Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: RFqKLqQS/agwOiKfhHC1HmJ92NLl8ShvLQWwcCDzkiM=
Subject key identifier: 6B:29:63:6F:BA:C2:7D:2A:E1:FE:D3:D8:89:BD:F3:91:34:6A:6C:F2
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 0194BBCDD5B5C8972AA10C562D48DFA324CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 5qU9a0oGWmmroynSN69UsFF4Lyw.roa (hash: ck+/DYuUP9vUcXqAS40voGKy/13DDBxa+VF1/FTp/II=)
2: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: 8zDufriExqXsY6wVM8TFTNBH3B8rjQbdjINpSfJsup0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d5:b5:c8:97:2a:a1:0c:56:2d:48:df:a3:24:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=6b29636fbac27d2ae1fed3d889bdf391346a6cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:bc:eb:35:10:7e:85:99:47:15:50:fd:3b:
d3:e2:dc:1e:4d:ee:f9:70:ed:71:b0:a3:2d:8f:35:
55:99:16:c0:f4:ef:a0:96:dd:1a:6f:17:07:37:1b:
67:0d:7e:dc:02:11:16:59:0d:12:e0:67:cd:4d:dc:
cc:e9:21:f8:02:5e:8e:54:76:03:86:5d:28:d2:12:
b8:7c:0e:a9:48:6f:80:d4:f6:35:59:73:8a:3d:9b:
c1:87:c0:d7:1a:2c:a2:30:89:4c:e4:22:fa:60:99:
45:f7:f7:68:27:a7:53:08:94:bd:1c:25:ed:18:96:
98:c0:50:5d:6e:59:25:c2:d5:32:c4:05:d0:43:f5:
5d:86:33:c4:25:28:41:82:84:ec:88:4b:2e:a2:2f:
80:e4:6c:bc:bb:7a:bd:24:00:77:23:c7:8a:30:fb:
0b:a0:f2:76:99:4f:5a:1f:01:af:09:33:4e:8f:f0:
34:7e:61:eb:1b:d4:5d:db:60:db:6b:cc:0f:b5:ae:
94:4c:6a:01:b3:63:c2:c1:d6:ef:dd:19:a8:d5:fc:
70:28:ca:2e:29:e4:e9:4c:96:c7:f9:cc:64:d8:e3:
8e:58:c7:52:9c:b4:36:69:74:79:1c:38:46:cb:d5:
89:93:8e:67:8c:f0:4f:9b:fe:cb:ce:19:fb:6a:81:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:63:6F:BA:C2:7D:2A:E1:FE:D3:D8:89:BD:F3:91:34:6A:6C:F2
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f4:0a:a6:95:de:7d:3a:c6:3b:46:ea:53:33:b6:b7:9d:61:
56:a5:60:e8:68:42:b2:16:5f:97:7c:23:5c:55:63:a2:3e:31:
85:24:a5:7f:b8:44:e7:ae:28:da:db:28:5c:8f:70:03:8e:8b:
90:38:d9:bf:8d:61:cd:dd:df:89:9f:10:59:64:bc:4a:21:e8:
49:80:d3:37:38:87:a4:31:3c:2d:02:46:85:6f:15:7d:e6:90:
bd:cb:08:a1:a5:df:28:89:58:13:c5:3e:f3:ae:4b:2b:4b:78:
1a:8b:03:a2:76:99:35:3c:16:d1:05:6a:da:65:8d:99:7b:db:
3e:03:f7:54:b5:ac:64:f8:2b:d7:18:13:f0:c0:86:de:b0:42:
df:57:7e:c5:71:6c:de:74:80:bd:46:53:2a:4c:d0:43:ca:b1:
e1:81:b0:ce:94:71:92:09:ec:be:27:9b:e5:e7:36:89:8f:5a:
73:1a:dd:3f:59:d9:a2:9b:01:2a:b1:55:8e:55:99:e2:ad:88:
aa:a9:82:8c:e2:30:31:69:36:bd:4c:9d:f2:76:7c:4c:0e:1f:
f4:44:6f:73:0a:6c:cc:0d:fa:24:d6:a2:30:be:95:9f:51:83:
fb:fb:65:cf:75:ea:fb:72:98:00:61:16:13:2a:ba:67:2a:0f:
6c:d8:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:48:25 2025 by rpki-client