Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: honczoFLB6KQ300jgyk2Q5zrH9PsYJD/2sn7viRkmyg=
Subject key identifier: 87:CA:1A:A1:99:9A:C9:4D:94:03:EF:E9:9B:A5:DC:D0:24:93:D3:20
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 0194BCE091593A041F99B176C605978BA945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 02CF
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: S2aUHLSAsw7ca6EqFfxYUIzYZU/Zgt7RBLeTC8hTHTU=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:91:59:3a:04:1f:99:b1:76:c6:05:97:8b:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=87ca1aa1999ac94d9403efe99ba5dcd02493d320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:05:b2:5d:08:74:e6:f2:74:0d:a6:73:89:
a3:b2:76:46:7a:de:2e:d1:3c:a6:9b:4e:4f:b0:7f:
26:cd:d4:84:30:7f:93:0a:56:06:02:b4:da:f5:26:
6f:40:b8:35:7b:ca:99:86:ca:84:62:6c:b7:b4:4a:
ad:ca:59:06:d0:93:cb:d0:f6:5d:08:da:b3:12:d4:
1b:5d:83:94:53:f2:69:53:40:c5:1c:9b:a3:94:69:
f0:b3:7f:0b:a3:b7:4b:7e:74:f6:6a:18:29:29:fd:
27:05:ab:49:05:04:df:ce:72:bb:97:2e:92:7e:eb:
9f:de:90:6a:2b:a6:fe:7f:25:54:bb:9d:f4:e3:aa:
a0:5a:06:9a:a0:6e:b9:50:35:d0:44:64:75:c3:7b:
93:a4:47:69:ac:c6:2b:91:da:9e:22:08:97:a9:67:
c2:30:4b:8a:c4:e3:67:51:1b:d1:7f:14:c4:21:e5:
95:8b:05:b1:d1:39:1f:44:05:3d:c6:e1:98:bb:e1:
fc:67:e1:82:bd:27:40:b6:18:1b:75:7a:cb:61:8b:
3e:5c:e0:15:57:6f:c0:be:ae:a5:21:11:1d:75:ab:
3c:7e:43:b0:95:5f:b7:47:dd:73:73:73:3d:ef:7c:
56:39:22:89:10:d6:e9:f0:c7:bb:bb:e3:4f:38:65:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CA:1A:A1:99:9A:C9:4D:94:03:EF:E9:9B:A5:DC:D0:24:93:D3:20
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:31:f2:4f:1d:30:32:fd:95:bb:2e:93:8d:94:29:19:15:f5:
ed:f7:70:4a:74:87:4a:26:f8:cb:ce:49:ca:d7:7e:44:80:06:
52:a7:19:ce:6b:fe:9f:c7:8b:a3:6d:c8:38:1f:9c:bd:a3:91:
de:15:ef:1f:26:25:65:0e:49:e1:02:88:e3:b6:43:db:c5:9e:
7f:a7:73:d7:da:39:87:d1:7e:b0:98:1b:ce:3a:24:e0:f2:ea:
e5:cf:5e:01:ca:31:74:2f:01:ef:ee:05:99:54:21:97:c6:03:
1b:de:7f:cb:4b:a9:b7:dc:e5:03:b7:21:61:01:7d:35:6e:f9:
52:42:e7:b3:c6:37:f0:99:3a:2b:c1:95:85:ea:60:f3:e8:84:
7b:d6:57:cd:42:a2:73:17:11:ad:3d:33:4a:71:be:93:ab:08:
36:af:5f:9b:c0:1d:ee:e2:ff:6f:77:41:a4:68:b2:2a:cc:70:
e5:b6:ca:90:25:8f:4a:12:38:84:8c:56:25:4a:e0:94:7e:87:
c7:63:0f:78:ff:0c:55:08:02:4c:98:6a:ea:05:5d:e0:69:da:
65:70:57:66:dd:20:d8:72:96:95:89:0e:a0:de:2c:2b:4d:c2:
db:66:d4:fa:8c:e4:3f:77:92:9e:c2:8c:bc:a2:a6:a3:a5:b1:
47:dd:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:49 2025 by rpki-client