Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: VLn44+ydZVwoCwPY+J8T9EBL7NkOz+7jgeOdsq92quM=
Subject key identifier: 36:C1:02:F0:AD:F4:58:55:B5:54:5E:73:74:C3:AC:79:03:08:0B:FA
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 0194BCAA290CFF092D8F577031B82553F985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 0D53
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: YI3IbwPmwWvoOTEeOBeesw4gjbxuCLIEGD/5nph9S04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:0c:ff:09:2d:8f:57:70:31:b8:25:53:f9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=36c102f0adf45855b5545e7374c3ac7903080bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:39:3c:df:d6:cc:31:2d:11:d6:73:85:ef:
52:23:3d:e4:99:68:22:c1:3d:aa:ff:c5:a1:17:4d:
83:45:5a:95:72:b5:b5:63:9a:79:a0:be:5f:98:40:
a1:2d:a2:4e:0c:46:48:1f:04:c0:3a:ee:e3:67:93:
4f:14:63:b0:8f:19:11:a3:9c:e6:51:9c:a3:b7:9d:
9e:3c:0d:0a:ba:0b:87:76:f9:7f:f9:2c:83:ca:c6:
91:2f:e0:c1:5d:20:dd:e6:fb:81:51:13:a4:21:bd:
09:6c:0a:65:6e:b6:1f:a1:aa:ec:f0:8a:1c:7a:6e:
3e:69:8a:00:63:0b:12:6c:9b:0b:12:3f:68:8f:8d:
f2:49:a1:4d:2c:a3:97:de:94:d4:21:52:91:4f:c1:
cd:a6:d9:3c:8b:d4:b9:61:96:32:e9:97:be:fe:05:
42:30:98:4c:96:6a:5a:24:35:3e:32:cf:12:05:3f:
a8:be:fc:05:82:e9:e8:39:4b:55:ea:51:dd:e4:9a:
f9:46:e9:e4:4a:fc:50:5a:f7:35:74:dd:fc:75:eb:
67:99:e5:d8:3b:f9:bb:31:97:a9:b0:63:d4:97:2b:
1c:e5:81:b5:d0:b7:1d:59:f3:1e:f3:65:e4:7d:a7:
16:9d:dc:00:b1:94:65:2a:13:97:1a:61:e5:b2:bb:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C1:02:F0:AD:F4:58:55:B5:54:5E:73:74:C3:AC:79:03:08:0B:FA
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:80:2a:59:2f:48:8f:31:98:82:07:d0:8d:e5:a0:be:8f:b0:
c1:d5:48:9c:69:5b:11:fb:f9:40:27:2f:e4:1b:dd:04:29:c2:
3f:92:03:11:5b:4d:b0:1b:98:2c:69:a1:9b:48:53:eb:a5:0d:
94:c2:66:88:ba:82:ec:9e:c7:db:68:6a:69:b8:a9:39:ad:57:
11:8f:3d:94:cd:c0:87:c2:09:e6:fb:58:f1:6f:9b:88:be:4a:
8b:9f:d8:88:75:ad:e6:91:d9:47:36:02:64:64:43:f6:1c:ed:
38:ca:10:e3:56:b2:c1:01:0c:a5:11:24:be:17:ce:d2:00:2b:
b1:e7:9a:4f:ae:48:60:8c:cf:d7:09:1b:bc:d1:34:9b:dc:a8:
92:27:69:bc:76:7d:c5:ed:42:ba:37:3c:d6:5e:bc:7a:5d:15:
27:b7:ed:75:fa:51:ca:a1:79:3a:fc:29:f8:b7:65:83:49:55:
2c:16:3b:7e:3e:13:be:77:e6:72:7e:20:e5:6e:b1:1f:c5:25:
81:4e:25:4c:c6:f8:f9:74:3c:9d:4f:a7:62:f9:ab:51:b8:46:
80:80:cb:a6:d0:e0:3d:a9:14:06:24:2b:56:79:f6:17:54:ee:
3c:aa:f0:4f:e8:53:32:f9:18:40:40:75:52:d4:e7:c2:d7:68:
16:4b:a9:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qikM/wktj1dwMbglU/mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMWU2ZDVlNzJkYWY0MTA4Y2Y2MGJkNDdlOTM2ZGYxYTFl
OTcyMjYwHhcNMjUwMTMxMTQwMDU1WhcNMjUwMjAxMTQwMDU1WjAzMTEwLwYDVQQD
EygzNmMxMDJmMGFkZjQ1ODU1YjU1NDVlNzM3NGMzYWM3OTAzMDgwYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr645PN/WzDEtEdZzhe9SIz3kmWgi
wT2q/8WhF02DRVqVcrW1Y5p5oL5fmEChLaJODEZIHwTAOu7jZ5NPFGOwjxkRo5zm
UZyjt52ePA0KuguHdvl/+SyDysaRL+DBXSDd5vuBUROkIb0JbAplbrYfoars8Ioc
em4+aYoAYwsSbJsLEj9oj43ySaFNLKOX3pTUIVKRT8HNptk8i9S5YZYy6Ze+/gVC
MJhMlmpaJDU+Ms8SBT+ovvwFgunoOUtV6lHd5Jr5RunkSvxQWvc1dN38detnmeXY
O/m7MZepsGPUlysc5YG10LcdWfMe82XkfacWndwAsZRlKhOXGmHlsrs3vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbBAvCt9FhVtVRec3TDrHkDCAv6MB8GA1UdIwQY
MBaAFAwebV5y2vQQjPYL1H6TbfGh6XImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUt
YTI5NTgxM2YxZjgyLzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUtYTI5NTgxM2YxZjgy
LzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIAqWS9I
jzGYggfQjeWgvo+wwdVInGlbEfv5QCcv5BvdBCnCP5IDEVtNsBuYLGmhm0hT66UN
lMJmiLqC7J7H22hqabipOa1XEY89lM3Ah8IJ5vtY8W+biL5Ki5/YiHWt5pHZRzYC
ZGRD9hztOMoQ41aywQEMpREkvhfO0gArseeaT65IYIzP1wkbvNE0m9yokidpvHZ9
xe1Cujc81l68el0VJ7ftdfpRyqF5Ovwp+Ldlg0lVLBY7fj4Tvnfmcn4g5W6xH8Ul
gU4lTMb4+XQ8nU+nYvmrUbhGgIDLptDgPakUBiQrVnn2F1TuPKrwT+hTMvkYQEB1
UtTnwtdoFkupbg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:33 2025 by rpki-client