Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: e6j3Fd3LCqq4zyQ6DeqToVZgVsEyY5deLy54GI3XnUg=
Subject key identifier: A9:86:4D:95:F2:66:52:D5:56:1D:01:4E:88:9D:52:8B:4E:AB:B2:87
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 0194BD17D16804C71140286272B3CBCB2185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 13C0
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: TM9+XoBXyfQX48UODWhSxwGkE+z+f9evYBk+HPtlq50=)
2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=)
3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=)
4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d1:68:04:c7:11:40:28:62:72:b3:cb:cb:21:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=a9864d95f26652d5561d014e889d528b4eabb287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:36:58:11:31:8a:b4:4b:37:0b:c1:1c:72:
67:49:49:d0:4b:75:92:9b:f7:bf:da:7e:25:ab:d3:
a9:71:a9:5d:f0:90:cf:48:d1:fc:f1:66:b5:1e:08:
ff:f0:c1:09:90:51:03:fe:0d:06:a8:71:b8:ca:07:
2a:28:99:c0:c0:11:4d:1c:68:97:49:28:be:d7:7e:
a0:76:15:2f:4b:43:f6:aa:68:06:13:8c:6d:4b:8a:
c2:6e:0e:37:3a:a1:cc:c1:3b:a6:76:c9:9d:66:d5:
29:e4:fc:bc:6e:84:2c:54:84:94:59:16:9c:c1:61:
00:a9:73:3e:83:3d:0f:c5:41:42:8d:83:cc:18:65:
45:ce:99:46:a2:4c:1b:f7:09:e6:3f:8e:c0:a6:fb:
d4:54:cc:45:33:9c:c0:6a:11:2c:31:45:0c:b5:0c:
4e:28:ee:5c:e7:1c:3c:97:a0:1a:dc:eb:91:6f:57:
15:ae:fa:e7:ec:e8:b5:92:dc:35:74:a0:da:ed:79:
24:7d:d1:21:75:0c:cf:3a:bc:8b:27:29:22:68:4e:
66:69:31:17:0e:87:89:5c:b6:78:cb:57:f7:e4:9f:
78:0b:38:cf:0f:7a:9c:4a:9d:93:17:30:c9:8b:18:
9c:20:32:9c:94:c3:da:66:1a:08:fa:c1:ba:93:cb:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:86:4D:95:F2:66:52:D5:56:1D:01:4E:88:9D:52:8B:4E:AB:B2:87
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9f:a1:cf:38:8b:fb:df:55:d8:aa:c8:20:89:db:64:87:6b:
80:90:95:17:b4:73:96:15:f1:c7:b7:c5:25:86:61:28:2d:ec:
f0:cd:e4:dc:a7:77:b4:5c:bd:bf:20:85:fc:49:73:7d:db:04:
36:f8:38:9c:17:ec:03:8b:04:78:04:54:a6:82:f3:ae:12:ca:
8d:ef:1a:01:63:21:f6:0c:d3:0c:33:5c:ae:9e:d3:15:8f:82:
52:e7:0b:31:b4:6e:16:1a:5f:55:59:ed:f5:a5:ad:4b:3b:30:
5b:0e:d2:19:77:76:9d:51:13:69:9b:82:7d:97:17:21:6d:4e:
98:e7:0a:dd:9f:11:a0:e4:e0:6e:c4:6d:2a:9e:fd:9f:a4:89:
b5:23:f1:07:90:8d:a1:b5:a0:2e:ad:15:f3:b1:d6:17:f4:00:
75:52:4d:28:83:1d:e0:5d:22:7a:d0:3b:bb:0a:28:23:7c:6d:
46:2a:6f:42:f8:91:09:fb:7e:24:df:e0:c7:5d:5e:7e:29:d5:
3f:cf:fe:89:ee:e0:0b:27:4f:9a:a6:de:d8:3c:a5:ab:45:bd:
f4:43:18:9c:4a:6a:64:24:36:ee:69:20:17:90:88:11:91:ca:
67:07:82:48:2a:fc:3b:ed:a4:54:24:d0:82:37:11:1c:1b:4d:
d0:86:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:13 2025 by rpki-client