Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: A8plnsqOQsRPnWOH8FOa+yy+ZvFt+43DZ4gyRJUHBKI=
Subject key identifier: D8:C3:C8:90:A5:14:EE:F6:7A:75:77:8F:24:E3:4F:F4:99:FB:05:FB
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 0194BD854C07A211F9125B8BB42EA621A767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0B5C
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: XQ4GwQ1T4sMy3BlxBXqJeFJVPSNNSuso5YdF5EbQyQ8=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4c:07:a2:11:f9:12:5b:8b:b4:2e:a6:21:a7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=d8c3c890a514eef67a75778f24e34ff499fb05fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:da:3e:d8:5a:73:78:9b:9a:74:71:5c:a3:
08:ea:65:2b:bf:69:ba:28:29:79:8b:38:ce:36:97:
ba:7c:8b:92:e0:78:6e:c3:18:37:7b:89:47:bd:2c:
fe:85:10:ba:37:7e:c0:50:66:7c:b7:f5:bd:1e:c4:
ca:e6:2d:6a:9a:2a:a9:95:e2:5c:f7:29:5a:c8:19:
48:46:e7:a8:7c:28:e4:c8:53:44:7e:82:a6:63:bc:
39:9d:d3:0b:21:94:32:95:8b:52:73:2c:1a:d5:65:
ed:6e:1a:44:aa:87:1a:e7:73:b9:ab:8c:36:b2:56:
e1:48:51:9c:9d:8d:bd:c9:e8:4f:bb:93:ff:e6:c0:
b0:4f:31:b4:2c:ab:f8:89:48:bb:ca:d8:9c:af:83:
b5:8e:53:d2:4b:39:65:2e:bd:1e:a6:02:53:f0:1c:
d6:c2:ba:22:91:08:9a:b2:6c:a0:d5:7c:54:9c:fe:
12:e6:67:5a:67:63:06:92:56:c4:f6:d3:6e:70:44:
88:50:7e:a3:de:a8:c2:79:c1:63:39:a8:bf:c0:45:
81:8d:c8:10:32:c6:87:89:cb:f1:3e:2a:67:f6:4e:
17:43:14:27:5b:95:ef:de:ad:52:fb:00:b8:c3:38:
ff:ea:9f:5e:04:73:b0:22:35:73:b4:ac:e0:f9:f8:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:C8:90:A5:14:EE:F6:7A:75:77:8F:24:E3:4F:F4:99:FB:05:FB
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1c:7d:db:a5:9c:49:d5:fb:af:72:6a:7f:48:cd:95:97:f8:
b1:15:a6:c1:d6:65:5b:df:a1:82:2d:fe:e3:6d:a9:98:db:e3:
2c:26:44:c5:bb:71:5a:b7:9f:52:28:22:c6:56:9e:2b:e7:e7:
6f:b4:c3:da:27:c5:b2:b1:fa:c9:a4:69:92:6a:c2:04:19:cd:
93:9f:5b:90:b9:19:17:22:ce:5d:f5:6a:e7:fd:ec:b9:49:cf:
24:69:83:e6:bb:9e:13:b3:40:c5:9b:a1:27:a9:20:a9:13:39:
eb:ae:de:5d:69:c3:88:08:be:1a:16:50:df:33:cb:99:ca:cb:
0c:be:34:62:a5:75:78:37:ea:f9:e8:db:c1:2f:80:0f:3b:25:
35:62:07:b8:b1:1d:80:7f:2e:3b:22:d0:3b:96:a4:7d:e8:d0:
02:12:c8:55:93:5e:03:af:5f:70:32:33:6f:6f:7c:3e:aa:b0:
fc:f5:e5:ec:66:55:99:36:88:8f:15:89:60:79:fc:2c:93:97:
58:e2:45:d4:ac:9d:c3:3f:41:0b:5e:79:f5:ed:c9:d4:31:df:
c8:98:d9:ae:6f:6d:a4:7a:20:ac:2e:28:29:38:26:71:e1:ec:
0f:0f:a9:66:9b:ee:26:0d:be:65:17:4f:e9:11:43:b1:15:6c:
1d:84:69:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUwHohH5EluLtC6mIadnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYTNjYmYxZTBlODU2ZWE0YzUzYjVhYmFlODY1OTRlYzk5
MzM5ODIwHhcNMjUwMTMxMTgwMDE3WhcNMjUwMjAxMTgwMDE3WjAzMTEwLwYDVQQD
EyhkOGMzYzg5MGE1MTRlZWY2N2E3NTc3OGYyNGUzNGZmNDk5ZmIwNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXaPthac3ibmnRxXKMI6mUrv2m6
KCl5izjONpe6fIuS4Hhuwxg3e4lHvSz+hRC6N37AUGZ8t/W9HsTK5i1qmiqpleJc
9ylayBlIRueofCjkyFNEfoKmY7w5ndMLIZQylYtScywa1WXtbhpEqoca53O5q4w2
slbhSFGcnY29yehPu5P/5sCwTzG0LKv4iUi7yticr4O1jlPSSzllLr0epgJT8BzW
wroikQiasmyg1XxUnP4S5mdaZ2MGklbE9tNucESIUH6j3qjCecFjOai/wEWBjcgQ
MsaHicvxPipn9k4XQxQnW5Xv3q1S+wC4wzj/6p9eBHOwIjVztKzg+fgjNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjDyJClFO72enV3jyTjT/SZ+wX7MB8GA1UdIwQY
MBaAFA2jy/Hg6FbqTFO1q66GWU7JkzmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC81Mzc0MWUtOTM5Mi00ZDE5LTk5ZDIt
Y2VkMjk2NTBhMjgwLzEvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC81Mzc0MWUtOTM5Mi00ZDE5LTk5ZDItY2VkMjk2NTBhMjgw
LzEvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRx926Wc
SdX7r3Jqf0jNlZf4sRWmwdZlW9+hgi3+422pmNvjLCZExbtxWrefUigixlaeK+fn
b7TD2ifFsrH6yaRpkmrCBBnNk59bkLkZFyLOXfVq5/3suUnPJGmD5rueE7NAxZuh
J6kgqRM5667eXWnDiAi+GhZQ3zPLmcrLDL40YqV1eDfq+ejbwS+ADzslNWIHuLEd
gH8uOyLQO5akfejQAhLIVZNeA69fcDIzb298Pqqw/PXl7GZVmTaIjxWJYHn8LJOX
WOJF1Kydwz9BC1559e3J1DHfyJjZrm9tpHogrC4oKTgmceHsDw+pZpvuJg2+ZRdP
6RFDsRVsHYRpMg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:21 2025 by rpki-client