Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: y9WPsP1a7l+Tomcj7PVNdyeJB7EzB7RJUi98yTsnOVE=
Subject key identifier: CB:06:F4:5B:D2:11:10:BF:A1:8B:11:0C:6C:4C:88:E8:05:E1:26:BF
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 0194BD852F4F99FDD884E75FC55C3C964C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 0D37
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: JCB+pniZnNTW2Yfy63ngD8sCqietT+WZaN5W3ukedYA=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2f:4f:99:fd:d8:84:e7:5f:c5:5c:3c:96:4c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=cb06f45bd21110bfa18b110c6c4c88e805e126bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:b0:9f:65:e3:99:a6:03:5c:82:65:59:82:
86:ad:f8:02:58:40:52:6a:47:07:19:06:82:80:0c:
36:c7:bf:a0:de:ef:41:19:d1:a4:98:9e:a6:b1:82:
d5:1c:4d:50:cf:69:23:2e:72:bd:28:df:a6:6e:88:
b0:7d:8e:64:da:e2:ed:9f:05:ee:bf:f1:f8:2f:7e:
c2:53:94:16:52:b7:73:c1:71:c1:d5:97:4c:19:0c:
b5:09:f4:89:eb:dd:d2:eb:41:b5:f0:14:eb:7b:24:
93:55:e3:9d:7a:81:5f:ce:0f:67:54:cf:a8:5f:2a:
65:3f:db:19:36:ab:8f:6d:34:da:cb:05:d5:74:76:
b7:0d:a5:98:15:ef:6d:6d:16:4a:55:8e:90:16:e2:
27:56:69:a1:47:f7:d1:74:1d:da:8c:52:a3:60:f0:
85:0f:dc:2a:9c:7a:5b:8a:eb:a8:c6:10:6e:5b:ea:
24:70:35:a0:cc:12:f9:19:8a:38:f6:10:da:54:c9:
e5:fd:30:62:07:36:3d:46:3d:13:bb:2c:11:0b:10:
86:34:56:6e:35:6d:29:27:0f:90:2a:54:28:3e:ba:
d6:00:85:a4:a8:08:6d:ca:6f:0b:98:74:d6:0c:bd:
20:3a:49:9f:9c:fc:51:2b:85:89:90:f9:61:f1:c5:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:F4:5B:D2:11:10:BF:A1:8B:11:0C:6C:4C:88:E8:05:E1:26:BF
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:93:7c:74:4b:d7:e3:9a:13:e4:c0:41:cc:fb:b7:dd:41:c7:
4b:e5:dc:46:a5:28:9a:ca:53:96:1a:5c:da:37:4d:84:2b:0c:
ed:20:ec:57:d8:ff:db:d9:2d:e5:c6:e1:ea:f7:46:3c:07:ce:
ec:4a:58:6b:4a:23:43:d1:85:c7:5c:07:ab:32:3f:af:0d:0f:
53:29:d1:ae:ef:b9:bb:bb:32:9c:4c:4d:48:dd:e2:a9:e8:07:
df:f1:ad:4f:a5:96:0c:ff:bd:ae:ef:16:c2:d0:3c:49:8a:a1:
e3:e9:ae:19:8a:92:fb:11:22:ea:f1:ca:13:21:d7:25:9d:97:
95:6e:e8:03:22:6c:76:fd:77:3e:ce:0e:c3:5a:ab:07:ec:d8:
c7:c2:ad:f3:8f:94:d5:d0:d8:f9:e9:f0:4b:87:f1:95:9a:49:
52:4d:08:86:aa:a6:cc:21:7c:89:79:00:f7:33:07:51:a4:30:
74:fc:ab:f5:64:a3:a5:e0:f6:f1:78:31:7c:21:96:7a:46:9a:
2c:a3:13:23:e4:c0:e6:99:b1:a7:c9:fe:c1:27:3d:30:a6:3d:
07:5c:73:84:51:07:ea:ff:6d:b1:56:6b:0a:cf:50:bb:69:77:
13:21:34:2d:83:e6:b4:68:6f:d8:97:d6:b4:1a:aa:c8:54:7c:
96:4a:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:50 2025 by rpki-client