Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: MRYZS98tsEEwbkzKxReafsIVGnMLEbIeV/MBHcgEfeA=
Subject key identifier: 7B:A2:17:12:80:AF:24:87:8D:B6:B1:31:76:99:3E:65:07:D3:FA:20
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 0194BC3C1F762F484DF7CBD777A12373EF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 0513
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: /81h47gO2uMpA4yn07QxvY52dmNCiZSHQrwbJm7tQe0=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1f:76:2f:48:4d:f7:cb:d7:77:a1:23:73:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=7ba2171280af24878db6b13176993e6507d3fa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:ae:0e:fb:05:97:a4:8c:c8:e8:8f:bf:24:
4c:ad:70:4b:ab:93:9d:f3:92:06:d0:0b:d3:34:32:
05:1a:2f:7d:f6:a3:39:04:b1:35:fe:44:2a:87:53:
02:65:c6:45:4b:23:2e:24:c7:fe:4d:28:23:98:01:
7c:33:c8:c6:23:e8:a3:6d:46:fb:82:90:f0:db:41:
11:26:6c:cb:31:5c:20:8d:50:c8:68:92:96:ec:90:
f9:04:69:58:df:bf:2f:92:70:cd:20:46:f2:b3:4c:
82:79:44:63:f0:ba:a0:86:fe:33:9b:10:88:b4:ca:
14:d9:42:8c:26:95:72:1d:f0:8b:c8:a7:27:0f:4d:
41:bd:2b:34:6f:a5:9b:cf:49:0b:7c:ca:09:1d:67:
20:cb:8d:01:2b:72:48:78:8d:9f:a4:2b:1d:ab:39:
c0:99:dc:9f:11:de:fe:ef:4a:55:60:f2:ee:78:8a:
cd:34:af:5b:a8:a3:91:cd:f4:73:27:2b:a6:76:28:
11:8c:cc:4a:9d:a1:03:0c:7c:b7:12:5b:8c:dc:75:
6b:d7:52:d8:34:b1:d4:0a:5a:22:61:34:bf:fe:6e:
a3:e2:9f:e2:cd:43:f6:6e:62:28:f4:41:80:c8:b1:
9a:3f:51:71:80:4a:bd:2f:21:ef:64:36:fc:49:67:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:17:12:80:AF:24:87:8D:B6:B1:31:76:99:3E:65:07:D3:FA:20
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ce:79:10:00:10:b9:af:2a:5d:ef:5f:47:57:9c:85:cd:b2:
47:33:bb:3f:5a:b3:fb:a8:f8:3f:f6:48:30:40:66:0c:7c:35:
2c:63:b1:cb:4b:da:96:d1:90:f5:0f:c1:d4:10:f9:d2:c0:52:
71:d5:e9:44:d4:ef:6e:9d:a0:60:e1:6a:08:67:af:1b:e5:a0:
80:bc:d5:68:2f:a6:6e:89:a6:c1:90:40:4e:5f:62:27:88:87:
01:d1:90:f6:4e:f0:e0:ed:01:02:fd:6f:8d:2c:d3:25:ec:9d:
a7:c5:8d:36:ab:d5:51:92:43:ff:85:7b:78:9c:3a:1d:ed:fa:
bd:62:74:c9:59:05:4c:5a:5b:11:96:71:8d:bf:bf:83:95:3c:
e9:c2:45:10:6a:61:d4:29:64:9a:7e:22:65:1e:f4:16:34:7f:
2f:3d:67:74:8a:7f:ea:a1:9a:1f:0d:54:9a:d8:38:19:4c:b8:
4a:3f:2d:88:fc:d4:9a:07:81:04:dc:f6:81:97:e6:12:39:07:
89:ac:b3:fc:f8:c3:f8:52:cb:9e:5d:a7:a1:78:00:33:92:6e:
cb:57:00:94:76:cf:55:0f:a8:f6:cc:e5:eb:45:38:61:6e:e7:
68:bb:02:6a:05:13:ec:bb:2c:bf:45:70:16:dc:a6:20:ac:78:
b1:6e:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:23:50 2025 by rpki-client