Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: 6assAVQ+jWoelG69tkNGpynN1UjI+mWlcji5lg9Y4jY=
Subject key identifier: 31:D9:4C:A8:ED:E3:E6:F8:7F:EF:A8:F0:5C:3B:C5:F3:E1:07:F8:D9
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 0194BBCE09F5076155E57CA3C306961EB66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1369
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: c9H8Ld6/2zHu5psny+vrbwQ2PB4gqPAoFQj45EV5hBY=)
2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:f5:07:61:55:e5:7c:a3:c3:06:96:1e:b6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=31d94ca8ede3e6f87fefa8f05c3bc5f3e107f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:ef:3b:e8:67:55:61:4a:6f:b5:46:46:0f:
72:2d:ec:b5:56:20:1f:24:d6:9b:a5:d9:bb:ac:5b:
fd:ba:8f:2e:7d:6a:f7:9b:14:7b:04:f4:c8:5e:c3:
ba:e3:66:ab:c0:6c:c5:cf:73:56:1e:e6:04:69:40:
8e:c1:06:f7:b9:39:31:9f:29:02:74:89:5e:5e:16:
4c:5c:71:bf:4b:12:c6:44:19:f2:56:0f:cc:77:e3:
7b:f6:fd:ec:a9:b4:42:18:d2:0b:52:2c:1b:24:3f:
99:48:b5:d6:63:6c:6c:9f:72:17:93:4c:45:43:2c:
96:c2:bd:51:54:1b:13:ae:12:ab:59:cc:22:f2:20:
30:c0:b0:0c:06:6e:ad:58:6d:1d:35:ce:95:b1:2a:
40:1e:aa:ff:7a:8d:78:cb:d4:bd:0b:0e:b4:56:f1:
f3:a2:39:b2:47:e7:9f:3a:3a:3c:8c:55:b3:67:1a:
e7:fc:7c:a5:a5:26:06:6d:bd:05:02:b7:eb:c5:5a:
c6:05:5f:88:ec:21:fc:c0:a4:c7:bb:a6:74:c0:55:
95:a6:e1:f9:4e:51:25:2d:f0:bb:59:00:d0:3f:c0:
ef:24:07:b2:1c:70:a7:55:b8:fc:92:a1:d5:a7:b1:
30:85:ff:49:f3:a8:c4:5e:56:fc:a1:80:91:19:40:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:4C:A8:ED:E3:E6:F8:7F:EF:A8:F0:5C:3B:C5:F3:E1:07:F8:D9
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9b:a0:b8:e5:1a:c3:93:b2:81:38:41:a3:c4:c7:b3:6d:0f:
72:f5:b4:6f:7a:32:87:37:21:d1:05:f4:ca:01:8c:86:e4:55:
66:91:4f:f9:88:7d:67:21:bb:0a:d0:eb:ce:55:6d:bc:fb:ba:
9f:dc:c8:d3:d1:8d:58:04:85:b8:ba:c1:2f:fb:71:b3:a8:7c:
d7:fe:23:31:6d:5d:a4:82:47:29:f7:a1:f4:3b:c8:db:e1:03:
56:c7:bd:9e:ad:e2:f4:9a:a7:40:8c:f3:1f:89:f5:5b:81:ff:
e1:03:ea:4d:e5:94:a0:77:b5:eb:2a:bf:90:af:4b:3d:4b:2a:
67:d0:55:8f:b3:26:be:65:44:b6:14:d2:46:10:07:50:29:a8:
89:21:13:65:e0:57:a8:9f:43:8f:f4:4e:28:81:b5:84:c4:98:
bb:39:f0:be:31:06:03:8f:7b:6a:b1:83:2b:d3:07:6e:81:3d:
aa:84:3c:13:e0:09:e3:5f:04:53:b5:cc:5a:18:83:bb:2c:3b:
55:6f:63:bd:32:89:b9:10:c9:f8:28:55:8e:cb:cd:ee:bd:00:
49:e3:a5:4f:0a:2e:f7:a6:7b:c5:a0:89:48:bf:c4:70:bf:dc:
87:42:18:c3:2c:f5:c5:5a:3d:63:d0:95:e9:a6:11:6b:91:24:
6c:f6:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:35 2025 by rpki-client