Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: 7LFGwNu/eWUXpFVcCxj0xsSGlENCN9EocO42wgg33Xg=
Subject key identifier: 47:24:95:01:D0:41:7E:98:91:4F:D1:9F:C1:69:D4:52:86:3A:6C:A7
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 0194BD4EBD9090BC1649A296D8BF79BB5C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: t7kKKcZz1b4Ex4teAJnTOflEU5bt8Ndb4Y8AyfVkvlc=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bd:90:90:bc:16:49:a2:96:d8:bf:79:bb:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=47249501d0417e98914fd19fc169d452863a6ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:f1:3c:91:12:6b:ef:6b:e7:e8:cb:06:67:
ee:13:67:e4:fc:ad:ac:fe:96:de:95:e3:56:10:8e:
94:0c:9a:11:0d:a7:07:42:e8:bb:12:07:84:61:cc:
44:30:c0:96:d1:cb:58:49:b4:0e:ab:19:27:f1:fd:
3a:89:12:f3:05:10:39:72:53:b3:07:fa:3c:6e:4c:
3c:a3:37:99:50:6d:0e:38:f3:94:06:b4:b5:47:fe:
9c:10:ad:0c:43:6e:c8:0f:ca:fa:d8:f4:42:bc:f9:
d1:0d:86:28:2e:7d:42:8f:2b:96:2b:0e:ab:93:1d:
af:1c:95:1d:46:29:89:70:0f:1a:5e:26:1f:11:17:
b1:ce:59:77:34:8f:b2:b2:0a:9d:b3:7c:e8:50:c6:
f8:9e:72:f7:e0:55:26:04:53:fa:1b:c2:84:43:98:
09:65:ef:4b:6d:3e:8f:88:3f:9a:a0:69:73:3e:fc:
25:15:d5:8f:7d:d5:3c:82:07:65:e6:52:66:30:58:
70:7e:0e:37:e1:50:f2:0c:a6:db:fc:58:de:81:02:
1f:d4:8d:50:ea:1b:76:19:97:8d:f0:ae:b9:45:50:
44:22:2a:1b:7a:ec:6e:67:34:ab:16:95:87:bc:7d:
12:5a:a2:79:18:1c:a5:43:13:79:6b:73:d8:7e:05:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:24:95:01:D0:41:7E:98:91:4F:D1:9F:C1:69:D4:52:86:3A:6C:A7
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:10:bb:84:77:37:f8:29:00:18:38:92:c9:4d:cc:f7:5c:20:
e1:21:8e:be:02:0e:b2:ad:1e:a3:36:9d:a5:2b:5b:6b:d9:be:
21:8e:22:28:e8:73:18:a8:09:be:fd:7e:25:c0:2b:bd:a2:fb:
4b:55:5c:dd:26:69:27:22:07:a6:57:51:a4:71:14:8e:6c:28:
53:49:f8:4b:e8:fb:66:65:c9:f9:0c:f1:f9:8d:2b:bf:6a:23:
57:bc:f3:e8:e5:32:ee:ea:d8:49:6c:cd:29:d2:cb:9c:66:1e:
70:05:16:c1:5c:29:b6:ed:68:49:71:bf:ea:dc:63:e1:25:67:
c5:ba:f8:83:70:e7:16:f6:01:fa:5b:ec:28:08:5e:de:7a:1e:
03:07:a6:a7:e7:30:84:df:16:19:26:b8:e6:e0:bf:ad:64:ff:
34:14:6f:62:95:b7:52:c0:3e:80:40:96:41:ce:fa:97:dd:aa:
88:fd:8d:49:97:4e:6f:47:47:0a:83:7c:3b:34:5c:e9:09:fd:
f8:72:e7:98:5e:40:eb:b8:4d:73:71:f2:7a:76:51:02:b3:25:
75:9b:ad:e0:c4:d7:da:73:74:e4:00:3a:a3:3a:99:db:55:77:
f0:64:37:25:17:ac:e2:b8:e2:b4:6d:ac:31:4f:f4:06:fc:bf:
b6:ef:39:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tr2QkLwWSaKW2L95u1wOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh
YzhmNTIwHhcNMjUwMTMxMTcwMDQxWhcNMjUwMjAxMTcwMDQxWjAzMTEwLwYDVQQD
Eyg0NzI0OTUwMWQwNDE3ZTk4OTE0ZmQxOWZjMTY5ZDQ1Mjg2M2E2Y2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HbxPJESa+9r5+jLBmfuE2fk/K2s
/pbeleNWEI6UDJoRDacHQui7EgeEYcxEMMCW0ctYSbQOqxkn8f06iRLzBRA5clOz
B/o8bkw8ozeZUG0OOPOUBrS1R/6cEK0MQ27ID8r62PRCvPnRDYYoLn1CjyuWKw6r
kx2vHJUdRimJcA8aXiYfERexzll3NI+ysgqds3zoUMb4nnL34FUmBFP6G8KEQ5gJ
Ze9LbT6PiD+aoGlzPvwlFdWPfdU8ggdl5lJmMFhwfg434VDyDKbb/FjegQIf1I1Q
6ht2GZeN8K65RVBEIiobeuxuZzSrFpWHvH0SWqJ5GBylQxN5a3PYfgW/BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcklQHQQX6YkU/Rn8Fp1FKGOmynMB8GA1UdIwQY
MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt
YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj
LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBC7hHc3
+CkAGDiSyU3M91wg4SGOvgIOsq0eozadpStba9m+IY4iKOhzGKgJvv1+JcArvaL7
S1Vc3SZpJyIHpldRpHEUjmwoU0n4S+j7ZmXJ+Qzx+Y0rv2ojV7zz6OUy7urYSWzN
KdLLnGYecAUWwVwptu1oSXG/6txj4SVnxbr4g3DnFvYB+lvsKAhe3noeAwemp+cw
hN8WGSa45uC/rWT/NBRvYpW3UsA+gECWQc76l92qiP2NSZdOb0dHCoN8OzRc6Qn9
+HLnmF5A67hNc3HyenZRArMldZut4MTX2nN05AA6ozqZ21V38GQ3JRes4rjitG2s
MU/0Bvy/tu854Q==
-----END CERTIFICATE-----
Generated at Thu May 1 08:20:43 2025 by rpki-client