Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: 9UiV06rHhX8yQb5wAEGcHGdfQ1geSGLNi8SZ+MTgDYw=
Subject key identifier: E3:9A:10:A4:45:B2:A9:E0:89:AF:D3:AA:3D:54:F3:6B:0C:D2:6D:0B
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 0194BC72DC18D7761D54D00FDEF49D91F4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 0275
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: g1DA+O2k4a+dhXhqPoNd2qFugfKkTZLI9LXu2hdAi3Q=)
2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:18:d7:76:1d:54:d0:0f:de:f4:9d:91:f4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=e39a10a445b2a9e089afd3aa3d54f36b0cd26d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:67:bf:2f:89:d5:d9:4d:fc:26:95:a0:80:
2a:8a:db:82:f9:c1:f6:96:59:3b:c1:64:99:a0:b3:
8e:e2:fd:59:e4:3b:e8:0a:38:65:a1:60:15:03:5e:
bd:b3:fd:4d:29:3e:69:30:0b:14:d4:43:66:c4:d4:
6b:7a:69:10:e4:82:49:9c:ca:cd:e7:a3:71:3c:05:
0e:df:76:46:41:f7:39:e9:a7:cb:55:c5:f9:58:ba:
18:b4:d5:9f:69:84:8c:fa:da:80:23:a8:a4:e1:8d:
c5:51:69:5a:05:59:ef:20:15:b3:c9:78:f3:30:bf:
06:f6:34:91:ba:2a:2b:87:33:34:7f:1d:a5:22:b2:
3f:02:a7:95:03:c7:bc:1a:b6:2d:40:96:2c:4f:e0:
54:00:14:51:c5:75:ca:e6:02:14:bf:80:b9:8a:c4:
f2:19:6e:1b:7e:3a:68:3c:40:07:09:82:d3:7f:1b:
2a:98:2f:69:11:27:ed:bf:a7:aa:e6:9c:a4:6f:ea:
a0:73:68:78:a0:8e:1b:05:bb:f3:03:98:be:78:de:
c4:10:62:2f:19:eb:bc:55:52:81:2c:7d:d8:ae:6f:
37:a6:d8:97:37:d6:b4:1c:3f:bb:cc:6c:3f:6b:c7:
ec:ea:1e:05:a7:2e:79:1e:55:11:75:8e:3a:6f:5a:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:10:A4:45:B2:A9:E0:89:AF:D3:AA:3D:54:F3:6B:0C:D2:6D:0B
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:93:92:24:7f:f7:1f:6c:24:7b:8a:59:dd:a4:5a:af:bc:bf:
89:59:92:e7:d0:21:20:2b:08:3f:89:9f:85:34:11:97:10:eb:
ff:58:e2:89:a1:8a:63:9f:56:29:cd:0e:e6:3a:5a:c2:c3:a9:
25:6a:49:4b:80:85:05:97:56:db:70:b0:de:cb:c2:7c:80:ef:
e2:18:e6:42:5c:26:a3:84:de:5f:9e:20:c8:9d:51:a9:35:e0:
57:8e:48:07:ad:64:8c:3f:01:39:ea:af:d4:76:1b:de:9d:4c:
c6:d2:76:7d:39:2d:3f:44:4f:35:7b:26:b4:b9:5b:6d:1f:90:
2c:4a:d6:a3:47:3c:4a:ae:40:da:e5:de:c3:d4:ae:c1:bd:fc:
f9:9f:72:76:16:8c:d7:83:60:3f:93:6d:79:a5:8e:fc:f9:18:
d3:ee:15:ac:2c:06:25:6d:fd:e6:99:d0:eb:3a:2f:ff:6f:00:
3c:c0:d8:e0:e3:4d:d0:d7:01:f1:b9:eb:04:b0:0b:b4:dc:d0:
85:9e:5b:a1:85:2b:8e:d5:2e:5b:ca:8f:d7:1d:c0:5e:60:33:
ef:cc:9e:53:ce:7e:8d:06:82:39:e0:11:f2:5d:38:2d:d8:99:
aa:fd:fc:fe:6b:f0:96:b7:75:10:10:8f:dd:f7:1d:66:4d:45:
e8:f4:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:14 2025 by rpki-client