Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: JTS+Y63CqDdZAPzhDp3ymF/i7fdUQqeGFk98E+ODQTY=
Subject key identifier: 10:64:58:E7:46:72:C6:72:95:B7:30:F5:44:2D:41:DE:71:AC:FF:00
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 0194BC04BB730F6DE845065C80DE57BC137D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: qCX4bZjYwCtckmhJtpvYDNHrzhqGuge3LyutaAym4l8=)
2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:73:0f:6d:e8:45:06:5c:80:de:57:bc:13:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=106458e74672c67295b730f5442d41de71acff00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:35:ea:9e:f4:af:73:e8:2a:86:2c:b3:e6:
88:3b:9c:b2:50:6d:da:86:f0:7f:b0:81:d9:4b:9f:
de:00:82:e5:a3:e9:3c:4f:80:10:f9:85:00:83:20:
77:36:ab:15:f1:5b:bf:13:a0:81:e9:7e:1c:9b:22:
2a:5f:64:33:ad:43:0c:b6:0f:57:fb:61:9f:2b:25:
bf:df:c8:2b:8a:52:11:f7:c8:66:bf:72:3d:57:ff:
e4:db:44:ac:a9:68:49:9e:fa:14:d1:0a:1b:4e:d0:
83:36:d5:a9:b2:fb:56:d0:67:cf:a6:8f:a0:3b:ca:
58:2e:5b:f3:99:56:4d:65:a4:d1:fa:de:00:32:25:
42:0c:a6:b8:b5:d6:b1:be:f9:84:c5:a8:9b:a4:e8:
c0:08:5b:f9:89:c7:ea:80:4b:30:77:0e:d7:88:44:
75:62:f6:9e:30:1c:df:0a:16:ac:52:0c:82:83:5a:
2a:bb:6b:ab:2b:d0:1e:8c:76:9b:b4:aa:78:39:03:
3c:30:1e:fc:a6:e0:9d:fa:41:ae:fd:54:86:b2:36:
de:f9:a5:ed:a6:ea:66:32:a8:99:e8:28:99:e4:5c:
ac:2c:b3:2d:0d:9e:04:19:1a:db:46:9b:0e:91:27:
f9:00:fa:1c:ca:36:f4:db:64:32:c2:fe:02:34:94:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:58:E7:46:72:C6:72:95:B7:30:F5:44:2D:41:DE:71:AC:FF:00
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:67:46:58:ee:ae:47:20:6b:ea:74:57:37:11:06:d5:8c:42:
93:f0:86:f4:4f:f3:51:92:30:7b:5f:2a:43:d5:e8:4f:9f:db:
f8:d1:bb:27:9b:17:98:2d:57:6e:aa:ec:ee:c7:a0:b3:39:9d:
14:2f:7f:07:f9:99:a5:ee:b7:40:54:71:3e:2e:08:92:13:82:
cd:04:69:c5:53:ed:ee:08:76:c3:8e:61:5a:fb:c6:54:6c:12:
02:7e:23:d9:cb:b7:02:36:42:85:14:ca:bb:d1:15:a4:eb:5d:
3f:64:f6:95:01:81:ae:1d:51:a8:6c:d2:e6:96:89:cb:61:45:
91:3e:20:16:36:0c:c4:4d:43:b8:49:7c:ea:79:c5:72:08:e9:
ca:a0:74:f5:a4:f8:3a:45:de:e5:17:09:f5:82:dc:0f:6b:fa:
d2:31:a3:38:8f:ea:64:50:d2:7b:f4:d6:97:4d:80:38:80:4b:
60:46:b3:82:34:82:32:9f:dc:6f:2d:2e:f0:ee:ba:51:e5:f0:
3c:2b:8a:2b:71:1a:a0:07:01:27:17:cc:41:ea:3d:53:a8:4d:
df:b0:a6:6c:f7:e1:21:15:8d:ea:aa:0d:73:00:35:40:d1:5c:
d1:4b:19:09:93:95:de:c6:7b:97:52:50:4f:d4:81:1a:be:22:
bd:bf:19:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLtzD23oRQZcgN5XvBN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjUwMTMxMTEwMDE0WhcNMjUwMjAxMTEwMDE0WjAzMTEwLwYDVQQD
EygxMDY0NThlNzQ2NzJjNjcyOTViNzMwZjU0NDJkNDFkZTcxYWNmZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYQ16p70r3PoKoYss+aIO5yyUG3a
hvB/sIHZS5/eAILlo+k8T4AQ+YUAgyB3NqsV8Vu/E6CB6X4cmyIqX2QzrUMMtg9X
+2GfKyW/38grilIR98hmv3I9V//k20SsqWhJnvoU0QobTtCDNtWpsvtW0GfPpo+g
O8pYLlvzmVZNZaTR+t4AMiVCDKa4tdaxvvmExaibpOjACFv5icfqgEswdw7XiER1
YvaeMBzfChasUgyCg1oqu2urK9AejHabtKp4OQM8MB78puCd+kGu/VSGsjbe+aXt
pupmMqiZ6CiZ5FysLLMtDZ4EGRrbRpsOkSf5APocyjb022Qywv4CNJQY2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBkWOdGcsZylbcw9UQtQd5xrP8AMB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWdGWO6u
RyBr6nRXNxEG1YxCk/CG9E/zUZIwe18qQ9XoT5/b+NG7J5sXmC1Xbqrs7segszmd
FC9/B/mZpe63QFRxPi4IkhOCzQRpxVPt7gh2w45hWvvGVGwSAn4j2cu3AjZChRTK
u9EVpOtdP2T2lQGBrh1RqGzS5paJy2FFkT4gFjYMxE1DuEl86nnFcgjpyqB09aT4
OkXe5RcJ9YLcD2v60jGjOI/qZFDSe/TWl02AOIBLYEazgjSCMp/cby0u8O66UeXw
PCuKK3EaoAcBJxfMQeo9U6hN37CmbPfhIRWN6qoNcwA1QNFc0UsZCZOV3sZ7l1JQ
T9SBGr4ivb8ZBA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:57 2025 by rpki-client