Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: h5HrBr30RKke5wMSnDqdsYvDo/Pv+veL1pp+LNt3UI8=
Subject key identifier: BE:4A:63:A1:7C:91:89:53:61:BE:C3:B5:27:F2:EE:BB:BA:8D:4F:88
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 0194BCAA1A9289D359C9E5B9E92BD21D2065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: vdOjkpkjD96ejgtt9b4u5PSA8EXMoMvpwX9F/qMKrb0=)
2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1a:92:89:d3:59:c9:e5:b9:e9:2b:d2:1d:20:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=be4a63a17c91895361bec3b527f2eebbba8d4f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:07:11:be:af:31:1a:ca:bd:a3:2a:28:7c:
f6:fb:27:21:18:5e:cc:55:ab:a0:e9:3d:f2:53:b2:
58:01:43:08:6b:09:74:5d:33:42:dc:6a:4a:33:f0:
1a:ec:1e:3f:e5:2d:82:27:18:eb:78:59:01:36:b9:
e1:a7:02:b7:32:91:fa:6a:23:d3:c3:08:79:49:60:
29:e9:45:2e:fa:74:9e:02:15:02:96:21:7b:68:88:
1f:a1:c9:ca:17:29:e9:9f:54:28:ac:a8:47:fd:50:
3f:b6:56:7d:3e:02:44:ce:a0:38:64:b5:67:99:02:
fa:d9:d3:51:fd:c5:50:56:25:93:bd:05:86:32:3f:
cc:3e:2c:d2:47:c7:07:47:c6:98:0d:92:07:72:82:
b7:d9:aa:1a:09:45:62:b6:15:e5:cb:53:9c:15:53:
1a:d6:c8:86:a5:d0:ce:9c:dc:ac:28:75:64:41:5f:
3a:c5:44:2f:19:80:a8:66:63:d1:68:50:a8:99:de:
17:82:cb:15:ed:68:b9:76:9a:d8:f5:ff:f3:37:f7:
22:31:2e:06:d7:a6:ac:e9:f1:b6:86:39:b5:f0:d2:
25:56:4c:7f:28:b4:c5:d9:9b:4d:b8:ac:06:8b:bb:
9a:cd:c5:10:0e:82:75:b2:18:a5:31:bc:78:53:19:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:63:A1:7C:91:89:53:61:BE:C3:B5:27:F2:EE:BB:BA:8D:4F:88
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4b:57:72:55:7a:01:69:bd:e9:85:81:c2:c2:a9:4c:d5:9c:
02:a4:29:7b:5d:87:93:43:c8:72:6c:bc:52:f3:aa:28:73:bc:
57:6a:8a:f3:3b:91:28:6e:16:f7:52:30:8e:da:e4:aa:02:d0:
96:3b:e3:a1:77:41:e5:a7:a7:6b:16:37:0f:45:b2:9f:36:82:
2a:a2:9c:a6:a1:ac:9a:b1:8e:b6:10:6e:12:d7:41:b4:f7:5b:
05:fe:4d:f7:dd:04:42:eb:bb:30:35:c3:00:aa:12:49:13:a1:
e3:5b:64:d9:88:c7:66:8e:e5:78:b8:25:3e:d9:4a:73:28:73:
f7:a1:67:bd:ac:d4:28:00:ab:ac:0f:40:c8:4f:0a:58:1d:fe:
94:41:f3:67:e1:91:85:b9:1c:95:30:0e:26:d4:39:f8:e8:9d:
bf:c9:80:90:a9:7c:d5:d4:97:12:43:9c:85:ed:3e:92:b4:de:
bf:5c:9f:46:85:4e:e7:0b:19:fa:cc:c7:6f:28:ef:9b:85:3f:
c3:16:64:83:bd:a8:17:36:8b:15:27:d9:7c:27:ee:ec:70:b9:
c5:d3:31:cb:f1:85:72:80:bf:10:6b:b2:ec:3b:b9:3a:fa:bb:
e6:68:c4:dc:32:d7:71:0d:6c:f2:ce:63:07:55:96:7e:7f:30:
3e:6e:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:44 2025 by rpki-client