Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: eaUF3o2Uzce/AW/+rllaPMduT6MzsYmp+76M2sWdd0Q=
Subject key identifier: EC:64:7D:D7:84:C4:B3:77:BB:52:DA:32:09:41:F1:0C:F5:51:47:17
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 0194BD4E7D755C0C74CCD1DA6C06E74230EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 0EA5
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: Vf6wQ12kpAXEyGdndWDOTDKj0rSMapcaFUwGnroEaes=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:75:5c:0c:74:cc:d1:da:6c:06:e7:42:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=ec647dd784c4b377bb52da320941f10cf5514717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:d3:f3:79:28:ae:19:2e:b9:99:5a:23:e1:
f7:a0:14:12:32:2f:ed:21:c9:8b:38:e4:9e:f7:46:
db:5b:6e:8b:89:67:1d:70:fa:95:3f:61:0f:1c:c0:
c2:1b:a7:b3:ad:28:95:f6:6e:9b:d7:43:89:c5:1e:
e7:bf:c4:20:2c:c2:00:4a:a1:f8:03:cd:a2:07:8c:
77:19:4b:3b:19:48:62:92:0d:a7:ea:46:89:bd:9a:
62:b8:b5:23:c4:e6:c1:8e:68:db:1e:b2:06:e5:10:
e2:b0:66:d3:d7:3d:34:43:36:a2:bb:98:ab:fb:c8:
21:ab:7f:be:07:85:05:58:89:c3:80:d3:68:28:66:
b8:08:24:02:02:7c:e2:7c:7a:03:af:24:93:05:ab:
73:5c:0e:92:b6:1c:44:94:c5:44:0f:8b:55:0a:6b:
9f:15:6d:41:10:b7:2a:51:0d:76:1a:27:e0:a5:a4:
e9:76:ee:9a:91:bc:73:57:8e:ef:1a:bd:53:a9:7b:
46:16:81:00:90:ad:8a:cf:cc:b6:eb:47:04:68:2f:
90:2e:ea:20:48:ce:73:3f:9f:17:97:d8:15:0f:66:
4f:00:05:87:c0:63:9f:fb:56:6c:39:20:13:09:fc:
04:56:47:a0:6b:95:68:2d:c7:d7:2a:76:d9:bb:8e:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:7D:D7:84:C4:B3:77:BB:52:DA:32:09:41:F1:0C:F5:51:47:17
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6f:5e:a6:a6:70:e9:84:df:d5:d6:d7:35:cf:94:82:9a:47:
57:09:e6:66:a9:d6:05:ed:eb:91:2e:8d:77:fc:0f:18:0d:34:
56:99:87:4d:0e:c3:39:7a:20:fd:5e:7a:6a:37:b6:35:1e:e0:
c2:57:7c:77:c8:84:8d:8b:b2:e8:ee:b9:a2:61:7f:6f:48:20:
7b:19:7b:bf:87:08:4f:d9:20:31:78:18:46:aa:73:bf:4b:2d:
21:32:36:16:01:6d:99:de:55:d6:c3:88:ca:a3:a6:bd:46:94:
88:fe:88:bc:5d:09:c4:db:36:9a:71:34:79:e0:ea:88:c1:cc:
6f:aa:1d:19:67:6d:9a:18:89:49:98:b8:e3:8b:60:14:e2:13:
32:a5:94:a6:49:e7:71:55:7a:7b:ea:79:1c:76:b4:dc:7b:aa:
11:24:46:32:d1:86:01:a6:87:49:af:35:3c:67:ec:c9:74:04:
74:68:23:4e:0b:ba:1f:e9:95:05:c8:c1:7d:0c:dc:16:54:14:
ab:c5:01:f3:16:fb:04:66:90:c1:89:c2:ad:03:8e:5b:a5:30:
b3:33:5b:36:4c:ad:71:69:d0:c1:70:c0:e8:04:7b:d5:0c:69:
cb:9f:ce:71:87:74:6c:a6:fd:74:66:cb:9a:d7:b4:f5:5a:c1:
d0:5f:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:36 2025 by rpki-client