Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier: lAta7hxQl9BUB2t/vfF6V4/9xrV+Vl5Fsy1xnJC9M/Q=
Subject key identifier: 55:E8:99:0B:ED:AB:B6:89:AA:4D:D9:23:97:34:CE:DF:19:48:21:A8
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 0194BCA9FFF662708EFD2FC12638E47CAC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number: B6
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: 3EzexX5F6Xj+ZVq3TkICbTHfbrX9X68bziNUyiw1SNs=)
2: Wiv0DHdRF2zh8D5DY6J3_PLSV6Q.roa (hash: /xs5AGgsSlLOCnLD+1aaT+DfL+K36ivL9muQHygs7c4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ff:f6:62:70:8e:fd:2f:c1:26:38:e4:7c:ac:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=55e8990bedabb689aa4dd9239734cedf194821a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:98:62:bd:50:7a:c9:5d:4c:c6:f7:d0:b8:
3e:e5:13:d2:a9:1e:dd:22:66:ce:de:93:89:4a:98:
22:a6:6a:1b:fa:6c:34:75:9d:56:35:c1:b3:28:e0:
6b:af:7e:56:47:7f:a4:44:08:33:af:59:2f:52:9a:
16:cf:52:a1:bf:d0:5c:55:e0:31:de:41:d0:90:e7:
90:62:17:56:13:49:b2:fa:16:9b:69:69:5e:cb:d1:
c0:9f:04:7f:eb:32:19:27:a8:71:84:12:c9:9b:f2:
56:fc:a6:5b:03:2e:53:aa:ae:a8:59:83:43:b5:98:
a4:1d:c9:c7:e7:2e:75:d3:3b:b7:99:c1:dd:c8:74:
43:83:3d:db:da:5e:4c:d4:99:4e:6d:c3:65:eb:93:
9b:14:4a:a1:27:48:da:bc:59:1d:8c:ee:74:08:02:
2f:7b:2b:9e:03:30:81:6a:39:79:44:ce:08:a6:5b:
7f:09:3f:53:2e:38:79:e9:27:a0:fd:a1:c7:09:15:
e9:c2:4a:b7:54:e0:e2:cf:2e:9d:a9:b6:d5:94:3e:
1d:ff:48:90:d8:d3:36:5e:7f:7b:cf:c4:22:9b:cf:
de:9f:9c:f6:5c:b6:c6:96:a5:09:79:b5:2f:6d:4a:
ad:b3:37:78:52:25:d7:72:cf:c8:1b:67:64:d3:33:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E8:99:0B:ED:AB:B6:89:AA:4D:D9:23:97:34:CE:DF:19:48:21:A8
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:00:4b:54:e6:a3:6a:66:a3:c1:2f:5f:64:41:cf:79:47:40:
b5:8f:b2:49:cf:2a:0e:81:d1:1d:4e:69:7a:68:7e:21:fa:f6:
7b:86:f7:12:11:54:ce:1c:b6:c6:20:1d:8e:e2:25:e2:e6:bb:
9b:59:64:27:fb:f0:5d:be:1a:17:f8:f5:9d:73:82:96:e6:97:
9f:36:1a:97:71:b7:52:8b:c9:04:40:01:2d:68:19:67:3a:0d:
a3:36:dc:6a:3b:0a:78:22:9c:9e:14:a6:da:39:b4:9f:69:c3:
41:c7:c8:af:4c:2b:cb:09:39:43:bf:59:e5:de:a2:2e:dc:9e:
b1:0e:b1:0d:90:ae:f1:a6:59:75:45:e9:47:89:38:36:c9:74:
4c:7e:4b:bf:31:02:43:95:7b:ef:e4:4d:36:b8:8b:85:fe:8c:
49:d3:13:22:fa:fd:5b:67:85:8b:9f:3d:63:f3:67:e9:88:37:
ef:b4:14:d0:35:49:3b:bc:2a:a9:e1:55:66:e8:ae:41:c9:e9:
81:90:3f:65:38:5b:dc:31:9a:63:bb:d8:da:0f:16:b8:5d:50:
b8:7d:d2:5e:ac:a9:ea:10:44:9a:04:25:94:9d:3e:37:7b:35:
66:78:86:81:10:a2:43:3e:b7:06:99:26:a1:8b:33:d1:db:05:
9e:84:5a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qf/2YnCO/S/BJjjkfKw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDRmMTMzZjM4NzU5M2FhZmEyYmVhYjM4ODg0OTA0ZmFj
OWJkMTkwHhcNMjUwMTMxMTQwMDQ1WhcNMjUwMjAxMTQwMDQ1WjAzMTEwLwYDVQQD
Eyg1NWU4OTkwYmVkYWJiNjg5YWE0ZGQ5MjM5NzM0Y2VkZjE5NDgyMWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7mYYr1QesldTMb30Lg+5RPSqR7d
ImbO3pOJSpgipmob+mw0dZ1WNcGzKOBrr35WR3+kRAgzr1kvUpoWz1Khv9BcVeAx
3kHQkOeQYhdWE0my+habaWley9HAnwR/6zIZJ6hxhBLJm/JW/KZbAy5Tqq6oWYND
tZikHcnH5y510zu3mcHdyHRDgz3b2l5M1JlObcNl65ObFEqhJ0javFkdjO50CAIv
eyueAzCBajl5RM4Iplt/CT9TLjh56Seg/aHHCRXpwkq3VODizy6dqbbVlD4d/0iQ
2NM2Xn97z8Qim8/en5z2XLbGlqUJebUvbUqtszd4UiXXcs/IG2dk0zMshwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXomQvtq7aJqk3ZI5c0zt8ZSCGoMB8GA1UdIwQY
MBaAFA5E8TPzh1k6r6K+qziISQT6yb0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYt
ZGJmZjBlZTFlMDllLzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYtZGJmZjBlZTFlMDll
LzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQBLVOaj
amajwS9fZEHPeUdAtY+ySc8qDoHRHU5pemh+Ifr2e4b3EhFUzhy2xiAdjuIl4ua7
m1lkJ/vwXb4aF/j1nXOCluaXnzYal3G3UovJBEABLWgZZzoNozbcajsKeCKcnhSm
2jm0n2nDQcfIr0wrywk5Q79Z5d6iLtyesQ6xDZCu8aZZdUXpR4k4Nsl0TH5LvzEC
Q5V77+RNNriLhf6MSdMTIvr9W2eFi589Y/Nn6Yg377QU0DVJO7wqqeFVZuiuQcnp
gZA/ZThb3DGaY7vY2g8WuF1QuH3SXqyp6hBEmgQllJ0+N3s1ZniGgRCiQz63Bpkm
oYsz0dsFnoRaww==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:37 2025 by rpki-client