
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: pezo1EHuJcY6U6bXBx7BBql7xKbdTptLV7iWh7ihOu0=
Subject key identifier: 5B:8C:02:58:2B:2C:8E:56:F2:F7:46:27:86:D9:DC:1A:B6:5C:F7:2B
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 0194BC3C0A7306871DB231C64C52D453327C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: k3EDhq9t2uFD022IbqJ0m6xsnLyyVbOxkwJX33ewgw0=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0a:73:06:87:1d:b2:31:c6:4c:52:d4:53:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=5b8c02582b2c8e56f2f7462786d9dc1ab65cf72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4f:98:eb:77:09:83:c5:3a:e5:03:07:98:ce:
7c:e1:44:51:52:e4:29:eb:37:cc:1b:bb:7a:06:52:
ac:8e:7b:79:47:6c:e7:16:7c:d2:b5:0e:7c:33:2a:
37:b8:c0:3e:47:fe:d0:64:2b:ba:bd:96:0f:2a:a0:
44:56:d1:f1:06:e0:f5:b9:01:f2:69:29:6e:f2:a1:
b3:93:d2:64:95:96:32:3f:66:3c:46:29:a1:54:95:
3a:18:03:31:4d:39:53:28:b2:c4:2b:7b:35:0e:2b:
03:7a:8a:65:20:3f:cf:dc:98:80:2a:ff:f7:51:a7:
a8:61:38:fd:6d:0b:86:51:2e:82:9d:87:68:f3:20:
fb:98:42:ca:6a:3d:6b:bc:b2:c9:67:3d:aa:af:c1:
72:6b:b6:30:da:ee:37:e4:04:f9:31:ae:2e:4e:4a:
22:b1:4d:aa:78:6e:b1:60:75:0c:28:60:ad:18:70:
8a:02:06:ba:ce:3c:20:7a:e6:ac:5e:2f:ba:a1:8f:
e6:8f:2b:65:f7:0f:9f:9d:72:75:ad:c4:87:df:28:
c9:b0:80:6f:0f:57:f7:a3:92:90:0c:b4:ff:e2:70:
0c:22:75:2f:c4:6e:ef:bb:eb:0b:09:f3:6b:da:6e:
a4:8f:24:1e:85:01:52:e0:7f:87:ec:4b:f9:72:a6:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8C:02:58:2B:2C:8E:56:F2:F7:46:27:86:D9:DC:1A:B6:5C:F7:2B
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:81:16:93:6a:7f:0c:2a:a8:6e:d9:8c:f6:ca:e8:2c:6c:4e:
74:36:bc:51:cb:c6:db:8c:43:77:99:e6:36:13:37:28:91:bb:
46:ae:0a:4a:00:ae:f2:72:3d:61:c1:c0:71:60:17:b1:f8:0c:
14:c6:8c:ac:e0:69:6d:d8:84:ab:9d:5d:2a:07:52:92:db:96:
32:92:88:96:02:a8:4b:c6:96:a0:f6:c9:3c:7f:b3:98:30:e9:
d8:ec:11:4f:c3:e1:c3:99:52:99:e6:0c:ac:b6:92:d8:60:d1:
98:4d:63:73:d6:a5:f8:c7:80:10:be:00:63:f1:49:51:df:2d:
f0:14:ef:cb:dd:d1:c5:16:12:50:f0:b4:ea:ba:ce:56:57:95:
d3:c7:53:91:c0:0e:15:e3:b3:0b:02:f9:11:94:54:08:36:e3:
c0:e8:6e:ea:9f:20:3e:c2:fc:50:72:1f:b8:83:1d:ee:9b:07:
c2:45:c7:2e:3c:37:04:ec:87:56:42:a2:61:1f:cc:15:5b:e5:
bf:d0:bc:69:f2:2e:cd:80:e4:8f:ef:52:e3:dd:c3:8c:c8:52:
94:75:36:3a:32:c1:b8:ee:d6:d9:76:61:35:cc:ee:cb:72:78:
1e:bd:fe:9e:2d:07:ce:62:f0:e1:9c:28:ce:c6:54:22:12:1a:
a2:0d:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:28 2025 by rpki-client