Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier: zfMNG8TPnVhACO8Ia+5HzDpBeRATJGIcjyWhWkjU5ZM=
Subject key identifier: 57:13:35:18:02:F6:C9:B7:07:AA:E9:E8:FA:A3:33:15:8F:30:15:98
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial: 0194BC3C071A0EA364958EF7885F12278D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: qwng2QdhhzGF1fe3c4Ze2bGjguisqu2cE7OJQyAD95c=)
2: pMy1pTrd23eCt39FBZmq2eLeAhA.roa (hash: FaNCxf0uGl+BaBHf7OMmzdVmqskH8yLJ+ARyPe7Vb64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:1a:0e:a3:64:95:8e:f7:88:5f:12:27:8d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=5713351802f6c9b707aae9e8faa333158f301598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:b9:75:2c:2c:53:b9:64:7b:59:35:32:c3:
dd:31:96:5f:b2:b9:a8:ff:fe:18:85:24:8d:56:cb:
e0:5c:6e:75:61:1d:92:0d:34:ae:79:d4:cc:5f:7d:
16:93:07:f0:fd:ff:64:93:e1:d2:07:b0:79:ff:59:
bb:ff:81:b9:04:12:7b:78:f2:97:77:03:fa:fe:e9:
08:1b:4a:37:6f:10:36:27:a0:f8:a8:d7:ef:aa:42:
79:e5:83:e3:6a:d9:61:81:dc:42:f4:7f:dd:97:09:
59:9b:77:14:71:74:19:fd:6c:12:2a:f5:c1:9c:b5:
7b:ff:48:de:ec:87:07:f0:1e:fe:0b:f2:56:65:cc:
6c:16:7d:43:37:f1:dc:26:d7:03:18:32:94:cc:6d:
13:4c:18:0a:1b:19:83:b1:65:2f:3a:5f:f8:a2:0f:
52:54:0c:7b:c8:a4:b5:ec:9d:6b:cf:a1:a1:87:dd:
f0:d2:54:df:66:7b:25:fd:28:15:4d:0a:1a:b6:a8:
d4:77:3c:d1:c9:19:78:ba:f4:fa:01:8d:59:8e:c5:
9b:3c:74:77:3f:2e:49:e7:26:35:14:01:60:1d:ae:
86:ec:61:b6:67:3b:50:3a:1a:76:18:b9:4a:f0:8f:
02:2e:1b:75:0d:c0:9a:06:28:b7:02:c2:b7:cf:c2:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:35:18:02:F6:C9:B7:07:AA:E9:E8:FA:A3:33:15:8F:30:15:98
X509v3 Authority Key Identifier:
keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:fe:58:4c:e1:21:2e:25:05:13:93:36:a0:c0:fd:b0:71:f2:
b4:bd:16:78:e6:8e:57:1f:82:08:d1:e1:24:d4:77:52:76:1a:
d2:3d:a7:e2:d3:98:6a:35:92:55:4d:7b:3a:fd:c9:9b:b4:b2:
83:cf:fa:ff:25:d8:b7:f9:bd:16:ef:74:50:66:96:1b:01:b0:
7e:dc:34:b3:18:85:bc:ad:31:16:96:ef:3f:21:e5:d3:43:6d:
35:cc:f9:a5:5f:a1:ce:0a:c1:95:c4:cf:d7:01:db:0a:50:5c:
4c:df:bf:59:a8:c9:5b:84:c1:e1:1b:fa:31:68:fe:85:8e:d8:
55:80:e3:88:c1:24:05:21:8e:7d:75:d6:b9:10:94:a3:9f:33:
ee:3d:71:a2:a5:0c:80:7c:3f:97:4e:5d:e9:3d:a1:61:5d:b4:
26:56:57:76:0d:5e:40:c2:2d:25:09:31:ff:4d:64:12:13:3c:
cc:5e:2b:5e:5c:64:fc:c2:a6:66:00:5c:de:ad:95:90:3b:66:
7d:ab:73:6d:e9:2c:8f:ec:a6:09:75:16:58:d8:ae:db:83:88:
ae:11:ea:88:0e:24:93:1b:2e:c2:76:1c:a8:6e:17:48:e4:51:
20:fd:cd:ae:66:5d:56:5f:17:a8:c8:75:52:cc:5d:07:e3:ec:
ef:42:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:11 2025 by rpki-client