Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: HNlkNcKmKuqftge2KdYDoskQJiBmL5Wk2KdbfENZ5Yo=
Subject key identifier: 0E:F8:67:7B:39:93:18:7A:24:84:5E:4C:C1:1A:05:5E:43:06:DA:6D
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 0194BC72DB4CCB253A1066BED07BE01DA36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 1388
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: Qdgl+MC6csD70a/bueHagwUQTQM+f/Ua86yMRjF9Y+M=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:db:4c:cb:25:3a:10:66:be:d0:7b:e0:1d:a3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=0ef8677b3993187a24845e4cc11a055e4306da6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:76:19:59:09:fb:6e:cb:db:e8:74:87:ef:
0f:4b:71:4b:20:3c:1b:c3:c0:f6:ef:2c:43:be:c1:
8a:f7:c5:13:a0:ea:ab:6a:18:43:a0:95:e8:1f:18:
c6:43:6e:04:4f:12:e9:c9:b8:13:2c:a6:76:b7:dc:
2b:a1:92:91:ae:45:7c:55:85:5c:c5:54:ca:6a:60:
59:d6:cd:ea:7a:db:7e:c0:82:fc:d4:cc:10:7c:48:
00:5b:68:bf:9d:2c:87:47:77:37:fc:16:15:e1:0f:
48:5e:cd:14:9b:3c:4e:4a:5e:48:8b:13:f3:55:6e:
e8:6c:96:7c:cc:66:74:11:2a:65:0d:e3:db:19:2b:
dd:a5:56:b7:cc:23:ed:49:fe:43:74:e0:ff:c3:17:
7a:97:b0:36:5d:44:31:af:4f:68:67:7b:a4:f2:5b:
2d:2b:d6:3f:b4:bf:74:69:79:3b:21:c8:fa:80:6c:
6a:32:41:99:cb:6b:b3:a3:7d:43:29:09:80:85:7c:
0b:ea:2d:ca:3d:70:ba:99:dd:cd:df:b2:5e:00:8b:
29:b8:62:48:a4:12:51:41:4f:06:68:44:c4:54:61:
ef:f8:b0:07:2a:9b:e1:53:1f:13:38:9d:3a:f2:34:
a2:96:fc:1b:ad:b3:d1:c4:72:00:6e:87:6e:83:bd:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:67:7B:39:93:18:7A:24:84:5E:4C:C1:1A:05:5E:43:06:DA:6D
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d4:38:9e:4f:45:38:df:5f:18:9c:94:75:42:19:b6:9f:8a:
c4:b8:58:73:9b:4e:db:9a:57:5d:57:50:de:c1:b7:af:d4:a4:
4c:5f:62:6b:0f:1e:19:71:ad:87:9d:dd:bb:08:09:fd:19:5c:
b2:ee:b4:84:11:c6:c4:ef:8f:13:af:91:dd:47:89:f0:3c:75:
0c:d8:3f:b9:13:d8:94:a4:37:5d:43:e7:26:99:33:ff:e6:13:
12:ec:ab:b9:fc:c9:dc:0a:20:1b:ca:23:43:73:85:fb:d2:8c:
89:56:55:55:6f:87:ea:91:43:f4:02:2c:99:55:2e:e5:f6:c1:
3c:13:03:b1:f3:7e:96:22:ca:36:65:44:0a:19:72:0b:61:7d:
e3:f3:b1:29:a3:88:6a:ec:c1:39:cc:dd:b5:d5:f3:c6:28:02:
71:54:29:20:cf:2b:33:86:9a:db:68:15:66:2b:33:a0:8b:56:
d7:c8:cd:f0:e2:e8:63:62:0f:23:c0:85:2b:0f:cb:d8:60:64:
38:64:cf:a4:df:0e:6a:6e:6e:bd:9b:cc:ed:a5:bf:a4:33:d9:
ad:b1:36:32:cf:52:d4:0d:ce:bf:f9:8b:1d:41:b2:29:b4:3c:
35:8b:e5:43:73:41:93:b7:22:d3:3c:a5:ad:bd:33:95:9f:30:
99:bc:df:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cttMyyU6EGa+0HvgHaNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTI3MjBjNTdkYjAyNzYxMGM4MjFjODQwNDdiMTEwYmMz
NmRkYzMwHhcNMjUwMTMxMTMwMDMxWhcNMjUwMjAxMTMwMDMxWjAzMTEwLwYDVQQD
EygwZWY4Njc3YjM5OTMxODdhMjQ4NDVlNGNjMTFhMDU1ZTQzMDZkYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzap2GVkJ+27L2+h0h+8PS3FLIDwb
w8D27yxDvsGK98UToOqrahhDoJXoHxjGQ24ETxLpybgTLKZ2t9wroZKRrkV8VYVc
xVTKamBZ1s3qett+wIL81MwQfEgAW2i/nSyHR3c3/BYV4Q9IXs0UmzxOSl5IixPz
VW7obJZ8zGZ0ESplDePbGSvdpVa3zCPtSf5DdOD/wxd6l7A2XUQxr09oZ3uk8lst
K9Y/tL90aXk7Icj6gGxqMkGZy2uzo31DKQmAhXwL6i3KPXC6md3N37JeAIspuGJI
pBJRQU8GaETEVGHv+LAHKpvhUx8TOJ068jSilvwbrbPRxHIAbodug71fAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA74Z3s5kxh6JIReTMEaBV5DBtptMB8GA1UdIwQY
MBaAFA3icgxX2wJ2EMghyEBHsRC8Nt3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAt
NjMxMGJmNjMwNTFmLzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAtNjMxMGJmNjMwNTFm
LzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNQ4nk9F
ON9fGJyUdUIZtp+KxLhYc5tO25pXXVdQ3sG3r9SkTF9iaw8eGXGth53duwgJ/Rlc
su60hBHGxO+PE6+R3UeJ8Dx1DNg/uRPYlKQ3XUPnJpkz/+YTEuyrufzJ3AogG8oj
Q3OF+9KMiVZVVW+H6pFD9AIsmVUu5fbBPBMDsfN+liLKNmVEChlyC2F94/OxKaOI
auzBOczdtdXzxigCcVQpIM8rM4aa22gVZiszoItW18jN8OLoY2IPI8CFKw/L2GBk
OGTPpN8Oam5uvZvM7aW/pDPZrbE2Ms9S1A3Ov/mLHUGyKbQ8NYvlQ3NBk7ci0zyl
rb0zlZ8wmbzfUw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:23 2025 by rpki-client