Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: 9LNKhbDMWOiEkgonuPGZ9yrzGKhHlYt8ylnomyGHNps=
Subject key identifier: 05:83:91:D6:2F:32:DF:05:3B:6C:10:29:8A:86:27:91:39:03:CD:56
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 0194BCA9DB79CC814E5BE06AC0ED045FC576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=)
2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: Wlas10IR8NGjFV+mlczPCAbEDBX5aBPU/LQvWzUma0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:db:79:cc:81:4e:5b:e0:6a:c0:ed:04:5f:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=058391d62f32df053b6c10298a8627913903cd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:b1:a1:e2:91:98:0d:84:f7:59:5e:e0:e1:
04:4f:82:33:13:01:2a:b3:64:80:6e:33:9e:22:9a:
0d:6c:2a:3e:4d:87:5e:91:dd:a4:0b:de:d0:20:bf:
c5:e9:d7:5b:39:d9:8b:15:8d:f8:4d:ef:62:de:dc:
d6:b6:f6:6c:59:e3:e4:6f:b2:b7:00:f3:5a:95:4a:
67:3f:26:bd:fa:78:08:02:5e:be:1c:78:8b:da:80:
70:42:12:a8:64:37:a7:c8:df:f6:e1:ab:85:7f:4a:
39:2d:db:56:de:c1:1e:eb:85:0b:14:0a:3c:3c:39:
4a:3e:ee:e4:b7:c5:d9:b0:85:87:0c:1b:f1:d7:01:
be:f3:4d:fa:dc:d1:f2:34:74:d5:1a:28:f7:d0:95:
54:b0:d4:a4:ab:40:8d:50:51:86:41:17:11:ce:a7:
b6:5a:1f:da:df:86:92:fa:5c:56:9f:84:cd:3a:42:
62:d2:ac:89:89:bc:c9:bf:f5:87:70:29:87:9e:10:
d7:71:3e:ec:b8:61:38:33:39:07:9a:9f:a0:2b:7f:
e4:7c:4f:9a:ed:4c:c5:5d:90:a2:a4:01:9c:88:02:
16:e9:20:8e:37:e8:24:80:2b:a3:3f:6a:e7:f7:bb:
52:f2:a4:94:df:7b:3d:0e:2b:bd:00:cc:f5:19:b8:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:83:91:D6:2F:32:DF:05:3B:6C:10:29:8A:86:27:91:39:03:CD:56
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:14:83:25:33:28:2d:a0:54:cb:1d:25:9e:26:f4:fc:ac:82:
49:32:d3:8b:ef:5a:81:f1:c5:3d:90:83:e2:fc:eb:1a:8b:d8:
ea:d9:62:b0:73:62:c6:40:42:c5:d6:5f:d9:12:20:e1:b7:3f:
39:da:6c:61:d9:6e:10:2e:e9:5a:c8:f1:1f:ce:b8:21:57:b1:
36:b3:a9:0f:92:e3:4b:03:fc:2a:92:e0:a0:5b:a2:88:d7:2b:
a0:09:20:32:6a:a2:14:df:5e:ab:a8:8e:b2:cc:e6:30:88:1b:
46:21:fa:ca:f3:76:b9:a9:c5:b8:29:a5:b9:1c:89:53:b0:9f:
bc:8c:15:de:a5:ae:77:2c:dd:2f:84:08:5e:fe:e2:9e:72:b9:
b6:92:84:91:2a:e3:fd:36:24:6e:fb:24:a3:40:49:54:fd:7c:
1d:a3:d0:73:79:94:d3:fa:fc:02:32:1b:25:32:e0:b7:80:c6:
6d:b6:6a:13:4f:0c:d0:3a:63:6d:34:1f:78:a2:a9:50:f1:11:
e6:da:5e:3b:37:73:4a:70:05:e2:41:09:a0:77:78:2a:de:11:
87:3d:a3:00:ff:ca:42:00:ef:d6:1c:46:3f:7a:9d:70:d2:77:
0c:15:eb:0e:c3:c4:7f:93:05:55:11:72:69:39:2d:30:94:b4:
3c:95:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:37 2025 by rpki-client