Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
File: DpMafPLalMzUoq_OI_OS1AYdVvk.mft (raw, json)
Hash identifier: JPIwD66EJmNioCp0yrZD7jtiTAnt2mZXsk8jZFw6KAU=
Subject key identifier: 41:99:CE:D3:94:E7:2F:31:CE:F9:4C:81:C2:4B:F1:C1:11:1F:48:05
Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
Certificate issuer: /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Certificate serial: 0195E07D79CC7374ABDD0661C4151AC95361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 06:01:14 +0000
Manifest this update: Sat 29 Mar 2025 06:01:14 +0000
Manifest next update: Sun 30 Mar 2025 06:01:14 +0000
Files and hashes: 1: DpMafPLalMzUoq_OI_OS1AYdVvk.crl (hash: MPAa6AMDBaNAyX8HSutcXyiR5EC9d/xYQOHTWmoLTzk=)
2: zrVCLm24sPlxLqzgeyn_JvpDItw.roa (hash: /XNKRA78yIF9Dhp7x0h4gHGlf9HOKwu6T6mJ6i6aMCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:79:cc:73:74:ab:dd:06:61:c4:15:1a:c9:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Validity
Not Before: Mar 29 06:01:14 2025 GMT
Not After : Mar 30 06:01:14 2025 GMT
Subject: CN=4199ced394e72f31cef94c81c24bf1c1111f4805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:8b:d0:00:3a:90:20:64:fb:4e:f2:8d:37:
ba:71:74:78:5e:bc:6e:dd:35:ac:c6:40:9e:57:0e:
82:0b:01:d7:01:e6:9d:64:d6:0f:b4:a5:18:3c:d6:
aa:3a:76:01:1f:be:e3:19:b9:33:63:c6:bc:e2:7a:
e4:fa:ff:f5:d3:d9:77:3f:f8:1f:22:18:22:4e:05:
2a:65:99:0e:46:2e:9c:80:37:04:57:8e:c0:f5:f7:
b2:b3:78:87:75:be:df:d9:42:dc:16:88:d3:04:ae:
19:09:98:c6:d8:a5:3a:15:0f:7c:49:17:30:8b:d7:
17:e8:6f:94:f3:f5:a2:c1:2c:80:9f:6e:c9:21:c8:
6d:00:84:b0:cb:5b:88:83:e0:ce:1e:87:88:ba:f8:
f6:a1:69:a5:09:31:3d:70:f8:8e:c2:8e:2e:e7:e0:
b1:71:52:17:dd:ee:9d:d4:05:72:0c:54:2f:ff:23:
3b:92:31:2c:64:1f:9f:68:96:6c:cd:6b:c9:3a:e0:
20:4f:3d:b0:06:7d:bf:d9:7f:5f:a5:1a:c1:69:33:
7a:95:87:75:05:25:46:cb:10:6a:26:bf:27:e3:5f:
09:05:35:d9:05:1b:e9:1c:ad:99:9b:b3:bd:76:e2:
29:94:1e:a1:3c:46:e1:8b:a2:46:41:60:7d:7f:c9:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:CE:D3:94:E7:2F:31:CE:F9:4C:81:C2:4B:F1:C1:11:1F:48:05
X509v3 Authority Key Identifier:
keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:cd:36:b3:25:51:b8:6a:d7:10:4e:17:59:88:ca:24:16:dc:
a5:43:77:1a:43:f0:c4:5a:73:ab:6e:59:db:fc:19:83:10:1d:
9e:8b:f2:54:da:b7:95:69:af:70:e7:dc:ac:a9:65:2e:ad:45:
c8:13:84:dd:7e:ce:31:60:4a:8c:f8:4a:51:67:c5:60:27:fa:
64:ae:45:ad:a2:85:76:46:b3:d4:0a:be:b9:fa:31:a4:1f:9c:
80:e2:d1:d3:8a:e2:7f:d8:ad:aa:56:e4:de:70:70:dd:ec:a1:
5c:d4:b4:eb:48:3e:f3:de:06:f3:82:ce:4f:6c:8c:19:72:cd:
0a:87:41:c3:1b:08:cc:b5:f4:b6:18:f4:1b:f7:e9:da:59:b8:
42:91:b5:37:23:ad:bb:ad:16:0f:32:52:41:8c:61:e6:4b:df:
ce:a4:d4:a3:37:4b:c2:54:c8:58:0a:a4:27:67:03:a0:af:d9:
12:fc:2e:8a:3b:02:79:45:b7:14:b6:c1:37:b8:ea:ae:fb:0b:
1b:d7:71:21:45:18:e2:d6:3c:ff:31:3e:04:05:2e:2a:da:48:
76:61:58:30:32:35:b6:b3:41:55:93:84:98:b9:9b:ac:5f:33:
a4:81:59:0b:0d:d0:5b:fe:8d:c7:a1:b7:da:60:a7:8c:cf:ee:
69:ce:39:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:34:38 2025 by rpki-client