Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: hSK23Gcg6kuuxsLObkhzuFV4qsxcEnu7S5oNs6TORrs=
Subject key identifier: 91:59:17:0B:22:E9:52:3A:72:E9:A0:87:A2:9C:AD:82:8F:74:FD:3A
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 0194BCA9EB191EF4E534753333B585C9E997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0935
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: BxO+zawbLGOAs59XDT98k3tYm46b0ETaXw6Dhd/RWU0=)
2: xx1FjY8JYYnnymM_Usd0dhEPXMc.roa (hash: jThxXylFfBYyWhSUb/DWJLhZb//oHbnd3oYRtsD1klg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:eb:19:1e:f4:e5:34:75:33:33:b5:85:c9:e9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=9159170b22e9523a72e9a087a29cad828f74fd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:43:e8:14:9f:bd:36:99:c5:8f:48:7e:54:
25:5e:0c:f9:a9:3d:56:e9:52:63:c0:9f:e5:b9:52:
61:f6:61:f7:a0:35:29:69:3b:7e:7d:2e:95:d4:03:
e1:cf:dc:50:24:9a:31:c5:9f:68:2f:5e:bb:d2:c9:
08:34:c0:9c:b7:bb:77:4b:97:f1:16:90:37:79:ab:
f4:10:82:9d:d3:d9:f9:c2:0b:45:5d:6e:be:80:18:
6e:54:ff:c1:02:c0:f2:69:34:6e:0d:38:c5:8e:02:
32:06:09:55:77:78:dd:52:eb:bc:d1:53:19:be:f0:
4f:ca:8d:47:08:70:74:45:d2:ac:6c:5e:2b:ee:79:
7a:3b:02:f8:62:ea:33:d0:44:71:90:9a:3a:65:6d:
e4:9d:14:ef:e7:59:40:86:56:cd:14:fc:e8:6e:3b:
ba:84:fc:7a:69:16:05:ed:11:98:5e:a2:93:dd:24:
c4:6b:61:05:aa:0a:97:2a:d8:d5:3d:4d:87:fd:75:
8a:9c:1a:b3:b1:a8:e5:f7:b2:73:3f:37:73:4a:6a:
98:59:94:82:82:c5:88:b3:34:d7:55:58:fa:95:d2:
02:2c:61:cc:a2:ec:33:99:61:77:aa:b3:28:ab:7e:
b5:8b:6b:1d:88:53:02:ca:38:2c:96:c6:b6:3b:97:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:17:0B:22:E9:52:3A:72:E9:A0:87:A2:9C:AD:82:8F:74:FD:3A
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:fd:93:42:7f:36:5f:07:53:73:02:9f:6e:67:91:5c:6d:
11:89:8f:ea:ae:b7:8c:29:dd:6e:37:e9:d1:e7:29:c5:48:e8:
8d:db:c2:16:eb:c9:a3:2c:b2:e4:11:7a:18:64:8d:0f:d8:df:
c2:79:f0:f6:dd:f7:4f:14:85:72:8d:43:c8:12:15:99:63:de:
9d:0c:1e:2d:7f:ad:86:18:97:b5:79:92:db:d0:79:3b:4e:44:
32:75:15:62:69:5e:27:95:87:f9:5b:7c:4a:b2:15:41:44:8c:
b4:1d:95:17:24:82:5e:1c:78:14:d9:ef:c1:b2:fa:28:7a:1d:
ad:6f:c7:e7:66:55:3f:7a:d8:80:2e:72:29:98:66:47:d6:02:
c8:10:0c:5c:48:09:c7:11:71:7e:39:c2:4f:a6:9b:4b:5f:e5:
8b:e1:11:82:98:59:28:b1:75:9b:37:4b:d7:05:54:ff:83:03:
ab:2e:85:99:e5:70:55:38:20:d9:65:e9:a8:4e:b5:62:8c:da:
44:35:30:7b:74:aa:79:91:76:08:08:13:bb:a7:21:30:47:00:
6c:21:98:59:96:6f:e0:77:a9:27:63:63:83:c8:75:14:a8:56:
b1:a4:12:82:e1:94:a3:f3:55:4d:6c:cf:2b:b7:d0:db:30:53:
55:ba:a0:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qesZHvTlNHUzM7WFyemXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjgyNDE1OGI3MzBjNDQxNjdlYTc3M2E5NzcyMThjYzYy
ZjQxNmEwHhcNMjUwMTMxMTQwMDM5WhcNMjUwMjAxMTQwMDM5WjAzMTEwLwYDVQQD
Eyg5MTU5MTcwYjIyZTk1MjNhNzJlOWEwODdhMjljYWQ4MjhmNzRmZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ5D6BSfvTaZxY9IflQlXgz5qT1W
6VJjwJ/luVJh9mH3oDUpaTt+fS6V1APhz9xQJJoxxZ9oL1670skINMCct7t3S5fx
FpA3eav0EIKd09n5wgtFXW6+gBhuVP/BAsDyaTRuDTjFjgIyBglVd3jdUuu80VMZ
vvBPyo1HCHB0RdKsbF4r7nl6OwL4Yuoz0ERxkJo6ZW3knRTv51lAhlbNFPzobju6
hPx6aRYF7RGYXqKT3STEa2EFqgqXKtjVPU2H/XWKnBqzsajl97JzPzdzSmqYWZSC
gsWIszTXVVj6ldICLGHMouwzmWF3qrMoq361i2sdiFMCyjgslsa2O5fzDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFZFwsi6VI6cumgh6KcrYKPdP06MB8GA1UdIwQY
MBaAFAxoJBWLcwxEFn6nc6l3IYzGL0FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUt
ZmEyMTc2YWFhODQ5LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUtZmEyMTc2YWFhODQ5
LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbb9k0J/
Nl8HU3MCn25nkVxtEYmP6q63jCndbjfp0ecpxUjojdvCFuvJoyyy5BF6GGSND9jf
wnnw9t33TxSFco1DyBIVmWPenQweLX+thhiXtXmS29B5O05EMnUVYmleJ5WH+Vt8
SrIVQUSMtB2VFySCXhx4FNnvwbL6KHodrW/H52ZVP3rYgC5yKZhmR9YCyBAMXEgJ
xxFxfjnCT6abS1/li+ERgphZKLF1mzdL1wVU/4MDqy6FmeVwVTgg2WXpqE61Yoza
RDUwe3SqeZF2CAgTu6chMEcAbCGYWZZv4HepJ2Njg8h1FKhWsaQSguGUo/NVTWzP
K7fQ2zBTVbqg8g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:49 2025 by rpki-client