
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: 6zlJON//zECi0JEdmTSvdTtIahfYJ7BglLFlrvRkjT0=
Subject key identifier: E2:A5:09:79:00:E7:FB:28:5F:0A:E3:82:38:66:ED:EB:94:95:8E:B2
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 0194BC3C1F1B9EFD25E760FCAE332A7E97EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 0D7F
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: 0VCRinyq5LEqUWgSMI6RGJ2kY6efSC9xFUpDIG7k7lw=)
4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1f:1b:9e:fd:25:e7:60:fc:ae:33:2a:7e:97:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=e2a5097900e7fb285f0ae3823866edeb94958eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:8e:ad:56:f1:11:a6:68:6a:fb:dc:d2:74:
a7:15:b4:b0:6b:a1:81:b3:98:fc:11:20:f7:60:f3:
f3:12:6f:03:fb:21:c4:d4:79:2f:ed:e4:ff:07:09:
73:84:db:a3:ec:bb:54:fe:f1:7c:51:fc:7d:3e:43:
07:cf:5a:c7:13:d6:15:78:52:8f:38:19:d8:7b:1d:
87:62:a6:2a:5a:a5:e4:04:1c:f0:ae:4d:e2:b6:cb:
f9:93:84:c2:4c:0f:2e:4f:c5:fe:a8:fe:f7:47:70:
44:54:3b:0d:b8:7a:0c:1a:03:fa:a1:31:6c:dd:19:
f6:19:7b:b8:46:6f:7e:38:e2:a5:72:3e:f0:5a:b7:
de:3d:38:6f:68:7b:7c:0f:99:52:d1:45:1a:86:00:
e6:b8:65:f5:d5:d3:70:58:48:28:b1:7f:6e:cc:21:
10:ca:ea:66:ef:1f:d3:ec:0c:91:71:de:1d:b9:14:
18:ef:96:66:fa:63:8e:1f:97:b5:68:88:56:39:f1:
ab:58:16:cb:ec:a8:c0:4a:4c:44:d2:cd:62:ad:b7:
cc:c7:64:93:04:c8:2a:30:ad:c5:5c:1f:94:16:e9:
c8:be:90:62:fa:14:62:e5:7f:00:85:50:d3:1d:12:
a0:87:43:55:50:3d:89:30:5a:f2:54:5e:8f:48:da:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:09:79:00:E7:FB:28:5F:0A:E3:82:38:66:ED:EB:94:95:8E:B2
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:22:84:92:13:67:de:d0:23:a6:2d:ab:6e:8b:00:09:55:7a:
24:01:2f:bd:6d:e1:f1:74:e5:24:4a:2d:6f:b6:df:3d:f7:93:
54:3a:ec:d0:97:41:bd:1f:6c:7d:14:fb:ea:02:fb:2a:fc:80:
f9:2f:2c:ba:1d:cb:7d:c7:c1:30:5f:2e:2a:e6:a8:7a:cc:a8:
cc:9e:d2:4a:d9:3c:3d:9f:35:01:55:40:8e:f1:70:f4:e3:df:
14:3a:95:d8:c2:16:40:c5:5d:9d:66:e6:36:3f:b4:7d:e0:6d:
ff:49:86:42:6d:05:40:09:8c:64:8c:b0:cf:b2:3b:01:58:47:
b1:44:4d:e0:f2:53:31:90:62:80:34:bd:7a:de:1c:ee:7f:e0:
b6:98:23:1a:54:9f:f8:fb:b9:a8:ff:b8:21:cc:2d:95:fb:c5:
c7:f3:9c:d3:5e:d6:36:34:8e:2f:61:a0:bb:46:3b:c3:a3:5a:
a1:5c:60:a0:b3:38:fb:1b:a6:bf:b3:eb:8e:aa:78:d8:5a:d2:
dc:12:28:69:98:5c:52:7f:41:b9:c7:fb:a9:09:ce:a4:74:78:
f7:63:b8:fe:2b:31:af:4c:8f:60:08:8b:97:f6:18:c1:34:99:
17:6b:de:41:92:1f:0c:33:63:fb:36:48:f5:e9:f4:59:26:d7:
f6:65:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:15:29 2025 by rpki-client