Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
File: DUHQpubfLhjCVnMjaNbnaCiTExA.mft (raw, json)
Hash identifier: Yqa0JLW6/isZRMT0vmRmBsqZIYaWkxQPYP+B+8FHPzA=
Subject key identifier: A2:82:88:17:4A:4D:9C:3A:7D:07:A0:A6:1D:32:83:81:BC:1E:DA:A3
Authority key identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
Certificate issuer: /CN=0d41d0a6e6df2e18c256732368d6e76828931310
Certificate serial: 0194BBCE95CA5816FE0D715C17A4AB932BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
Manifest number: 0D71
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 5yn4zHauZM75VAijpeMoQrgxCO4.roa (hash: XNQWDr0wgLOmyX40wHgFFl4XUTUYTIzKWa/lVOSFR8o=)
2: DUHQpubfLhjCVnMjaNbnaCiTExA.crl (hash: +N8jDVZtP5VzWjYszlOdfP/W0lteZWztXLBz41uHuDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:95:ca:58:16:fe:0d:71:5c:17:a4:ab:93:2b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d41d0a6e6df2e18c256732368d6e76828931310
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=a28288174a4d9c3a7d07a0a61d328381bc1edaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:87:57:b3:07:40:8e:e2:16:76:ab:b7:06:
53:ef:b5:dd:55:ad:58:07:1c:2b:17:5d:f8:b8:71:
68:b4:3b:8b:48:83:27:f1:32:1f:cc:09:e8:c5:9a:
d3:da:06:aa:b3:e8:93:95:e6:32:2f:cd:3d:c8:40:
26:9d:51:f6:30:6b:18:fc:4f:5a:03:79:5d:f8:1a:
f7:12:f4:de:ac:6c:ce:53:21:a4:9a:50:5b:2b:3e:
ea:97:60:75:13:cd:e2:46:01:0e:dc:07:81:67:b6:
24:8e:5a:47:a6:47:86:70:59:28:97:16:13:62:17:
f4:df:4c:f5:24:ca:55:16:7e:71:66:de:6e:b3:d2:
ab:46:35:7a:17:30:56:d4:db:ea:bd:c4:31:4a:53:
f9:49:07:08:0a:49:90:e6:cd:7a:a5:b9:1b:6e:22:
bf:b8:c1:ac:9b:21:0d:a3:7f:21:e9:74:b4:75:09:
7d:33:de:8e:ef:c5:4e:28:7d:c1:c6:4f:5e:28:8d:
39:ce:49:e3:fa:5b:d7:53:d4:d8:3d:94:3e:4d:fe:
78:c9:2a:ac:2a:6a:d5:bf:a8:04:8f:5e:a7:d9:2e:
b4:1d:82:fd:c0:9e:e6:0e:09:42:33:64:e8:3b:cc:
d2:3c:35:2f:6c:9b:f2:56:bf:79:89:73:7f:79:9d:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:88:17:4A:4D:9C:3A:7D:07:A0:A6:1D:32:83:81:BC:1E:DA:A3
X509v3 Authority Key Identifier:
keyid:0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b2:63:78:43:03:e3:3b:c2:d6:b3:62:5e:9a:30:55:6c:da:
c7:b5:40:1d:b0:f1:8e:71:89:f3:af:84:7c:0e:b2:f9:ea:ea:
40:12:c7:51:67:b5:68:05:0d:60:fd:a4:d0:44:2c:03:71:47:
e6:d4:15:21:94:f7:ef:27:20:ee:ea:43:11:9b:14:1a:a0:00:
de:d0:5a:9e:f1:c6:30:bf:5c:42:6f:87:06:ed:fd:de:f9:08:
12:10:33:b0:11:15:7a:e4:fb:ef:6b:c7:26:44:1c:64:b1:ba:
e2:b3:6b:b1:db:c0:ce:35:1c:18:17:6a:ea:93:c0:25:c8:8d:
d1:03:55:6b:09:5a:e0:4b:05:fe:e9:cf:70:b9:44:28:65:85:
1d:68:ab:d0:e7:be:79:4e:c3:ec:23:8e:35:1e:9a:61:a8:14:
39:0c:7f:7c:85:89:fb:6d:be:64:bd:dc:5a:75:59:95:6d:7e:
ed:5d:fc:ac:7e:0b:e0:7f:f6:75:cc:22:80:39:41:a6:45:a8:
02:bb:f0:14:7e:a9:a7:ec:46:42:f4:8a:55:f6:d2:bd:15:1a:
03:c8:1b:7e:4f:0d:93:f3:8b:b9:e0:76:58:29:24:a2:54:17:
a5:ac:20:ab:76:62:7b:dc:03:02:25:3b:66:81:b0:6d:fa:2b:
4d:3c:4e:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpXKWBb+DXFcF6SrkyvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNDFkMGE2ZTZkZjJlMThjMjU2NzMyMzY4ZDZlNzY4Mjg5
MzEzMTAwHhcNMjUwMTMxMTAwMTA1WhcNMjUwMjAxMTAwMTA1WjAzMTEwLwYDVQQD
EyhhMjgyODgxNzRhNGQ5YzNhN2QwN2EwYTYxZDMyODM4MWJjMWVkYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQuHV7MHQI7iFnartwZT77XdVa1Y
BxwrF134uHFotDuLSIMn8TIfzAnoxZrT2gaqs+iTleYyL809yEAmnVH2MGsY/E9a
A3ld+Br3EvTerGzOUyGkmlBbKz7ql2B1E83iRgEO3AeBZ7YkjlpHpkeGcFkolxYT
Yhf030z1JMpVFn5xZt5us9KrRjV6FzBW1NvqvcQxSlP5SQcICkmQ5s16pbkbbiK/
uMGsmyENo38h6XS0dQl9M96O78VOKH3Bxk9eKI05zknj+lvXU9TYPZQ+Tf54ySqs
KmrVv6gEj16n2S60HYL9wJ7mDglCM2ToO8zSPDUvbJvyVr95iXN/eZ36jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKCiBdKTZw6fQegph0yg4G8HtqjMB8GA1UdIwQY
MBaAFA1B0Kbm3y4YwlZzI2jW52gokxMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVIUXB1YmZMaGpDVm5NamFOYm5hQ2lURXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ODM3YjItMGRmMC00ZjVhLTgwZGIt
NjJiNjQwYjAyZTJiLzEvRFVIUXB1YmZMaGpDVm5NamFOYm5hQ2lURXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ODM3YjItMGRmMC00ZjVhLTgwZGItNjJiNjQwYjAyZTJi
LzEvRFVIUXB1YmZMaGpDVm5NamFOYm5hQ2lURXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbJjeEMD
4zvC1rNiXpowVWzax7VAHbDxjnGJ86+EfA6y+erqQBLHUWe1aAUNYP2k0EQsA3FH
5tQVIZT37ycg7upDEZsUGqAA3tBanvHGML9cQm+HBu393vkIEhAzsBEVeuT772vH
JkQcZLG64rNrsdvAzjUcGBdq6pPAJciN0QNVawla4EsF/unPcLlEKGWFHWir0Oe+
eU7D7COONR6aYagUOQx/fIWJ+22+ZL3cWnVZlW1+7V38rH4L4H/2dcwigDlBpkWo
ArvwFH6pp+xGQvSKVfbSvRUaA8gbfk8Nk/OLueB2WCkkolQXpawgq3Zie9wDAiU7
ZoGwbforTTxOiQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:16 2025 by rpki-client