Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: R3J58lnWhmnF6Xnr9+NM40GpnXA4+I0uQ9+wB1xmdBU=
Subject key identifier: E6:30:58:E5:4D:F1:FC:1D:26:AC:3C:45:EF:B1:D1:5E:C2:C7:5E:DA
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 0194BC3C81B4313F877844DF493AF53BF8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 0C03
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: 6h/jUO1a8nypWedJPLkPVFbQ0pbYu08mt7CYQtmCgTI=)
2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:81:b4:31:3f:87:78:44:df:49:3a:f5:3b:f8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=e63058e54df1fc1d26ac3c45efb1d15ec2c75eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:a4:aa:bf:b1:97:0e:08:a9:5a:17:e8:f8:
e8:18:8a:01:e8:b3:46:7f:87:35:8a:a3:7a:9f:97:
a1:6f:89:fb:25:f4:b5:24:75:94:71:a7:0b:36:b3:
d3:90:aa:19:9f:11:61:5f:e5:f5:1b:99:15:84:44:
e8:6e:18:85:4b:93:f5:1c:7e:a4:40:3c:c2:ac:87:
bc:41:c0:14:20:85:02:df:27:7e:ac:75:88:b5:78:
52:8a:c0:58:62:ed:c0:23:9c:59:fe:88:70:cc:fd:
1d:b9:f3:32:b3:20:a8:fe:20:0b:01:36:6b:49:5a:
d8:f1:11:4e:fe:e0:3b:af:cb:1c:6b:d2:eb:84:a4:
e3:33:ef:a3:84:49:e1:b4:2e:95:81:a9:d0:55:9c:
0d:73:16:43:7e:4e:df:f3:08:af:a5:81:67:05:8d:
dd:23:2d:ed:92:d1:7d:47:1c:7b:52:55:09:0e:c3:
07:7d:9a:f3:f8:88:13:56:77:d5:c8:78:e7:35:b2:
51:d1:bb:95:b4:05:e5:66:31:1f:ad:aa:f8:78:16:
7e:5e:92:80:8f:4b:b1:b8:81:65:c3:05:b4:4c:b7:
43:8b:8a:69:a1:e7:7f:d4:cb:ca:f3:0e:a4:45:f0:
25:d8:20:01:55:55:48:f3:06:bc:f8:9c:ab:04:b6:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:58:E5:4D:F1:FC:1D:26:AC:3C:45:EF:B1:D1:5E:C2:C7:5E:DA
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:f9:ad:b3:b8:77:46:b4:83:ab:9c:e5:b9:b6:67:ee:5d:
2b:b2:c1:87:ec:5f:da:83:f1:8b:4d:da:bb:2c:1f:05:ff:0f:
ff:9f:68:86:06:86:a2:94:56:7a:95:99:71:77:af:a4:13:a7:
cb:dd:e1:60:79:be:79:36:a3:85:b5:fd:7e:47:a5:33:9f:31:
16:33:cd:5f:c7:05:e4:fd:21:b3:a0:1c:e5:fd:38:5d:21:62:
26:f0:b3:2d:13:49:73:5e:6f:42:db:e2:c0:78:20:a3:5f:b5:
cf:7a:b1:00:61:ad:d8:07:9b:59:0e:63:47:bf:52:34:a9:5d:
4c:ea:21:4c:a4:b5:36:75:67:a9:e1:68:4e:73:56:66:fa:93:
6c:92:19:bd:16:e4:28:ea:2f:4f:7c:a1:c5:b0:07:cc:0b:d2:
56:9a:66:8b:2d:0d:c9:21:27:82:38:54:03:db:99:88:e3:3a:
7f:35:4f:85:2e:fe:a6:4f:63:29:0b:2b:4a:32:e3:87:27:70:
74:54:9d:7c:c1:4b:9c:23:f8:8f:b4:de:c4:b7:62:ec:45:85:
ca:06:28:d7:46:57:2b:81:be:b0:c3:fd:51:83:c0:e9:f2:69:
63:bd:b1:06:d2:e1:17:8f:e4:7b:d2:b4:3d:15:5d:7b:27:45:
7b:39:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:10 2025 by rpki-client