Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1a44b7-9c4b-40b9-b6ac-d6930c97e967/1/De0g5c_qDXlqs_c7mM0kvvHFzJo.mft
File: De0g5c_qDXlqs_c7mM0kvvHFzJo.mft (raw, json)
Hash identifier: xwF9WDxEo8rftbihmZRdwjV7c/ZzWL/Zb0ZhoiFe9io=
Subject key identifier: DF:27:5F:2E:C6:62:B4:C6:A3:30:EB:F0:A0:E9:58:AB:3C:F3:53:6F
Authority key identifier: 0D:ED:20:E5:CF:EA:0D:79:6A:B3:F7:3B:98:CD:24:BE:F1:C5:CC:9A
Certificate issuer: /CN=0ded20e5cfea0d796ab3f73b98cd24bef1c5cc9a
Certificate serial: 0192652437BFB7EDCBAFAB71AD13D12B4565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De0g5c_qDXlqs_c7mM0kvvHFzJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1a44b7-9c4b-40b9-b6ac-d6930c97e967/1/De0g5c_qDXlqs_c7mM0kvvHFzJo.mft
Manifest number: 12F6
Signing time: Mon 07 Oct 2024 04:02:05 +0000
Manifest this update: Mon 07 Oct 2024 04:02:05 +0000
Manifest next update: Tue 08 Oct 2024 04:02:05 +0000
Files and hashes: 1: De0g5c_qDXlqs_c7mM0kvvHFzJo.crl (hash: 6Q7a9xfuhkVp+f+ggO3cGKpkc0FQYCciBL1ZtfkYOUA=)
2: owwdxqBAqbJxnpeaEpqsNAzrfBk.roa (hash: O1YwLdWOVxNvwf7QXInMg67U3uMDFFu3a+vVMP4Sd1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:65:24:37:bf:b7:ed:cb:af:ab:71:ad:13:d1:2b:45:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded20e5cfea0d796ab3f73b98cd24bef1c5cc9a
Validity
Not Before: Oct 7 04:02:05 2024 GMT
Not After : Oct 8 04:02:05 2024 GMT
Subject: CN=df275f2ec662b4c6a330ebf0a0e958ab3cf3536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:e1:b6:f3:df:bf:64:eb:22:c0:dd:89:b7:
31:77:a1:89:a7:f7:e2:2d:72:2b:bf:2e:64:1d:08:
8e:ab:fb:91:4d:b9:1b:71:f1:16:43:8a:ff:d6:e4:
aa:93:80:da:96:89:8f:a0:3f:3c:0e:11:96:d4:9d:
1f:4c:8c:17:da:e7:06:e9:40:ff:cb:ea:1c:cd:ab:
fd:20:1d:62:ab:0a:3d:2c:08:4d:cb:4e:2a:24:63:
91:0f:0a:b8:6b:e2:18:39:3f:0c:fa:4f:a2:57:76:
5c:83:80:33:2d:ce:24:2b:96:cb:c6:ae:93:16:38:
4a:a1:71:1b:1e:d8:8a:c0:e2:97:47:21:8f:fa:cd:
22:46:ec:0b:30:29:10:11:ee:5a:7e:15:dc:fd:12:
28:da:0b:eb:99:62:bb:91:6d:63:6f:f4:fd:12:29:
88:b9:a3:79:c7:a5:12:3d:56:0a:53:ea:b7:e4:a8:
48:bf:f6:c1:cb:79:80:cb:d5:25:61:0f:6f:51:55:
f0:06:4e:04:89:19:05:70:b3:5e:2c:3f:19:28:9e:
26:9a:1b:4d:d5:aa:6b:36:a4:52:5d:e9:d5:33:b9:
73:f5:34:1d:a2:25:44:46:24:20:0c:19:98:3a:da:
00:f3:57:ee:ed:41:18:4d:02:26:87:5a:f8:84:6c:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:5F:2E:C6:62:B4:C6:A3:30:EB:F0:A0:E9:58:AB:3C:F3:53:6F
X509v3 Authority Key Identifier:
keyid:0D:ED:20:E5:CF:EA:0D:79:6A:B3:F7:3B:98:CD:24:BE:F1:C5:CC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De0g5c_qDXlqs_c7mM0kvvHFzJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1a44b7-9c4b-40b9-b6ac-d6930c97e967/1/De0g5c_qDXlqs_c7mM0kvvHFzJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1a44b7-9c4b-40b9-b6ac-d6930c97e967/1/De0g5c_qDXlqs_c7mM0kvvHFzJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e6:79:48:c7:69:ef:24:0b:55:ca:50:6c:c8:d1:6e:d2:16:
7b:6f:df:e9:55:fe:4c:d3:3f:74:b3:8e:e1:b7:72:bf:ad:07:
04:8a:37:22:23:98:5d:50:c4:d6:48:62:56:52:85:07:4d:b8:
a3:32:2c:cf:44:a1:5e:88:96:02:46:9a:1f:75:1c:e4:ba:76:
16:b1:17:54:49:14:74:44:7b:a0:9d:0e:7e:23:0d:5a:97:92:
2f:d5:bf:fd:7d:17:69:02:9a:ff:c3:d6:c0:af:1f:ae:df:ac:
86:ea:d4:27:3b:0c:bd:8c:49:e2:a5:49:c6:73:b3:95:65:6d:
a4:5e:a7:b2:ae:81:64:43:68:45:a0:c4:4a:83:3d:10:95:74:
27:a5:99:7d:c4:77:36:4d:57:0c:5b:17:e1:42:60:8f:eb:d4:
46:ec:b1:da:e9:d6:63:b2:04:0f:d1:e8:ab:c8:cc:24:2d:0f:
ff:90:78:b4:19:02:50:7a:f0:5c:c3:36:fa:ec:99:b0:9f:df:
2f:c9:26:b9:35:0a:f1:d7:93:38:cc:85:19:15:20:ff:01:4e:
72:3e:69:39:15:40:52:48:2e:f0:1b:5c:de:89:4e:34:2f:b1:
4f:2a:81:f4:eb:b5:39:1c:f9:a9:b3:94:74:27:90:88:9f:a6:
51:55:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:49 2025 by rpki-client