Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: 78bwnN+pXeB8QMRtcOG0bRIVVD2wJNJzgLQWcLnn5Zw=
Subject key identifier: A0:3F:27:14:B1:1D:72:22:1E:B2:0F:EE:65:29:3C:16:7E:DA:58:64
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 0194BC04AB9125D8EFA29A7EBF4CF50A32CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: WT+hHF5X/Qcn0Pvsrgq4Hp1CevTzKmLRYjXbEuRCnQ0=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ab:91:25:d8:ef:a2:9a:7e:bf:4c:f5:0a:32:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=a03f2714b11d72221eb20fee65293c167eda5864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:2f:65:68:0f:b9:e9:39:f9:ee:59:6b:23:
03:7e:c4:08:e9:cb:de:bf:63:3d:1a:76:eb:6b:fb:
54:1d:02:85:79:c3:75:a1:7b:03:57:6c:be:6e:99:
47:ec:d8:bf:33:d5:1a:8b:5b:5c:0c:72:1f:2e:e7:
5c:b7:df:fc:ef:ce:62:95:82:94:ea:fa:98:33:34:
21:dc:d8:bb:1f:2c:54:34:7e:69:b7:13:19:7f:64:
7a:11:a9:23:67:76:fc:6c:fe:5c:85:04:a8:e1:ff:
e8:24:9f:04:76:74:da:3e:c5:94:74:b9:2f:a0:70:
21:ce:8c:06:eb:b1:d2:58:fa:43:10:75:e3:3a:78:
35:50:a7:e6:57:b5:6c:59:8b:ea:a0:a9:57:0e:85:
05:2a:c8:51:41:06:2e:55:7d:f9:09:d4:8e:17:7c:
f3:18:7e:ae:65:5c:a2:81:b8:71:bd:6b:10:79:ce:
42:09:be:cf:88:00:6a:80:bd:49:26:7f:f8:04:98:
27:d1:6f:ed:12:37:f6:3f:27:66:91:3c:98:ea:b9:
02:c5:9d:39:b9:c6:d0:49:a3:ae:46:74:51:df:29:
01:60:c0:51:b0:24:c2:c4:8b:50:a2:20:72:36:46:
a1:77:29:d4:d2:49:14:33:9c:0a:b5:74:72:f6:84:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3F:27:14:B1:1D:72:22:1E:B2:0F:EE:65:29:3C:16:7E:DA:58:64
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2e:cf:69:f4:cf:24:f9:9c:40:f2:92:19:19:37:cb:d8:2b:
b6:eb:d0:78:f4:52:49:dd:5d:30:f0:f8:1c:56:6d:b7:9d:8c:
76:be:ff:47:2e:38:65:5b:dc:95:ab:35:02:69:5c:17:e1:0a:
d1:8a:d7:90:de:fe:60:ae:2e:c2:8e:65:64:10:59:29:49:66:
81:88:ba:8b:0b:94:ad:ac:38:ff:ef:40:d2:e5:91:10:d8:cd:
30:bf:50:2f:23:7a:b9:ec:9e:b8:52:34:ce:de:a9:f2:5e:76:
8e:fb:bf:74:be:64:6e:7b:f1:93:17:66:55:e5:a8:a9:ab:0e:
54:1d:86:ce:d2:db:e8:e2:b6:f5:c1:3b:0b:38:80:b5:b1:fc:
b6:c8:ff:68:9c:3d:6d:8d:a4:b6:9c:8c:69:29:d4:3d:c6:f7:
39:6d:76:0a:0a:7b:ee:4b:e6:c7:58:4e:f6:da:bb:fe:84:e9:
69:11:21:07:11:b2:96:72:18:27:32:66:28:30:26:c5:1c:d4:
bb:77:bd:9e:9b:16:12:38:ea:07:32:fe:02:8e:fa:86:64:3e:
5f:4d:1a:c0:39:73:f4:ce:89:2f:4a:c5:88:c2:ca:a1:91:7f:
95:93:de:e7:ce:e4:68:86:33:05:94:71:3f:92:4b:24:f2:12:
84:53:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:59 2025 by rpki-client