Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: VPiowUUUhXp7khVx/AqyuZucgDP8kFwY9aAtl+RQhqI=
Subject key identifier: AC:5E:0D:DD:10:71:AD:AF:C6:24:15:32:93:27:75:64:97:13:CB:03
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 0194BC3CAF6999681EAB0A5DE4873F292D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: EruIY0Qb7eB/ewUo+plHlp7FXo1TD+FhpDUYy096W8I=)
2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:af:69:99:68:1e:ab:0a:5d:e4:87:3f:29:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=ac5e0ddd1071adafc6241532932775649713cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:9b:56:83:62:db:b1:64:36:71:3d:01:96:
40:43:3d:42:6d:c6:7a:f8:56:fa:84:b2:63:95:b9:
e7:96:65:cc:34:07:4c:d6:79:3b:e0:e8:ab:d9:e1:
19:55:ae:dd:c1:54:ee:06:fa:e3:e2:98:29:e2:61:
ed:cf:e8:d3:78:94:80:63:ce:65:bf:98:a7:11:f3:
a0:43:9b:65:6d:7b:03:dd:4f:6e:d4:98:94:95:5f:
c7:61:07:6d:e5:ea:bb:76:f1:96:2b:d8:c8:b0:49:
06:d4:6f:8f:63:4c:54:74:2a:4b:00:fc:f9:37:17:
54:ee:9f:91:bf:62:17:1e:34:bb:a2:2b:a4:fe:6e:
5c:2d:9d:e2:3a:68:e8:d9:4c:7b:ca:f9:c2:ef:1b:
c8:f3:c1:e5:94:57:7d:16:91:66:24:be:e6:10:f0:
0b:91:68:3c:b0:17:7b:f6:a5:8b:d2:b1:a4:5e:c5:
fd:aa:f6:8d:5b:5b:d8:0d:27:c4:64:55:de:5d:92:
29:54:f9:00:1f:6a:6b:92:c1:4e:74:68:dd:7b:fa:
9d:95:8d:72:52:b4:22:7c:0e:a9:fa:ab:03:7b:cc:
f6:dd:6f:fc:14:91:85:5d:60:61:df:da:c1:b2:d0:
14:fe:b4:1f:5c:66:bb:cc:4c:ae:75:67:7f:68:4e:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5E:0D:DD:10:71:AD:AF:C6:24:15:32:93:27:75:64:97:13:CB:03
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f8:92:47:a1:ef:fb:99:54:bc:0d:2d:ed:4e:6e:9c:62:2e:
72:4f:7a:8a:aa:bb:0d:66:6f:4a:f5:dd:2d:8c:2f:56:34:ee:
aa:e7:a3:50:c3:15:4f:aa:e4:36:96:a0:68:63:7b:51:80:3f:
c3:48:81:7b:a8:b9:fc:dc:94:e8:6f:02:56:51:e5:ce:41:98:
19:8c:8d:d6:bd:af:c7:52:61:c3:cf:6d:92:89:74:22:a7:1b:
f8:3b:6d:20:9a:dc:12:63:2b:ec:55:67:ed:a1:00:f9:0a:ee:
81:2e:d5:a5:dd:3e:4e:d3:58:10:0f:41:30:dc:65:07:9f:cb:
aa:bc:89:4c:12:fb:aa:1d:f0:7a:0a:fd:2e:57:0e:df:7e:a0:
25:bd:67:5c:c0:d2:e8:a4:e1:4c:ca:e0:d7:a2:29:3a:ce:64:
36:a7:00:41:6a:11:5d:b0:f5:22:62:e8:84:76:56:89:2f:cd:
72:3f:57:10:0b:00:61:c9:a4:3a:89:3e:cf:59:f1:24:ae:df:
44:3f:47:26:76:ae:cd:7e:80:f0:ce:b5:8e:fd:bd:f0:6c:49:
36:c4:ed:31:d1:b5:e7:a1:cd:59:2e:9c:e5:9e:5f:b3:76:57:
17:df:76:11:aa:d9:56:dd:ea:50:f8:97:15:1b:24:a1:09:85:
f6:f0:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client