Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
File: DRLgx3dBkaVcPRkx-_IABDNf0hw.mft (raw, json)
Hash identifier: PlTMZcC1XMK/weUPAjbnahC8QZ+UGMYnXQTRANkUfnE=
Subject key identifier: 42:DD:5B:3F:86:CF:3D:B8:C8:8D:07:35:D8:46:AD:F3:71:6B:16:C8
Authority key identifier: 0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
Certificate issuer: /CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Certificate serial: 0195E1222FC711C507316CE126185FA18055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 09:01:08 +0000
Manifest this update: Sat 29 Mar 2025 09:01:08 +0000
Manifest next update: Sun 30 Mar 2025 09:01:08 +0000
Files and hashes: 1: DRLgx3dBkaVcPRkx-_IABDNf0hw.crl (hash: he00EgMjlSH5+fDliumFl15fpYgMPZrpyLqSfETehWc=)
2: RSYdG5gg-YCPUfslf96tr_CDk9g.roa (hash: M9FWyf6d3I10rIL5aBwIBRBiTbEoITfpKpVAl4zvaYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:2f:c7:11:c5:07:31:6c:e1:26:18:5f:a1:80:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Validity
Not Before: Mar 29 09:01:08 2025 GMT
Not After : Mar 30 09:01:08 2025 GMT
Subject: CN=42dd5b3f86cf3db8c88d0735d846adf3716b16c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:52:fc:fd:38:38:c2:02:92:12:37:64:76:
10:c5:5a:77:22:15:ac:33:2b:7c:9c:6a:b1:f1:41:
a0:08:b5:d8:60:a0:16:60:b8:07:c5:2c:eb:6d:05:
eb:e8:a7:dc:35:14:4f:33:cf:7d:91:a6:0f:b8:08:
54:cf:e9:79:7a:da:b1:b2:02:84:d8:54:84:e3:33:
7e:85:19:36:2c:02:94:00:ac:d2:3e:5b:c3:49:c8:
7b:bd:a2:b9:56:32:71:f6:b9:07:66:33:ae:e7:4a:
25:e3:60:63:8d:30:0d:7c:ad:da:c0:a1:3d:8e:20:
4b:24:39:a2:66:f9:e0:d4:b0:36:34:fd:0f:51:14:
a9:22:72:e6:40:11:d1:33:82:8f:40:ee:3c:ed:06:
0f:0d:26:58:c9:8a:d1:04:c8:64:a3:04:fb:5a:bf:
2d:e4:c6:df:54:02:06:ed:58:46:59:1f:ec:ff:e4:
9e:f2:b4:f7:2a:48:e3:d6:d6:01:90:f6:0f:45:15:
12:92:fc:d9:51:29:2a:5b:be:25:ec:0b:56:05:db:
a7:d1:39:98:f0:9b:7d:9d:42:b6:be:a9:31:8d:2c:
a6:26:0a:fd:7e:83:31:e9:4c:c0:9b:a4:4c:b5:4d:
54:37:a8:5c:94:5c:cd:90:6b:ca:17:4b:cf:9a:f9:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:5B:3F:86:CF:3D:B8:C8:8D:07:35:D8:46:AD:F3:71:6B:16:C8
X509v3 Authority Key Identifier:
keyid:0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:40:ee:8c:8b:20:b6:a0:d8:a8:a1:74:d8:05:be:8a:73:f2:
1b:cc:af:db:12:78:05:3e:9d:b0:e0:2c:6a:f8:84:52:1b:c9:
fe:00:a8:ac:0b:d0:75:7d:6b:c2:34:98:bd:ce:f6:2c:a0:1b:
