Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: ycb9uAaWllgFEwcnnp1nQ9iQKvwMS9Dlh+ZsbPyPFI8=
Subject key identifier: 9F:57:41:2D:27:C4:1E:E3:9D:EA:84:33:6C:70:96:CB:8E:81:B7:CA
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 0194BC3BBEA5F99C83B54573C49510AADD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0A34
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: 5bnoXKO7mDvf5kHktQS/7ZrrVgEzHZ/iaJKSvr5jvQo=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:be:a5:f9:9c:83:b5:45:73:c4:95:10:aa:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=9f57412d27c41ee39dea84336c7096cb8e81b7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:80:ed:8d:82:d4:4a:42:cb:1f:76:d6:33:
00:d3:f8:13:7f:06:3d:07:ba:52:02:32:79:47:77:
ff:49:d0:fe:e4:2a:82:28:3d:42:91:32:a5:fa:3b:
57:11:fa:88:e2:92:ef:bd:f6:98:55:5d:28:39:87:
a1:fe:d5:20:53:6d:16:58:5d:d4:76:18:7c:e9:0f:
1c:82:79:d6:66:a9:1b:76:2f:c7:e5:41:ff:6a:ce:
9f:4e:aa:f6:09:7f:32:23:08:5d:11:b9:41:52:1f:
7b:eb:b7:08:18:5c:a9:8b:0c:24:cf:38:ea:fc:52:
0d:6e:ec:34:01:e1:0f:76:45:bb:55:4e:e1:00:ea:
21:87:3c:06:88:7d:a0:67:65:e3:1e:c5:80:4a:63:
e8:c3:95:b2:92:cf:c4:c8:8b:8f:24:9d:6b:e2:03:
fc:c0:c4:01:55:c8:fe:9f:4f:f7:99:ef:12:4a:71:
49:4b:b0:b8:55:56:9e:c0:83:88:63:f1:e9:e1:13:
00:a1:e5:7c:29:1a:73:33:77:e3:9b:15:28:a8:09:
95:c5:34:a5:28:03:5f:67:9a:fe:29:db:ef:4f:94:
6f:aa:03:25:00:99:58:ba:51:1d:7c:36:c7:06:56:
53:1f:b5:2d:54:96:bc:52:84:a6:91:e9:e9:e4:d4:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:41:2D:27:C4:1E:E3:9D:EA:84:33:6C:70:96:CB:8E:81:B7:CA
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e6:dc:a2:ac:56:34:87:e8:44:67:b4:c3:5e:5e:30:24:57:
6c:04:24:25:9e:b4:57:05:50:26:ec:fa:6d:97:bd:ab:8c:d3:
03:ac:96:62:7b:6f:34:28:43:b7:08:35:cc:9d:df:ac:86:9b:
c5:6a:73:f8:1a:ad:fb:86:1d:72:68:15:3e:5b:ca:1b:fd:b1:
5e:67:91:24:f4:d1:fc:11:f7:df:51:2d:93:63:58:69:d2:cf:
14:3f:5c:ab:0f:d8:c6:f1:4b:9c:69:ca:c0:0c:e3:af:af:e6:
b7:c9:bd:dc:61:38:9a:e7:64:7d:3c:dc:4e:98:a4:f2:e3:4c:
85:3c:f1:cc:1f:e4:a1:17:7a:7b:e8:ba:14:78:f6:e1:83:85:
f0:b5:7f:41:ca:6f:0d:eb:39:70:b5:1b:12:6e:78:4f:fc:16:
ca:c0:94:73:78:0f:d0:67:6f:57:72:39:0c:a0:76:2e:e3:72:
21:27:64:4e:fa:86:d2:70:88:ac:d7:34:78:9d:e7:f0:7a:a9:
e5:43:0a:7c:10:38:df:ae:e4:9d:04:6b:f8:fb:74:6d:fb:30:
39:b4:21:4d:01:ee:f0:50:4b:5d:cf:fa:9f:16:43:21:31:bf:
e2:78:8f:fa:19:45:b3:ad:0a:8a:e3:ba:f4:4a:7b:ed:e6:09:
63:2e:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:16 2025 by rpki-client