Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: 8nm6vgoDXvte83xSfyg4rm070TEQByiQ/IWXfwZvDho=
Subject key identifier: CA:AB:A7:07:DC:91:66:70:FE:B0:96:49:9C:0B:1A:A3:32:59:B8:D1
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 0194BD4E4CF4571AAAD581C98E7274A2EEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 04FA
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: 7j43t3dg2tP3DSKOOyDvFDPSQ0E.roa (hash: +Rb8Ckbhx24K2SYro30q4c7lAYAS1/PtJbtnZ0q2YK8=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: Wkz/ksjpoOZ1q/vGI2k/+ULQiDKQ5q0Icb7dm647pT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4c:f4:57:1a:aa:d5:81:c9:8e:72:74:a2:ee:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=caaba707dc916670feb096499c0b1aa33259b8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c9:23:8f:2c:b2:f5:fe:8a:79:80:f4:1f:be:
3a:8d:63:7e:82:5c:f8:75:98:52:b8:86:d7:c3:d6:
a1:c2:52:ad:1c:7f:a9:3e:90:89:2f:de:58:55:6e:
dd:f8:32:9b:75:24:d0:d4:44:b2:6c:99:a2:a8:a3:
0b:cc:a5:b5:44:19:1c:04:e1:01:eb:ec:54:84:2a:
94:94:cb:43:1a:a0:bf:4c:17:53:58:21:dd:bd:d0:
fc:b4:07:a9:ad:c8:66:ba:76:78:84:e4:20:12:47:
33:ad:f7:16:25:0b:b6:8f:66:70:76:26:5c:d7:4d:
89:fd:26:df:d2:60:66:19:68:62:ee:b7:a2:16:56:
63:84:09:6d:d3:93:d9:36:fe:f2:6f:71:98:f5:3b:
6a:7f:2f:f5:36:f6:b1:92:70:54:82:21:31:10:8d:
c9:ea:2d:89:0d:ba:72:c8:a0:36:5d:bb:30:9e:be:
c2:8b:47:8b:1f:dd:9f:14:1c:d0:a3:62:02:5b:e9:
01:1c:d0:c0:c3:41:0a:69:e8:af:9d:d4:8f:3b:e8:
31:cd:83:6f:55:2f:5d:4c:f3:52:35:27:d3:e6:8e:
98:f9:0e:b2:16:29:b1:50:9e:c2:ab:62:19:fc:57:
2b:bf:37:8e:a0:ab:cc:77:cd:6a:a6:37:43:e8:5d:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AB:A7:07:DC:91:66:70:FE:B0:96:49:9C:0B:1A:A3:32:59:B8:D1
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1e:8e:ea:61:81:78:1d:4a:61:19:82:90:19:d4:18:a0:ba:
73:a7:c3:94:dd:67:56:08:e3:8c:fb:6a:28:91:f5:3b:b9:65:
78:39:13:60:b3:cb:11:e1:d1:6d:f7:b1:a0:9f:a5:cd:07:02:
0f:ec:65:ac:a3:24:89:30:28:4b:72:62:6d:b3:40:ef:5d:89:
ca:1f:23:aa:42:99:ee:72:ca:96:bf:51:b0:3f:60:93:ed:b7:
45:ce:83:09:d5:0e:10:ee:69:5e:cf:01:e2:4c:f3:8a:8b:61:
85:a2:58:f2:75:09:12:94:81:af:07:f4:3c:2e:68:99:5d:05:
8b:9d:3d:61:47:06:6a:d5:ed:53:eb:31:ad:52:8e:2b:d1:ef:
bb:f8:a2:22:3d:0a:6b:70:df:49:ee:32:79:13:ce:82:cc:14:
df:fc:2c:0f:c8:82:14:7f:6a:87:d2:9a:29:74:88:2c:d1:49:
29:03:b8:e3:7b:01:52:13:14:88:ae:71:52:11:33:39:95:32:
8e:76:45:c2:2b:50:b0:2d:25:cd:9e:26:4d:41:ba:31:96:3e:
a1:13:d0:e4:8e:88:a3:79:c4:3f:6c:c5:68:1d:08:8c:30:fd:
e8:d6:f7:c6:47:54:70:41:25:cc:8c:8e:9e:29:37:7a:a7:77:
d9:16:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:09 2025 by rpki-client