Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: u0b+HDIggwr0YiyNrtXAdrKKxMVnUwf3t2MhQUd4ZPg=
Subject key identifier: DD:E6:B7:D2:05:58:04:5F:6D:43:6C:67:5C:F0:73:BC:AD:CA:26:77
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 0194BC72DCC4F430F403510182BB8026BFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 1319
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: PFSfmRIdO918J0HZGDCjhWjap1uw9AAZw9ZMGGrs+Ow=)
2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:c4:f4:30:f4:03:51:01:82:bb:80:26:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=dde6b7d20558045f6d436c675cf073bcadca2677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:8b:d4:02:03:b9:03:c0:36:e4:43:32:72:
f2:c1:b1:e0:70:53:ce:82:57:1b:50:72:88:55:2e:
7f:72:33:20:74:3b:fc:03:e5:5a:3b:21:75:39:04:
71:97:ba:dc:49:ea:35:e1:d3:82:f7:d9:4b:fe:ca:
c3:12:49:b3:98:e7:2a:8b:76:8f:18:a8:55:c5:92:
d6:a1:62:ef:53:bf:36:80:c2:6f:6d:f2:db:4b:bb:
d7:fb:9a:a0:8c:3d:45:6a:f1:02:4e:19:66:11:b1:
b2:83:fe:28:23:9c:87:5b:98:3e:75:aa:1b:f1:62:
f4:2c:6c:ab:6a:60:29:ef:c0:55:4d:01:44:b7:dd:
02:a2:da:79:1c:ca:7a:0a:5f:7b:37:4d:18:d9:a8:
f7:4d:36:9e:3d:97:80:9b:f4:b3:d2:d8:fe:01:6d:
90:a5:86:ff:99:0f:82:6e:cb:a3:65:41:ef:03:d1:
db:66:89:af:46:54:35:0d:cd:88:32:0c:c4:dc:a8:
0b:5f:f7:0c:84:19:f3:26:67:63:26:83:98:63:4a:
6c:0e:21:c2:38:06:14:2f:66:99:25:9b:91:bb:73:
57:06:3b:ad:3e:92:2b:7e:0b:a5:f1:57:f7:9b:f5:
bd:a1:b9:41:7f:e6:70:8a:83:f9:b3:87:e4:41:e3:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E6:B7:D2:05:58:04:5F:6D:43:6C:67:5C:F0:73:BC:AD:CA:26:77
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:31:28:0b:6c:50:ce:d3:c1:86:a5:3b:36:35:67:15:93:6f:
c9:93:d8:88:7f:3a:b6:15:26:0d:83:97:45:5c:d5:6c:60:69:
c8:a5:52:75:ae:ed:3d:33:19:9f:3d:ad:8e:09:81:fc:6a:d2:
66:de:59:64:9a:7d:e0:47:b7:10:78:45:df:6f:f6:6a:b6:13:
d5:d7:bd:36:28:f0:05:1b:e1:0b:d4:5a:3a:42:e4:54:a3:23:
85:06:fb:3f:9d:2e:ab:bd:81:6b:36:b2:62:da:1c:69:fa:e0:
f5:f0:b5:e0:34:0a:c5:4b:0a:6a:60:6f:f0:97:89:57:63:6e:
ee:a7:ca:bc:cf:91:f2:64:e2:4c:fa:15:d7:d5:76:4e:55:22:
7a:5b:b2:f3:d5:ab:d6:89:bf:74:0b:f7:b2:52:33:37:39:c5:
32:c1:d4:47:08:8e:a6:d2:f4:3a:2e:d8:bf:da:e6:a7:d9:b1:
dc:76:e9:da:87:cf:6f:6d:2a:00:b4:e0:ce:82:47:d9:9f:3a:
3f:4f:6f:d9:a9:23:3f:24:94:0b:46:15:20:dd:8d:a2:9d:00:
65:68:a5:31:b5:90:d3:6d:8b:6d:17:f0:39:e1:96:26:9b:21:
bc:b0:30:c4:b4:81:9c:a6:66:f6:22:fa:90:b3:f6:62:9e:83:
41:91:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:18 2025 by rpki-client