Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: 2Rjy6R2Ng1enxWpzMvTLjvepigZM4vvFR17NbG8+Bv0=
Subject key identifier: 91:A7:93:11:68:1C:6C:47:0F:17:12:75:B9:4A:7A:7D:1A:2D:9A:C3
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 0194BC3C3B980CAC3C52DE62FBB368A51BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: L4wTtpkvXPJrJzPFDqB/0OKmbRKYc3BnakVn0RxM6m8=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:98:0c:ac:3c:52:de:62:fb:b3:68:a5:1b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=91a79311681c6c470f171275b94a7a7d1a2d9ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:81:5d:b2:74:26:ac:1f:5d:02:2a:c6:88:
20:9d:82:cd:18:61:11:21:78:c6:52:d1:0d:67:3f:
5b:3f:a8:4c:c0:fa:e0:01:57:a7:57:a2:25:16:9e:
cb:b5:70:48:01:1e:6a:12:bb:4a:6a:14:e8:ab:70:
aa:39:95:d4:86:dc:34:06:e7:96:11:37:ba:c1:bb:
07:56:8a:6a:fa:22:cd:f3:1f:31:90:51:98:b3:68:
72:a4:3a:c8:c1:21:9b:f5:ac:5e:13:38:50:61:ae:
43:59:25:5d:21:54:23:af:93:fa:9e:b0:ac:55:96:
cc:14:a8:23:6f:8c:81:3a:82:7a:dd:09:f9:c9:3b:
5f:53:c7:b5:e8:9e:a1:ce:7f:bf:7d:0b:f9:dd:3f:
46:20:8d:05:b4:88:bf:6a:a9:94:ea:21:8f:71:d3:
53:aa:06:ba:7f:da:27:b8:47:73:e6:45:27:06:97:
52:7d:a2:9e:69:52:bf:da:f1:c7:a4:46:7a:d1:f0:
a1:5f:0b:fd:ec:dc:b5:63:17:0a:2d:9d:62:bb:9c:
28:a7:c2:32:17:b8:46:25:e4:2b:7f:f6:27:f9:66:
f8:bc:e7:ad:61:d2:70:cb:98:f7:cf:6e:e6:d8:6e:
c5:ca:f5:43:b7:8e:14:d5:26:23:3d:84:b2:a5:28:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:93:11:68:1C:6C:47:0F:17:12:75:B9:4A:7A:7D:1A:2D:9A:C3
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d5:06:ee:30:aa:8f:5d:99:1a:b9:6d:09:fc:01:d4:bc:91:
7c:c5:25:a4:66:40:e3:25:5a:6d:b9:3b:82:67:c8:55:00:66:
64:96:14:cf:82:ce:b9:36:8c:60:18:d3:84:3d:d0:c6:5f:2c:
6e:7d:f2:61:ce:55:2d:28:a6:3e:a2:f5:08:04:02:78:3e:93:
4a:f2:8e:5d:28:ec:7a:24:98:ff:c8:cd:7a:5a:ac:9e:d2:29:
37:78:f1:ff:51:15:10:96:be:97:f5:3a:20:a3:05:c8:35:2f:
0d:41:5f:64:8b:21:ca:4a:0e:25:97:20:ee:32:1e:8f:8b:cd:
97:c3:e2:c8:ef:80:5d:63:da:f3:90:25:cb:1e:eb:42:76:21:
5d:b3:d2:27:50:9d:e3:4c:9d:32:e6:25:79:6b:91:3e:6b:75:
24:40:38:c4:5d:d9:43:41:a8:b3:4f:71:be:1a:e0:2a:47:7f:
76:e2:68:75:1e:7b:33:37:2b:69:b0:17:37:b7:e7:1d:ac:4c:
ec:fd:d9:b3:71:02:75:6a:5a:03:5a:4a:88:63:91:41:41:d2:
3c:da:59:da:6d:a0:49:ed:f4:e4:fa:6c:e2:41:6b:0e:a1:43:
a9:0b:71:3d:13:ce:61:40:22:b4:b8:75:85:c2:3a:5f:6b:49:
4d:c4:7f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:57 2025 by rpki-client