Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: obscpg4sDqftZjyY0kXMATKuWjQtfCrrhuUyYdxhxBI=
Subject key identifier: 74:20:38:C6:E2:6E:3A:D9:60:0A:F0:4F:76:C9:AE:8C:D7:A2:B8:6B
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 0194BD85B56517B4FE1CEAF1DFE74D175133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: C9
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: 9mWgXaDNZVWVWbbJLvTKT9T19HNMCJxtBqdLf4OnH18=)
2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:65:17:b4:fe:1c:ea:f1:df:e7:4d:17:51:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=742038c6e26e3ad9600af04f76c9ae8cd7a2b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:dc:7d:f0:76:ea:8c:f6:e9:5e:ca:42:92:
2e:d7:e9:26:8b:02:da:55:57:63:9c:19:f4:68:1d:
4f:48:06:e4:1d:2d:e3:98:16:af:6b:9e:2b:f2:b7:
d2:21:ec:e5:12:0d:2e:19:6d:87:7c:6b:7c:ae:a9:
2e:59:20:0e:89:19:60:19:a2:87:5b:09:81:4b:42:
24:df:48:3f:8c:ca:91:33:cf:3c:d7:e1:16:2a:56:
69:44:eb:28:03:9e:4d:78:d5:ed:e6:f1:b9:df:cc:
70:ec:05:3c:b7:9a:98:01:cd:a6:16:04:e3:b3:a9:
cf:ca:f2:32:5b:b3:fb:80:0a:89:58:f2:ab:ec:f1:
26:73:aa:33:e8:60:b8:50:56:c3:47:63:4c:14:07:
d4:90:a8:34:20:13:96:f6:57:d7:c0:f9:17:b7:65:
02:49:37:d7:98:ef:5d:ce:26:8b:71:31:75:fe:a6:
68:e3:45:7f:4e:de:9c:1b:fc:eb:aa:d2:d5:91:0a:
f2:3f:4f:10:fc:1b:d9:a9:b2:e1:a7:b8:2f:9b:7a:
cd:59:29:62:92:7b:af:2f:02:f2:65:89:16:a4:cf:
95:c4:3d:dd:2f:bb:e2:1a:ef:6a:38:36:e4:6e:ac:
71:78:6e:0d:d8:0c:a3:91:04:8f:64:04:b9:ea:45:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:38:C6:E2:6E:3A:D9:60:0A:F0:4F:76:C9:AE:8C:D7:A2:B8:6B
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:59:da:da:00:d1:93:48:ee:5d:a5:26:31:89:3a:b1:c1:
41:b0:23:d4:fb:df:01:84:2b:65:ee:7a:7c:6c:1a:8b:a4:fd:
74:78:0a:50:d2:ef:49:43:34:2f:6d:31:74:a2:41:8d:70:35:
60:38:5d:ce:18:12:92:0d:cc:15:cc:60:6e:ad:2d:48:fe:e9:
d3:42:31:df:41:cd:7f:b4:ad:c3:4d:2b:3f:7c:09:7e:d7:fc:
c9:b7:7e:03:be:77:95:97:e3:03:96:f0:7d:30:b3:ad:4c:a7:
96:53:32:71:bd:e2:7d:4d:4e:5c:61:c7:8b:f5:65:00:48:13:
b8:e2:11:95:89:bf:b0:99:f8:40:f0:7f:8b:c3:ac:fd:45:3b:
9f:13:1b:15:e2:2b:38:84:cc:f4:32:af:d0:68:b8:a9:26:cc:
a6:bf:64:e0:a8:cb:de:5d:c7:e7:a7:e9:14:89:38:e2:37:d1:
bf:04:d7:c4:fd:48:39:99:65:45:bf:16:1e:03:43:33:5b:77:
ce:c9:94:e2:d9:a7:7e:be:d9:28:6d:29:e3:cd:e0:73:09:8f:
04:62:02:a2:7b:42:25:47:d7:5b:87:05:2a:68:41:65:9b:64:
94:4c:94:2b:81:a9:98:79:13:20:16:f3:fb:63:8f:23:33:d9:
4c:a9:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:01 2025 by rpki-client