Subject key identifier: BA:85:85:D1:FE:04:70:12:24:B4:85:31:B7:03:FD:66:4D:4C:D6:D1
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 0194BCAA232D3207315CF3769258547DC76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 136E
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: rpeMCMomJSZ2ob4xN5mFitkwWaclWlCim0PW6mllZmE=)
2: X0NMFv3xuHRSXYMGKUXV8IKykec.roa (hash: OjOw3rcSA/T5JCD0NPBFtVQyCjbWRUE+EyaG3m+jzio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:2d:32:07:31:5c:f3:76:92:58:54:7d:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=ba8585d1fe04701224b48531b703fd664d4cd6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:55:56:72:0c:75:05:a5:93:74:e9:7d:a6:
0e:f8:4e:05:53:ff:4c:5d:63:a7:45:22:14:a9:63:
84:0c:11:04:36:d9:0f:b2:cd:fd:5b:bb:57:b7:a1:
9b:65:1a:d7:dd:83:13:30:d4:09:de:7b:57:54:e6:
c7:3c:3c:d5:bd:54:94:45:34:e1:a5:45:08:35:10:
ee:a8:43:bc:c7:2b:7b:29:b0:9b:3b:6f:b1:6e:c8:
41:12:1a:7b:c7:ff:ca:d8:d8:18:ac:ba:74:26:6e:
41:e7:9e:41:a4:a2:2a:45:e0:8d:b0:7f:30:3b:07:
e5:f7:57:6a:6d:82:6b:81:89:5f:12:e9:9f:25:36:
f0:ef:52:c6:b1:79:54:7d:0e:bf:9a:bd:3b:dd:94:
c4:a7:22:0a:81:a6:3c:1e:9b:ff:ce:3c:ff:2c:01:
d0:96:91:8a:8a:c0:37:6a:6e:25:94:c9:10:b7:e7:
a3:ad:a3:fc:4e:71:0d:a7:d2:4c:d3:55:7f:10:d6:
2a:96:e8:ed:3e:02:49:e5:bf:27:db:3a:6d:15:2f:
93:39:47:4c:34:2b:06:23:2e:91:f5:65:96:e8:ec:
23:ae:0c:bf:c4:38:ac:d6:67:0f:96:95:09:87:b2:
d1:83:9d:ba:8d:63:77:b1:eb:e6:d4:77:7b:9f:3a:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:85:D1:FE:04:70:12:24:B4:85:31:B7:03:FD:66:4D:4C:D6:D1
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:50:cb:f2:aa:c0:88:4b:39:58:fb:26:d2:34:a9:da:12:ea:
c0:c8:bf:16:92:60:a6:3e:f0:d5:0a:79:d7:84:35:67:71:ba:
db:90:bd:4e:88:03:c0:75:7a:5f:b6:d4:e4:cb:19:cc:70:c6:
53:4c:b0:e9:d8:6e:a7:d9:a3:92:47:fb:6b:9b:9a:51:1f:6b:
d2:e5:8a:b3:67:13:82:12:40:1b:c1:82:2a:46:82:d6:fe:25:
ef:a2:3c:24:a3:8d:b5:f6:54:89:fb:fc:6f:3a:34:2e:ba:ef:
9c:ec:e4:6e:f0:51:5e:97:bc:58:57:91:a8:af:33:d2:9b:80:
85:bf:ed:b7:95:93:7e:5a:3c:76:64:6c:ce:e4:73:89:ec:c4:
0b:b8:5c:bb:65:4f:7e:57:59:e2:bd:f2:5a:43:a3:7b:ee:3f:
a9:6a:df:32:48:ae:3b:ea:70:85:b8:ec:81:43:5e:0f:16:55:
fd:af:bb:56:69:fa:52:46:27:51:b3:47:23:85:40:ec:91:3f:
02:1b:ec:47:17:4c:01:8e:17:7a:32:c4:16:8a:e1:ea:36:bd:
fb:f4:07:96:43:09:4b:8c:eb:70:14:51:d8:72:b6:75:14:3e:
bb:2f:8f:c8:fc:b4:d9:85:1b:3c:6c:a2:b7:19:d8:cc:79:e4:
84:a9:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:13 2025 by rpki-client