55:32:51:af:cd:af:2d:c0:4f:0e:da:08:d1:16:16:a6:17:9e:
1c:ca:12:3a:3a:cd:5b:6c:2e:52:87:26:1b:b6:eb:c5:53:81:
e0:9e:b6:3b:8e:a8:e5:63:85:36:9a:50:49:aa:86:42:7e:8b:
49:88:fe:5e:98:2d:24:1f:af:ff:f6:2c:ee:1c:53:02:21:ab:
c6:8e:64:db:0e:17:3d:21:18:eb:5c:6d:f6:81:f8:e3:15:9d:
8b:f2:66:8a:39:2a:b3:3b:3b:e2:35:74:53:22:80:90:bb:a8:
37:83:cf:de:e4:5e:48:9b:25:7f:7b:9c:de:d8:71:54:55:1c:
ed:45:b5:34:19:47:a2:32:da:60:df:2d:38:9e:35:7a:be:b9:
31:ea:6c:bc:08:63:71:11:9c:bc:c6:c6:29:93:12:fb:68:22:
e6:b9:7e:a6:f3:b1:16:80:2e:05:65:f2:b7:1b:3d:f5:03:e6:
bd:64:53:59:8d:58:14:ac:a3:2b:70:36:ed:39:4c:db:43:9c:
59:f4:a3:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIi/HEcUHMWzhJhhfoYBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTJlMGM3Nzc0MTkxYTU1YzNkMTkzMWZiZjIwMDA0MzM1
ZmQyMWMwHhcNMjUwMzI5MDkwMTA4WhcNMjUwMzMwMDkwMTA4WjAzMTEwLwYDVQQD
Eyg0MmRkNWIzZjg2Y2YzZGI4Yzg4ZDA3MzVkODQ2YWRmMzcxNmIxNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTlS/P04OMICkhI3ZHYQxVp3IhWs
Myt8nGqx8UGgCLXYYKAWYLgHxSzrbQXr6KfcNRRPM899kaYPuAhUz+l5etqxsgKE
2FSE4zN+hRk2LAKUAKzSPlvDSch7vaK5VjJx9rkHZjOu50ol42BjjTANfK3awKE9
jiBLJDmiZvng1LA2NP0PURSpInLmQBHRM4KPQO487QYPDSZYyYrRBMhkowT7Wr8t
5MbfVAIG7VhGWR/s/+Se8rT3Kkjj1tYBkPYPRRUSkvzZUSkqW74l7AtWBdun0TmY
8Jt9nUK2vqkxjSymJgr9foMx6UzAm6RMtU1UN6hclFzNkGvKF0vPmvkWNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELdWz+Gzz24yI0HNdhGrfNxaxbIMB8GA1UdIwQY
MBaAFA0S4Md3QZGlXD0ZMfvyAAQzX9IcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJMZ3gzZEJrYVZjUFJreC1fSUFCRE5mMGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85MmI1NDgtZmRiYS00Y2Q0LTgzNjEt
M2NkOTUyYmEwMDVkLzEvRFJMZ3gzZEJrYVZjUFJreC1fSUFCRE5mMGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85MmI1NDgtZmRiYS00Y2Q0LTgzNjEtM2NkOTUyYmEwMDVk
LzEvRFJMZ3gzZEJrYVZjUFJreC1fSUFCRE5mMGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEDujIsg
tqDYqKF02AW+inPyG8yv2xJ4BT6dsOAsaviEUhvJ/gCorAvQdX1rwjSYvc72LKAb
VTJRr82vLcBPDtoI0RYWpheeHMoSOjrNW2wuUocmG7brxVOB4J62O46o5WOFNppQ
SaqGQn6LSYj+XpgtJB+v//Ys7hxTAiGrxo5k2w4XPSEY61xt9oH44xWdi/Jmijkq
szs74jV0UyKAkLuoN4PP3uReSJslf3uc3thxVFUc7UW1NBlHojLaYN8tOJ41er65
MepsvAhjcRGcvMbGKZMS+2gi5rl+pvOxFoAuBWXytxs99QPmvWRTWY1YFKyjK3A2
7TlM20OcWfSjOA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:42 2025 by rpki-client