Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: SC0LxDtrHT8beNxkvdP+Pt6HglTeX2BWjMFoPKfMcOQ=
Subject key identifier: 5E:4F:61:47:0F:C5:8E:C7:BA:A8:6F:09:30:64:ED:4F:DC:D5:32:0A
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 0194BC04DBC91EA9C02189F3612DAC4C1D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: T6QW6Sn6MmYC2SenvDO1eNocepAMEXHi3olvxauaWno=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:db:c9:1e:a9:c0:21:89:f3:61:2d:ac:4c:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=5e4f61470fc58ec7baa86f093064ed4fdcd5320a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:ea:ab:a7:8f:1c:32:ca:10:3e:3e:e0:51:
45:f5:41:4d:2c:7e:fd:1e:ae:8d:84:a6:47:d0:6d:
3e:91:a4:0e:f5:c3:6b:a4:46:fe:68:2e:07:f0:af:
0f:dd:25:04:e7:96:81:46:71:cc:91:ef:51:4f:15:
1a:a3:d5:f8:be:ac:25:87:e9:9d:e0:1a:d6:83:c7:
39:26:ec:27:6d:df:1c:8c:ad:b0:81:90:7f:35:5e:
3f:56:b3:bf:f2:28:81:be:ce:c5:2c:3d:ee:57:91:
4c:11:6e:4e:ed:15:80:da:92:30:1b:fa:80:d6:c9:
38:a4:ec:a1:9e:af:61:ae:8b:0e:39:60:c7:2c:c9:
9b:d5:01:3c:21:ff:1c:94:2c:1d:6c:da:c8:79:11:
ce:b8:25:81:ac:4a:0d:ec:8c:5b:11:e8:f1:25:03:
d1:23:99:3e:08:a8:7e:55:01:62:91:3d:11:e2:c1:
2f:d6:c2:36:0a:24:31:97:aa:23:9e:9e:33:67:86:
95:54:68:c7:7d:20:fc:ce:fd:fa:f1:2e:c0:7f:80:
ce:63:69:5d:07:ff:60:5e:f2:78:45:1e:c2:2c:8c:
fc:81:9a:3e:20:47:e3:88:2a:09:48:3f:55:1f:63:
02:a2:2d:81:09:bd:91:21:42:62:30:06:4a:a3:fa:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4F:61:47:0F:C5:8E:C7:BA:A8:6F:09:30:64:ED:4F:DC:D5:32:0A
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:40:00:70:24:41:af:bf:c1:26:79:d5:76:88:01:ec:2a:25:
53:9c:6d:24:a2:5b:ca:e0:ed:95:47:01:29:1a:7b:26:e7:f4:
f1:b9:8d:e8:5d:7d:cf:64:88:4d:be:a4:8a:fa:cb:90:16:53:
84:01:0e:45:34:3e:41:98:2d:a8:04:de:58:42:0a:49:e4:58:
17:08:07:5a:df:82:78:3a:bc:3a:0a:a6:98:9e:12:99:3b:87:
60:84:a6:bb:f9:30:82:90:51:3b:50:ac:6a:58:7f:96:47:96:
b3:7b:58:91:e1:4b:bf:61:ba:a0:8d:5d:a2:47:c4:ee:b9:c5:
b8:d8:58:5c:46:76:f7:ef:1e:45:8c:02:94:00:db:da:90:fb:
a8:51:03:0a:57:07:3c:a6:42:3c:64:6e:02:01:82:e3:26:53:
8c:27:c1:d5:24:8a:59:2a:47:6b:47:e2:36:b4:8d:c1:e9:3a:
ba:41:b7:ae:71:d2:82:ef:1f:a4:d1:d2:cf:ad:25:c4:61:35:
d8:36:ea:78:6b:2b:c5:0f:5c:46:85:13:22:01:78:8f:0f:b4:
a3:bc:b6:69:f1:c0:cf:e7:08:bc:aa:5a:28:2c:26:e1:bc:8a:
0a:33:20:73:bd:ba:09:ae:e8:32:e7:9c:a6:ab:87:ad:4c:9c:
f7:2c:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:26 2025 by rpki-client