Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: Ocsh2fk6oLw6ufk5nTVLXmSnipgUwrag9kq4w9WtT+M=
Subject key identifier: D2:37:4D:83:20:7B:38:1D:1F:1E:0B:A3:45:4A:63:C4:DB:57:BF:3B
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 0194BCE05F1226539607B5E857F3B402B40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 0C92
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: G1WF1DCXVRLF1tZaA4Crf2lECXN1emew2WPxz1rx5rc=)
2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5f:12:26:53:96:07:b5:e8:57:f3:b4:02:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=d2374d83207b381d1f1e0ba3454a63c4db57bf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:89:06:47:cd:40:51:bb:8a:7c:5e:57:84:
ad:e4:6a:18:43:96:c3:2c:94:cc:63:00:7d:bb:7f:
ea:13:89:e4:1c:3a:d9:4a:e0:e4:b0:10:84:9c:ab:
da:b8:4d:2b:74:c5:46:6b:d6:62:d6:4b:34:b2:57:
0e:2b:00:7d:26:12:0d:ed:ed:de:39:35:12:1c:a6:
97:94:0d:c1:42:4b:e2:d2:83:ca:c3:b5:ce:0c:93:
ad:f3:90:92:ec:37:d1:50:66:e1:99:a4:32:fa:d5:
e1:a3:6f:74:1c:81:29:82:0d:d3:c6:0b:d3:0c:e3:
bb:e7:12:7f:f6:76:1b:9e:bf:9d:cf:0e:4f:c1:67:
15:6f:e6:0f:c1:01:0d:37:36:4c:b7:31:12:c4:d5:
d2:6b:7e:4d:b4:17:38:6a:51:5b:9c:34:81:f7:c0:
54:8a:cb:96:8b:7b:b6:8f:b7:6b:b4:fb:ce:f7:a4:
41:13:63:aa:94:44:5f:c0:66:87:b7:09:3f:4e:dc:
e0:3c:a5:71:af:b6:3b:8b:21:ce:ff:da:e1:fd:0b:
30:93:c5:1f:f4:ff:07:9f:8b:bf:ba:da:55:ab:89:
c8:41:a5:0c:58:f8:33:ca:a7:ab:73:8e:a3:15:0e:
87:7d:44:e1:2c:d7:3d:0e:bf:c4:59:6c:b0:28:7c:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:4D:83:20:7B:38:1D:1F:1E:0B:A3:45:4A:63:C4:DB:57:BF:3B
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7a:76:bc:c1:db:9b:39:f8:c5:fd:ad:bb:c7:1e:e2:7a:ac:
01:f0:86:f6:d3:5a:28:24:42:64:37:bb:ab:b2:e4:2d:d6:fa:
a4:26:22:c6:0f:57:0c:4b:86:15:54:17:2c:e7:e6:0c:08:cd:
b0:b9:8c:a6:ce:55:38:fb:4d:34:9d:1f:07:10:20:4b:b1:dd:
b2:c0:1c:6e:63:76:33:e0:a7:1c:01:ca:6e:f7:04:96:f9:4d:
ea:95:86:84:57:c6:67:a5:be:e5:f8:30:9f:9a:1c:61:a9:47:
31:6c:15:a9:3b:c8:f8:a1:a8:4c:2e:81:1c:d6:ac:0d:84:db:
4c:d1:56:58:32:df:81:8c:fc:5a:9d:35:34:67:30:26:8c:ee:
db:d2:39:31:9a:0a:c6:54:5a:c6:84:a1:d4:da:af:88:20:bf:
68:18:62:1c:26:18:76:74:90:7a:9a:10:cc:36:9d:a3:e5:47:
44:a3:3b:4d:46:c0:47:7a:b0:00:7d:8f:fd:43:56:ee:4e:90:
03:0b:3b:b1:5f:07:56:58:42:4f:6a:4a:93:85:17:ab:82:f6:
a4:6b:4e:5a:b5:4e:fe:a0:ca:f7:2e:25:a3:26:2a:0c:ea:ad:
6c:1b:1e:e0:17:3e:0f:65:27:d3:07:88:79:3d:8d:c3:37:3a:
b4:62:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:28 2025 by rpki-client