Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: iApJQ8PsiRhsUZoyAJrja0UauVmw0velppvEChi7Kng=
Subject key identifier: D5:A2:7D:92:20:67:3D:7F:4D:6B:C7:81:43:73:EC:C6:98:D8:80:35
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 0194BD8554B563CB6A66C211A09631860754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 01EC
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: QqdTvrHcC9F+XpM/7oFsqiXZAVLCAp2be8RRQf2ZnHU=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:b5:63:cb:6a:66:c2:11:a0:96:31:86:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=d5a27d9220673d7f4d6bc7814373ecc698d88035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:3b:70:91:de:5f:03:69:ca:c6:13:81:a9:
70:98:e7:4d:4a:9f:5e:71:74:94:04:cb:3f:f9:36:
a9:40:ca:db:71:84:8e:be:cc:77:13:97:1e:45:44:
86:09:70:fa:2d:e0:f8:f0:82:9a:ed:e7:07:92:81:
cb:5a:aa:69:d2:b3:17:9a:b8:e4:57:12:34:27:bc:
ac:a3:f5:2c:6a:20:29:1c:88:27:a6:61:6d:68:b2:
c3:8d:05:3e:7b:b4:76:1d:02:03:6a:f3:1f:b1:a4:
30:22:5a:19:5a:36:52:60:2b:6a:8f:ea:b7:71:b7:
8e:93:e9:a8:f2:4f:7c:c1:60:17:ee:5e:8b:87:11:
d0:21:87:f9:4f:9d:de:6b:e2:95:e3:d2:eb:8a:c3:
e3:a1:e4:fc:52:51:22:e0:c1:b6:22:30:e2:fc:9b:
cf:87:bb:b3:0a:79:1a:7d:30:81:fe:8f:fd:ff:27:
62:7e:d6:4a:91:9d:d1:4e:2b:ad:3d:93:bb:db:d8:
a7:db:ba:2a:77:cf:65:30:d9:32:a3:c0:7b:47:2f:
f2:71:e2:01:bf:08:4a:73:b5:b9:f2:b7:f6:c6:94:
55:85:cc:90:65:76:5b:05:75:7c:7c:4a:ac:07:76:
5b:41:dd:7e:b5:28:d7:b0:d2:b8:af:58:92:6b:5d:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:7D:92:20:67:3D:7F:4D:6B:C7:81:43:73:EC:C6:98:D8:80:35
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7f:6a:69:c3:63:ae:ed:06:a4:f0:ac:a6:3b:3b:72:ae:c5:
09:d8:60:24:8c:cf:a6:1f:91:ce:89:d0:66:10:d8:bf:ad:33:
41:2e:e8:92:d3:5d:67:13:bd:90:12:67:cd:7d:14:c2:d7:12:
59:08:1d:63:1d:72:d5:da:e7:fb:ec:62:d8:99:b1:08:cc:b8:
2f:50:e0:b7:69:14:9d:eb:d0:20:6a:2f:d7:e9:a5:0e:02:e3:
c4:08:82:42:96:a8:ee:1e:b6:37:02:2b:47:c1:37:6e:a2:56:
c3:fc:63:7f:56:b9:3c:9c:ba:6c:97:1e:2b:3a:21:e9:cc:89:
3b:c7:ed:58:06:90:a4:0d:0f:c7:f1:30:ea:e8:bd:ac:0b:5b:
9c:af:d0:0d:74:03:21:00:ce:e9:d7:fa:4d:0b:28:f6:fa:fa:
2a:4b:77:b3:b5:52:29:e6:08:fc:21:9c:b5:99:25:58:f5:55:
05:ab:6d:c8:01:a6:18:6a:48:9b:7f:b0:4d:98:76:d0:89:cc:
f7:d6:be:66:28:37:b0:6c:67:8f:e3:52:9d:99:1e:c3:38:30:
8a:1f:a9:06:e4:fb:e7:3c:66:1d:c3:b9:bc:4d:02:80:82:ec:
91:4b:49:fe:ce:ab:44:e9:c0:92:76:5d:1e:e7:f8:7c:4b:dd:
67:11:57:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVS1Y8tqZsIRoJYxhgdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm
NTQ3YTIwHhcNMjUwMTMxMTgwMDE5WhcNMjUwMjAxMTgwMDE5WjAzMTEwLwYDVQQD
EyhkNWEyN2Q5MjIwNjczZDdmNGQ2YmM3ODE0MzczZWNjNjk4ZDg4MDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDU7cJHeXwNpysYTgalwmOdNSp9e
cXSUBMs/+TapQMrbcYSOvsx3E5ceRUSGCXD6LeD48IKa7ecHkoHLWqpp0rMXmrjk
VxI0J7yso/UsaiApHIgnpmFtaLLDjQU+e7R2HQIDavMfsaQwIloZWjZSYCtqj+q3
cbeOk+mo8k98wWAX7l6LhxHQIYf5T53ea+KV49LrisPjoeT8UlEi4MG2IjDi/JvP
h7uzCnkafTCB/o/9/ydiftZKkZ3RTiutPZO729in27oqd89lMNkyo8B7Ry/yceIB
vwhKc7W58rf2xpRVhcyQZXZbBXV8fEqsB3ZbQd1+tSjXsNK4r1iSa12eLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWifZIgZz1/TWvHgUNz7MaY2IA1MB8GA1UdIwQY
MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt
MTg4MGU3ZWYxZGI0LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0
LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjX9qacNj
ru0GpPCspjs7cq7FCdhgJIzPph+RzonQZhDYv60zQS7oktNdZxO9kBJnzX0UwtcS
WQgdYx1y1drn++xi2JmxCMy4L1Dgt2kUnevQIGov1+mlDgLjxAiCQpao7h62NwIr
R8E3bqJWw/xjf1a5PJy6bJceKzoh6cyJO8ftWAaQpA0Px/Ew6ui9rAtbnK/QDXQD
IQDO6df6TQso9vr6Kkt3s7VSKeYI/CGctZklWPVVBattyAGmGGpIm3+wTZh20InM
99a+Zig3sGxnj+NSnZkewzgwih+pBuT75zxmHcO5vE0CgILskUtJ/s6rROnAknZd
Huf4fEvdZxFXMA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:24 2025 by rpki-client