Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/DkZF5B-uqNgmQ9GkotxNsmBPL3s.mft
File: DkZF5B-uqNgmQ9GkotxNsmBPL3s.mft (raw, json)
Hash identifier: 9yV38K4X4UTmgMrYTFMkERy1mSdEe6gLiXCO4RdwgJ8=
Subject key identifier: 30:97:17:C7:FF:D6:B9:50:24:2F:D0:7F:A6:42:8E:D3:68:5B:40:7B
Authority key identifier: 0E:46:45:E4:1F:AE:A8:D8:26:43:D1:A4:A2:DC:4D:B2:60:4F:2F:7B
Certificate issuer: /CN=0e4645e41faea8d82643d1a4a2dc4db2604f2f7b
Certificate serial: 018671F45E6E9B79A02AF59B20B3F49033A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkZF5B-uqNgmQ9GkotxNsmBPL3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/DkZF5B-uqNgmQ9GkotxNsmBPL3s.mft
Manifest number: 0814
Signing time: Tue 21 Feb 2023 03:11:25 +0000
Manifest this update: Tue 21 Feb 2023 03:11:25 +0000
Manifest next update: Wed 22 Feb 2023 03:11:25 +0000
Files and hashes: 1: DkZF5B-uqNgmQ9GkotxNsmBPL3s.crl (hash: pOIShBIfmKHuWbDZOP5rT37uqMrWvm0b6z3G5y2c7rk=)
2: XIQi72bHearV46prhY-M7rj1Pjo.roa (hash: UJGhTV2mBbOvxQ35I4R0vdPeRmP0dFd2MTBA2UamxyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:f4:5e:6e:9b:79:a0:2a:f5:9b:20:b3:f4:90:33:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e4645e41faea8d82643d1a4a2dc4db2604f2f7b
Validity
Not Before: Feb 21 03:11:25 2023 GMT
Not After : Feb 22 03:11:25 2023 GMT
Subject: CN=309717c7ffd6b950242fd07fa6428ed3685b407b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:ec:f2:0e:e1:fe:08:42:8c:28:2f:59:fb:
b1:85:f2:4b:62:f3:3e:e0:10:be:a7:04:52:b0:a8:
c6:1a:3e:e4:21:63:74:5f:93:24:3c:42:5b:01:9e:
b1:fd:b9:94:bd:0e:21:9b:74:29:f5:99:1d:e1:7b:
c0:92:4c:24:b4:66:1a:9f:8a:7a:ef:32:09:95:37:
19:5a:ea:46:47:9b:ff:ba:0b:de:20:50:6d:58:bd:
9a:2e:47:ba:ae:79:66:99:bd:98:7d:d0:bb:b7:92:
c7:fb:d6:b7:a9:c4:c8:dd:01:24:2d:bd:23:10:53:
17:50:78:10:c8:b3:4e:4d:cb:5c:bb:f7:8c:28:79:
5b:06:63:18:f0:c6:13:4b:52:29:b1:56:05:77:d0:
56:b5:b8:43:57:f1:64:f8:4f:83:65:ea:79:c4:d1:
40:8d:57:64:38:3e:5b:b5:31:6c:a3:88:e4:ab:07:
2d:18:14:06:7e:30:fd:37:20:96:62:f1:71:71:19:
ac:f6:43:be:0f:73:6c:c8:bd:e0:9a:8b:cc:24:7d:
08:30:79:c4:a9:fd:0d:c3:44:b9:18:ce:ce:88:4b:
05:18:ab:7b:3d:36:dc:2e:7b:e2:aa:b9:1a:8a:42:
47:ac:6e:74:73:b5:85:41:65:91:b7:e1:c2:10:b1:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:97:17:C7:FF:D6:B9:50:24:2F:D0:7F:A6:42:8E:D3:68:5B:40:7B
X509v3 Authority Key Identifier:
keyid:0E:46:45:E4:1F:AE:A8:D8:26:43:D1:A4:A2:DC:4D:B2:60:4F:2F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkZF5B-uqNgmQ9GkotxNsmBPL3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/DkZF5B-uqNgmQ9GkotxNsmBPL3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/DkZF5B-uqNgmQ9GkotxNsmBPL3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:ef:8e:3b:9e:da:22:1f:95:7c:8b:f7:db:45:36:1f:08:
b0:ca:a8:8c:0d:b4:1e:a4:e7:4a:89:9c:0c:98:62:6b:84:b8:
5a:cf:a3:52:de:b8:3b:db:ce:79:d1:5b:2d:04:1c:2a:96:80:
ab:aa:57:4f:35:1d:f3:81:15:ea:3d:6d:47:65:de:67:1b:00:
ba:c5:b4:b6:4a:ad:bd:d1:de:97:5d:32:98:47:3c:1d:71:9a:
68:9c:58:15:6e:5d:eb:71:f3:22:b2:3a:48:d3:1a:dc:55:ad:
0c:fb:79:cb:97:53:95:dd:96:5b:b3:46:22:8a:c4:77:57:3b:
48:b6:79:e1:cc:0e:e2:28:78:93:fc:c4:90:56:75:6f:fa:18:
07:53:59:53:53:d8:87:fb:04:5d:ac:a2:c0:4d:68:64:bb:d8:
36:5f:08:ef:e5:d5:6e:54:3b:6a:3c:cd:86:4c:52:e8:b5:4d:
57:d2:72:4e:1e:98:55:db:ae:c7:b3:24:a6:17:0a:33:7f:a9:
3f:17:fe:ec:3f:c5:d7:34:3f:48:84:cf:4f:48:cf:66:47:1d:
43:01:9c:68:e4:63:f0:95:c7:cc:4e:45:c1:06:e6:33:99:f8:
d2:df:d6:c9:cb:8c:3e:12:cb:db:da:65:7e:03:97:17:26:94:
c9:3c:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:59 2025 by rpki-client