Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: rX8B6QrgyWzpUE328v+IHXjC3Lve2Y9y3nDtnmf3CWk=
Subject key identifier: 7B:69:7F:C8:3B:7C:B2:6D:E7:8C:55:AA:E9:44:E2:85:6A:6C:42:E5
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 0194BD17B1DBEDA6EA87DD48FC3076D5882F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 0678
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: h9W3fRYJ5dvArdvoEsdyDB+f+eBNZna62oM5f/8yPwo=)
2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b1:db:ed:a6:ea:87:dd:48:fc:30:76:d5:88:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=7b697fc83b7cb26de78c55aae944e2856a6c42e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:5c:82:6b:ac:65:1b:26:47:a9:71:54:ee:
8c:92:21:ed:6e:e5:92:d5:09:74:a1:8d:33:0b:73:
17:d4:1e:4e:0a:ab:07:68:92:52:d7:4d:0e:3c:14:
ba:31:06:6a:b9:e6:5b:33:91:1b:e5:54:d2:8a:47:
b2:b1:ab:21:ea:e8:c9:6e:2e:61:67:93:3b:f9:34:
67:cd:33:37:da:e1:c3:8f:7b:a6:7f:d0:f9:e6:e1:
f1:7f:aa:07:46:1c:34:10:ac:3a:0f:20:93:62:97:
66:f5:b6:2b:2b:52:8a:1d:f7:c3:91:c1:b5:e4:80:
50:18:c4:a1:aa:5d:32:ef:da:3c:2b:5d:ac:26:4d:
07:4e:9e:37:ff:2d:c7:4d:c8:a7:a6:56:55:b7:6f:
5a:5f:bd:02:c5:3e:ba:84:e5:90:ff:03:26:29:e0:
ba:46:c8:58:18:99:cb:5b:45:f0:6b:22:92:78:37:
d3:c1:6e:ab:9c:a2:4d:69:de:32:d5:e0:53:f8:7b:
9d:35:89:9f:ef:b7:da:31:7f:9f:8f:07:70:17:84:
5a:58:82:ad:c2:0a:e9:c8:09:f4:db:5d:ef:79:82:
c8:16:db:86:20:a2:d2:b2:60:95:d4:f2:70:b5:93:
86:4e:09:2c:60:1f:24:d3:32:94:a4:86:c0:97:d0:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:69:7F:C8:3B:7C:B2:6D:E7:8C:55:AA:E9:44:E2:85:6A:6C:42:E5
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:28:9b:12:99:2e:ff:20:39:99:cc:05:ce:e9:9b:dd:ce:7c:
6c:6f:59:5d:96:35:d7:df:57:39:64:9a:65:48:c8:01:59:12:
aa:fa:67:f9:3e:d9:59:02:af:0e:1a:f3:32:68:55:97:07:02:
35:a8:b9:46:a1:46:17:9f:20:0f:9e:63:1a:e8:02:1b:4d:ee:
63:60:08:1a:6d:5e:fd:cf:31:3b:b4:4e:08:c3:68:bf:54:0a:
83:e5:77:0d:c4:61:87:97:4d:3b:82:49:ab:e8:6f:b0:95:16:
01:f3:91:d0:64:9c:79:ea:6a:6f:ab:f3:29:63:90:ac:99:8b:
0f:69:1f:82:64:e6:08:ae:61:6a:d9:64:bc:8b:3d:f2:f4:80:
59:b6:63:7d:e1:79:3a:60:dc:89:d6:c2:05:73:2c:50:97:23:
28:3c:4a:a5:74:6e:94:36:2a:e5:43:e7:88:1e:80:b8:d1:cc:
93:f5:cb:7f:d0:37:c0:4c:65:50:89:14:2f:94:68:30:d7:80:
da:cb:2d:ca:ec:50:7f:48:df:65:8c:2b:c2:72:42:fb:88:b7:
ef:e2:7e:b9:04:73:9b:87:c3:0a:96:3a:98:a8:af:9d:32:a1:
ed:f7:af:49:1b:2e:69:98:27:b9:ec:7f:ea:88:77:80:ac:a0:
a7:d0:0c:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7Hb7abqh91I/DB21YgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjZkNDVmZDU2OTIxZDM0NjlkMTljNDc1NzJmMjc1Zjlk
NTUyNDIwHhcNMjUwMTMxMTYwMDM0WhcNMjUwMjAxMTYwMDM0WjAzMTEwLwYDVQQD
Eyg3YjY5N2ZjODNiN2NiMjZkZTc4YzU1YWFlOTQ0ZTI4NTZhNmM0MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9RcgmusZRsmR6lxVO6MkiHtbuWS
1Ql0oY0zC3MX1B5OCqsHaJJS100OPBS6MQZqueZbM5Eb5VTSikeysash6ujJbi5h
Z5M7+TRnzTM32uHDj3umf9D55uHxf6oHRhw0EKw6DyCTYpdm9bYrK1KKHffDkcG1
5IBQGMShql0y79o8K12sJk0HTp43/y3HTcinplZVt29aX70CxT66hOWQ/wMmKeC6
RshYGJnLW0XwayKSeDfTwW6rnKJNad4y1eBT+HudNYmf77faMX+fjwdwF4RaWIKt
wgrpyAn0213veYLIFtuGIKLSsmCV1PJwtZOGTgksYB8k0zKUpIbAl9DPJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtpf8g7fLJt54xVqulE4oVqbELlMB8GA1UdIwQY
MBaAFA4m1F/VaSHTRp0ZxHVy8nX51VJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQt
NjY1YTY5Y2I4OTAwLzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQtNjY1YTY5Y2I4OTAw
LzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCibEpku
/yA5mcwFzumb3c58bG9ZXZY1199XOWSaZUjIAVkSqvpn+T7ZWQKvDhrzMmhVlwcC
Nai5RqFGF58gD55jGugCG03uY2AIGm1e/c8xO7ROCMNov1QKg+V3DcRhh5dNO4JJ
q+hvsJUWAfOR0GSceepqb6vzKWOQrJmLD2kfgmTmCK5hatlkvIs98vSAWbZjfeF5
OmDcidbCBXMsUJcjKDxKpXRulDYq5UPniB6AuNHMk/XLf9A3wExlUIkUL5RoMNeA
2sstyuxQf0jfZYwrwnJC+4i37+J+uQRzm4fDCpY6mKivnTKh7fevSRsuaZgnuex/
6oh3gKygp9AMKQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:00 2025 by rpki-client