Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: +8AC42pXTNOYRDte7l/gdeqBEe6WyuQK5lbyFr/Kl0E=
Subject key identifier: 62:DE:EE:71:90:0E:31:80:F7:B7:1C:30:D2:7C:B1:CE:A3:40:74:39
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 0194BD17812473C9E2C0357C685BF9468CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: nOWEYhQ3N7PpFW10MTc08S4dLE+dKfTF/Js+L4O/218=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:81:24:73:c9:e2:c0:35:7c:68:5b:f9:46:8c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=62deee71900e3180f7b71c30d27cb1cea3407439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:f4:6e:df:a6:a0:d0:76:84:f1:15:95:0a:
c4:59:a1:a9:d5:fd:3e:2a:d0:60:f1:c2:bf:04:af:
35:64:5c:f5:a9:07:42:99:85:34:c3:8a:70:d1:a5:
1a:79:bc:5b:2a:75:a0:9c:39:3d:3e:03:15:58:15:
c2:42:42:32:28:c1:2e:c8:42:5c:b8:e3:18:70:5a:
5d:0e:00:77:1a:d5:ca:0a:f0:7d:9b:74:18:f7:73:
a7:86:7d:84:1a:e8:b3:a0:5e:22:6f:5a:fb:bc:36:
ef:e8:4c:14:0c:54:3c:37:33:bc:62:15:05:1e:02:
19:91:b0:00:97:ca:e4:43:30:1f:10:da:1a:e5:de:
5a:11:4e:93:3a:55:0d:c1:42:b4:b8:2f:78:ee:28:
b6:ed:71:bb:dd:bc:3a:e4:e4:35:81:9c:12:d3:13:
b3:a4:8a:e5:08:9a:85:7b:68:e1:78:c7:da:01:5a:
ea:50:0c:2c:89:01:b0:b2:61:ff:66:6b:ab:d0:ab:
1a:11:e0:68:33:f4:91:e1:46:91:ee:19:ae:e7:4b:
a6:8e:f4:ce:93:f7:73:59:c2:e3:3d:57:bd:dd:61:
3f:b6:c0:ac:ea:b2:6f:3b:d1:f9:b6:7d:b7:d1:d9:
3b:52:e3:55:60:e2:3a:61:36:2e:3f:6d:22:1d:41:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DE:EE:71:90:0E:31:80:F7:B7:1C:30:D2:7C:B1:CE:A3:40:74:39
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:31:7f:f5:2f:66:1d:5f:1c:60:6f:50:81:e4:55:d6:31:
4f:4a:3e:4c:91:1d:2b:01:86:40:8a:01:cc:21:7f:9f:d7:bf:
73:ef:2e:32:23:03:81:46:c7:0f:0f:d1:e9:45:02:29:8c:4f:
d8:87:1a:99:c9:5b:fe:58:cd:22:01:1c:80:94:bf:37:f5:1f:
9d:f6:2a:8f:c0:20:bc:3a:9a:d4:2c:5e:a8:83:07:89:ab:b2:
03:dd:0f:7a:56:78:4d:25:60:8d:ca:12:8f:ea:87:5f:bc:c3:
4a:96:d3:46:8d:36:a4:61:b3:d2:27:25:5b:16:f5:12:ec:16:
c1:23:e4:d8:b2:fb:4b:c8:29:36:17:28:2d:64:bb:a0:7f:2f:
ea:5a:bc:f8:82:80:58:8f:56:dc:50:2a:46:ee:27:3d:42:d8:
26:e1:0f:54:38:28:59:52:46:c4:99:d1:c6:96:5e:ca:6a:6a:
98:65:8c:b4:21:9d:3d:f2:d6:40:40:24:52:7b:23:58:60:22:
01:69:c5:d1:36:90:73:11:b9:8f:dc:34:d1:a9:8d:26:e1:4a:
0a:b3:33:fc:ac:26:46:cd:c9:89:91:98:51:a4:cb:75:00:0e:
cc:3e:0b:58:95:68:24:c5:71:46:56:70:2b:46:e8:31:c2:dd:
39:42:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:55 2025 by rpki-client