Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: 35C3eoPUhp6g2VLuZA4jDH/BLKq9Am49wX88L9rp6R8=
Subject key identifier: D1:0C:88:16:B6:81:B4:55:3A:14:F4:59:0D:72:18:C0:5D:BD:E7:BF
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 0194BD4EB24D4D5B25C96D86E52A8B7DC24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: y9ljVPvdczDf79dFzG91kpAisUfEZXMb9BqMXAV8x1Q=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b2:4d:4d:5b:25:c9:6d:86:e5:2a:8b:7d:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=d10c8816b681b4553a14f4590d7218c05dbde7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:f6:16:62:3b:ac:c6:c1:99:05:6a:53:d8:
93:af:e7:c3:78:75:0b:ad:97:e0:5d:51:43:4b:d9:
a7:c4:0a:c5:27:54:ec:2b:fa:86:a8:1e:e4:f5:b9:
a3:63:17:13:04:41:9b:65:f3:7f:8e:9b:e3:a7:35:
89:b4:a1:e5:55:0d:8b:e1:11:61:87:2f:9c:41:14:
cc:b4:93:71:88:14:17:78:97:72:9d:d9:78:3b:db:
03:fb:af:16:21:d0:59:0f:7b:37:e4:d6:96:88:c9:
81:21:4f:bd:39:5b:23:c4:69:2e:ed:f4:b3:d1:b9:
5e:5e:53:41:1e:45:4b:cc:52:eb:af:5b:9e:ee:39:
dd:ed:a2:4a:dc:01:7a:e2:b6:8e:58:28:17:20:32:
22:70:2a:ce:40:3c:e6:da:78:2b:b7:13:e4:b3:8f:
2a:92:5f:4c:fa:32:20:7f:49:fa:e1:d6:19:7f:d0:
b7:a0:a4:25:ea:74:93:25:a0:89:2f:a2:0b:27:a8:
cd:b4:36:bf:59:1b:f6:04:39:48:3c:08:14:6a:7f:
d2:fb:e6:21:b6:dd:9f:b5:a9:72:fa:7a:dd:b8:c2:
ee:79:cb:49:2e:85:4b:24:1b:07:e7:17:16:f5:3f:
92:1c:22:3b:16:4d:b8:05:9c:d4:4e:61:af:dc:67:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:88:16:B6:81:B4:55:3A:14:F4:59:0D:72:18:C0:5D:BD:E7:BF
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:65:5e:ef:31:ba:42:9c:61:33:c2:fc:ac:07:55:d8:35:d6:
b2:f0:e4:50:bb:ce:24:1c:ce:2c:48:2b:c0:b1:7b:22:e1:92:
23:e7:9b:0c:91:a0:87:9b:3b:fc:11:12:f9:65:8b:6e:6d:e2:
e0:98:91:3c:0c:22:0a:17:ca:29:f2:b7:fc:29:9c:ee:32:2b:
7d:3f:26:58:5e:55:26:03:be:c6:00:99:c8:61:af:41:59:b4:
78:87:8f:bf:c1:96:54:7c:29:a9:c4:3e:c5:dd:64:08:c2:ca:
d7:88:b8:5c:34:a0:bc:c7:0a:e6:1b:bc:c8:7e:b1:db:53:90:
cc:1d:6e:bb:04:b0:59:92:da:9a:fc:36:bd:42:d3:0c:76:98:
48:28:9a:72:56:30:68:64:11:e1:65:86:01:e9:48:4c:7d:e0:
87:73:1c:5b:b0:e3:ea:96:ed:54:ec:08:a0:01:cb:ff:54:5a:
9d:46:35:b1:8f:64:fa:f9:da:cf:92:53:42:78:a9:4c:44:75:
75:a6:7b:eb:28:25:40:5d:ad:ce:fc:ea:83:15:68:b1:5e:fd:
4a:73:7a:01:d9:65:09:e1:4e:3f:c1:35:68:da:ab:97:54:e7:
ca:68:ed:64:20:fb:94:75:c4:ed:3a:d6:a2:2b:d7:88:00:05:
42:c0:67:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrJNTVslyW2G5SqLfcJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzAyYzUzY2I4MDNiMTQ2NDRlNjc1ODdlNWQ2ZmQ2MTJi
NjRiY2MwHhcNMjUwMTMxMTcwMDM4WhcNMjUwMjAxMTcwMDM4WjAzMTEwLwYDVQQD
EyhkMTBjODgxNmI2ODFiNDU1M2ExNGY0NTkwZDcyMThjMDVkYmRlN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow32FmI7rMbBmQVqU9iTr+fDeHUL
rZfgXVFDS9mnxArFJ1TsK/qGqB7k9bmjYxcTBEGbZfN/jpvjpzWJtKHlVQ2L4RFh
hy+cQRTMtJNxiBQXeJdyndl4O9sD+68WIdBZD3s35NaWiMmBIU+9OVsjxGku7fSz
0bleXlNBHkVLzFLrr1ue7jnd7aJK3AF64raOWCgXIDIicCrOQDzm2ngrtxPks48q
kl9M+jIgf0n64dYZf9C3oKQl6nSTJaCJL6ILJ6jNtDa/WRv2BDlIPAgUan/S++Yh
tt2ftaly+nrduMLuectJLoVLJBsH5xcW9T+SHCI7Fk24BZzUTmGv3Ge1ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEMiBa2gbRVOhT0WQ1yGMBdvee/MB8GA1UdIwQY
MBaAFA1wLFPLgDsUZE5nWH5db9YStkvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEt
M2YyNTM5MmRlN2Y5LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEtM2YyNTM5MmRlN2Y5
LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGVe7zG6
QpxhM8L8rAdV2DXWsvDkULvOJBzOLEgrwLF7IuGSI+ebDJGgh5s7/BES+WWLbm3i
4JiRPAwiChfKKfK3/Cmc7jIrfT8mWF5VJgO+xgCZyGGvQVm0eIePv8GWVHwpqcQ+
xd1kCMLK14i4XDSgvMcK5hu8yH6x21OQzB1uuwSwWZLamvw2vULTDHaYSCiaclYw
aGQR4WWGAelITH3gh3McW7Dj6pbtVOwIoAHL/1RanUY1sY9k+vnaz5JTQnipTER1
daZ76yglQF2tzvzqgxVosV79SnN6AdllCeFOP8E1aNqrl1TnymjtZCD7lHXE7TrW
oivXiAAFQsBngQ==
-----END CERTIFICATE-----
Generated at Thu May 1 12:05:08 2025 by rpki-client