Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: qRJ7K5UzLiAEZk80gYNAuv1jBXMxHeN110xxD+OO8Kc=
Subject key identifier: 9F:C4:A4:D1:3B:63:37:EB:26:2D:24:89:81:8A:47:5C:CC:96:3F:21
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 0194BD4E4AB1B8E2D12CB4B1313DF6D8A93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: MjVAEAezj32SO8qNV3RvIn6h5KlkY2Ef1L+VpFPGiOA=)
2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4a:b1:b8:e2:d1:2c:b4:b1:31:3d:f6:d8:a9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=9fc4a4d13b6337eb262d2489818a475ccc963f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:ca:9d:0e:65:54:f9:f5:3c:a1:0c:37:b0:
e5:a9:c5:92:02:2e:4f:71:01:1a:5e:46:03:84:74:
ac:c0:79:4c:ea:15:90:43:ed:11:fb:d6:75:59:fc:
78:4d:86:7a:20:10:17:a5:d4:6c:3a:b3:0f:39:82:
c4:64:c3:29:a1:e9:37:b8:d9:58:aa:85:2d:8c:0d:
97:1f:7f:00:0d:7f:37:33:67:9b:92:ac:a1:f4:99:
48:73:12:ab:ab:a7:fe:58:9a:38:a5:08:0b:48:76:
24:ca:22:79:53:4e:20:8f:1d:f7:24:27:68:3c:01:
ec:27:bf:85:9d:a6:0d:b7:b9:38:cd:1b:c5:7d:8a:
a2:74:1d:1b:bc:31:d5:c6:aa:d0:be:98:7f:f6:0d:
7f:86:bb:de:10:b5:0b:25:78:1b:9b:0f:1a:1d:c7:
7c:9a:ff:5f:f8:a3:9a:a4:e5:ae:86:6c:50:9f:7b:
aa:e3:62:72:b7:17:46:9b:9c:c6:31:76:4d:84:46:
7e:a8:ef:89:d2:29:72:e0:5d:73:5b:b2:ca:f3:08:
1a:f3:60:91:c7:a9:f2:1b:da:64:88:fc:6f:95:46:
d8:ac:bb:cd:e3:f9:30:7d:47:ba:4f:4e:a3:d0:ee:
bb:74:5f:72:08:b9:81:50:35:c1:bd:64:05:82:d1:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:A4:D1:3B:63:37:EB:26:2D:24:89:81:8A:47:5C:CC:96:3F:21
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:cc:8c:88:b4:c3:51:b0:31:a0:8e:11:57:82:3f:ec:66:92:
e4:83:bd:7e:ef:aa:53:3b:6e:3c:d7:ae:44:6d:32:4b:fe:e2:
1c:5a:5d:d0:0f:e4:0c:02:20:cf:57:af:cc:b9:90:1c:75:ce:
6e:0b:db:1f:5f:1b:b4:a9:63:81:3a:94:bc:6f:a8:79:aa:76:
b7:2a:f4:a9:d6:86:aa:37:ee:55:2f:e9:d3:0a:51:71:a2:dc:
55:c5:51:22:a5:85:a8:c1:a6:a2:46:63:80:8b:bc:fd:9c:f3:
05:41:d3:59:8a:d2:ba:cf:80:8e:d4:3e:dc:0e:4f:b1:19:7e:
d6:ad:9d:43:e6:15:57:a1:fb:cf:81:dd:fb:76:7f:7c:50:48:
8b:f3:65:8b:18:aa:d9:16:3d:45:ad:82:c7:7c:b6:fc:2b:5b:
9d:13:a4:5b:b8:11:23:cb:60:4b:89:46:f4:25:85:cf:a3:1a:
9d:c2:67:36:21:8c:cd:b5:d9:53:9e:2d:f8:e7:83:ea:58:be:
ff:46:bf:e9:17:81:3a:bc:51:c9:bd:42:63:8e:94:58:67:45:
75:5b:40:c9:c4:cd:da:2f:08:23:29:09:a0:e9:3c:7a:7a:32:
40:aa:08:a9:17:e7:57:98:8c:46:0d:10:12:4b:83:fe:87:7d:
31:b6:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:57 2025 by rpki-client