Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: TjhCUVkQNGypz6AgK3z2rBwQCVpr4LuKEGu3/01yk4w=
Subject key identifier: 84:7A:C0:ED:77:0A:C3:A9:95:3B:14:9B:19:68:2F:14:15:93:86:49
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 0194BC7298293C78FC97DBB0F4254C68AE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 07AE
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: zOVJjbwG41gPaLLhNSbydUQCXAAoccAUyor9QlTq3vk=)
2: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
3: t16GyUN0G0ERD6SmYA9i0r30zic.roa (hash: oKvu0HJILKuRj6gBGrcQg1IlSuH1C1Ay4XKjgYCj9is=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:98:29:3c:78:fc:97:db:b0:f4:25:4c:68:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=847ac0ed770ac3a9953b149b19682f1415938649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:3d:6d:e5:26:fd:6b:e1:cc:83:ce:1f:78:
92:e6:8a:2a:36:b7:0e:60:33:7c:fb:d5:ed:97:17:
11:ce:df:9b:18:d4:96:36:97:d6:49:6a:96:41:68:
3d:40:db:56:12:29:f2:9d:1a:7e:38:6b:23:b0:05:
ba:6d:3c:5f:6b:3b:1e:c1:cd:b6:c2:d5:81:8a:c4:
6e:1f:4d:99:6b:ba:05:36:84:ed:c5:34:1e:99:de:
03:97:ab:27:85:63:9a:ab:a4:c2:9a:9e:92:79:ad:
10:39:cc:da:06:fd:6b:31:84:03:c0:d7:67:c2:21:
fb:b3:7b:12:6a:bb:1d:e9:d2:39:ab:23:fe:d5:fc:
29:79:49:c7:ec:74:89:9d:42:f2:d0:3a:84:42:24:
96:f2:2c:08:73:4b:c1:07:24:f5:19:09:f3:e1:59:
90:2f:e4:0a:cf:99:7a:e1:c6:a2:9e:57:cb:dd:45:
28:ed:24:06:4a:ee:5d:12:aa:e9:8c:53:55:4c:d1:
1b:bf:92:2c:52:60:c5:a0:c6:e3:32:8b:87:79:15:
ef:90:ab:83:73:19:dc:41:e2:12:f9:c8:4a:09:8f:
c3:60:63:f7:ac:49:29:44:d2:81:97:f8:2e:7a:14:
f4:39:30:c9:de:4b:f6:31:b5:b0:fa:d6:ab:cf:d7:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:C0:ED:77:0A:C3:A9:95:3B:14:9B:19:68:2F:14:15:93:86:49
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c3:d4:60:a4:69:92:87:1a:c5:5f:7e:93:e3:16:84:66:60:
27:2a:53:c6:71:bc:64:90:1d:ea:16:ad:7c:26:7b:f6:ef:45:
3b:ee:c9:02:70:c7:52:3d:51:45:f1:29:27:0e:c3:4f:b7:c7:
57:69:a3:53:59:af:81:80:0d:d7:2d:ed:f8:8c:18:47:92:09:
bb:37:96:96:0b:f5:6e:f0:7a:03:cb:45:cc:fc:ad:21:6d:d5:
50:d2:c7:77:4e:e4:b6:dc:6d:e8:a9:83:6a:42:dd:08:56:fd:
71:10:92:bc:51:21:58:33:58:ca:f0:f4:52:26:fc:67:c6:70:
b3:0e:92:75:be:1c:aa:29:54:e4:c7:f5:84:df:77:9b:eb:77:
2d:01:44:fe:ec:47:3a:96:59:11:3f:54:35:25:e1:1a:d9:d1:
bc:57:1a:95:ab:a1:c4:20:6c:c4:ad:48:05:2b:35:39:3b:59:
03:82:4b:d1:9b:4d:19:fd:5e:d1:34:f1:16:6f:fa:96:c2:0d:
ee:ea:cc:ab:c2:97:fd:01:ea:9e:f6:b5:67:67:53:eb:02:82:
69:0d:10:68:41:50:8d:30:3e:8f:51:ee:a3:cf:8a:fd:c6:3a:
ce:1e:f0:9f:52:90:4e:6a:2f:94:80:fa:3b:32:6b:e7:c8:2a:
cf:87:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:31 2025 by rpki-client