Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: Fmfm4+41xPTWlxhY33uqphds/10r4bzORNio7EGlZaI=
Subject key identifier: FC:C1:3B:7B:EA:80:72:14:39:38:BF:C6:88:C0:FB:A8:20:71:E7:04
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 0194BCAA022C1A3C2C236EF0B3DE3238869B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 0EE2
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: VTNQ1o96+AKyORkaclwwvG0cNO0Oowlq1fPhbiSbSso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:2c:1a:3c:2c:23:6e:f0:b3:de:32:38:86:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=fcc13b7bea8072143938bfc688c0fba82071e704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:1f:ec:cd:29:b5:9d:b1:b6:f4:d8:4d:11:
c0:ec:14:e4:a7:54:c0:b1:e7:6e:c8:e5:89:d8:4c:
48:c5:3b:86:8f:3f:b2:4a:01:bf:4c:98:ad:5d:ce:
80:d0:e0:df:02:19:cd:78:c1:5b:51:b6:d6:af:32:
6e:2a:19:12:cb:b5:80:e1:44:fe:23:12:9e:c4:05:
e6:2d:bb:74:23:22:bc:78:e6:34:a9:89:c7:38:c3:
ce:56:40:a3:aa:ff:46:91:ef:27:63:48:4b:cc:c5:
4c:84:87:04:f4:11:5c:16:42:3e:ae:88:a7:a5:55:
21:56:45:3d:15:dd:9f:ec:6f:ac:5b:9c:c2:9d:cd:
6d:43:6d:43:7e:5b:55:b9:8e:91:ad:7a:56:55:c7:
25:88:86:eb:1d:7d:82:5b:e2:52:df:8a:a7:e4:30:
c0:de:21:ee:1b:70:cc:8b:5e:d4:45:99:54:61:cf:
b4:4f:46:84:b9:4a:42:ab:8b:8f:e9:cd:73:dc:64:
75:8b:f2:35:0a:4f:0f:bb:18:a1:19:fa:ed:11:a9:
93:15:5b:5b:51:3b:0c:7d:a0:d9:90:0e:11:f8:17:
d3:ea:34:a0:5c:dd:63:94:4d:5f:7d:de:85:90:55:
12:61:9e:1d:33:8f:4d:89:9a:8f:ef:ff:c2:72:e7:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:3B:7B:EA:80:72:14:39:38:BF:C6:88:C0:FB:A8:20:71:E7:04
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e0:cc:b1:eb:8e:47:ea:c7:22:29:eb:df:1a:8c:80:5a:ae:
21:6f:16:f4:ba:73:09:bd:8a:2d:6f:e6:d6:83:7a:da:88:70:
b1:ca:46:08:33:a3:52:d7:13:fd:fc:bb:95:f0:82:09:9d:16:
c0:dd:0d:86:65:f4:a2:48:0c:95:9c:55:f3:4e:e6:ca:f3:50:
a1:0e:b5:21:18:db:db:2d:6e:62:cb:c2:d8:8b:c2:27:18:13:
f0:6e:26:55:22:42:69:35:5c:f8:17:ee:ba:14:73:06:7e:2d:
89:90:6e:5a:47:f8:2c:bd:ee:bb:33:13:7b:8a:a9:a5:c2:df:
36:f6:94:61:77:56:01:2d:83:06:6b:37:a2:9d:b4:01:09:2d:
07:07:a9:e0:9b:1c:f9:c0:5d:04:c4:5f:c5:7f:f8:06:4d:c8:
ad:60:17:de:80:39:f9:e3:20:24:ee:64:d5:09:bf:e1:2b:c7:
4e:c9:f5:4b:21:2e:bd:78:25:e6:30:ea:95:19:c7:25:f4:49:
ee:ae:72:52:79:d8:ba:9b:d6:da:be:d8:19:2a:c7:91:b3:04:
8b:09:8a:3e:7b:f8:47:17:be:5a:93:7d:64:24:e5:03:5d:00:
d2:23:ce:59:d8:2d:1f:30:ab:c5:5d:bc:d0:a6:36:80:a7:f9:
3e:cf:8f:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgIsGjwsI27ws94yOIabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDJmOGUwZGVhMTM4N2RhZjkwMzVkMmNkZjRlYjhjOTNh
ZDg5Y2MwHhcNMjUwMTMxMTQwMDQ1WhcNMjUwMjAxMTQwMDQ1WjAzMTEwLwYDVQQD
EyhmY2MxM2I3YmVhODA3MjE0MzkzOGJmYzY4OGMwZmJhODIwNzFlNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkAf7M0ptZ2xtvTYTRHA7BTkp1TA
seduyOWJ2ExIxTuGjz+ySgG/TJitXc6A0ODfAhnNeMFbUbbWrzJuKhkSy7WA4UT+
IxKexAXmLbt0IyK8eOY0qYnHOMPOVkCjqv9Gke8nY0hLzMVMhIcE9BFcFkI+roin
pVUhVkU9Fd2f7G+sW5zCnc1tQ21DfltVuY6RrXpWVccliIbrHX2CW+JS34qn5DDA
3iHuG3DMi17URZlUYc+0T0aEuUpCq4uP6c1z3GR1i/I1Ck8PuxihGfrtEamTFVtb
UTsMfaDZkA4R+BfT6jSgXN1jlE1ffd6FkFUSYZ4dM49NiZqP7//CcueRgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzBO3vqgHIUOTi/xojA+6ggcecEMB8GA1UdIwQY
MBaAFA3S+ODeoTh9r5A10s3064yTrYnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAt
YWE4NDg1Y2YzMDY4LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAtYWE4NDg1Y2YzMDY4
LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeDMseuO
R+rHIinr3xqMgFquIW8W9LpzCb2KLW/m1oN62ohwscpGCDOjUtcT/fy7lfCCCZ0W
wN0NhmX0okgMlZxV807myvNQoQ61IRjb2y1uYsvC2IvCJxgT8G4mVSJCaTVc+Bfu
uhRzBn4tiZBuWkf4LL3uuzMTe4qppcLfNvaUYXdWAS2DBms3op20AQktBwep4Jsc
+cBdBMRfxX/4Bk3IrWAX3oA5+eMgJO5k1Qm/4SvHTsn1SyEuvXgl5jDqlRnHJfRJ
7q5yUnnYupvW2r7YGSrHkbMEiwmKPnv4Rxe+WpN9ZCTlA10A0iPOWdgtHzCrxV28
0KY2gKf5Ps+P6w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:39 2025 by rpki-client