Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
File: DRLgx3dBkaVcPRkx-_IABDNf0hw.mft (raw, json)
Hash identifier: lQAUCqqEdR1OGv8NB2cxkGWzuemTSwAX8pfvDb4+ses=
Subject key identifier: 9B:78:41:0B:EC:F2:6D:26:87:50:6D:04:2F:22:18:17:11:65:0A:F5
Authority key identifier: 0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
Certificate issuer: /CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Certificate serial: 019619230F12C8CC1FECBEC288D26CAA59F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
Manifest number: 14E3
Signing time: Wed 09 Apr 2025 06:00:49 +0000
Manifest this update: Wed 09 Apr 2025 06:00:49 +0000
Manifest next update: Thu 10 Apr 2025 06:00:49 +0000
Files and hashes: 1: DRLgx3dBkaVcPRkx-_IABDNf0hw.crl (hash: /B9JOPwSS5df7q4JNNIwgfIvehQwZYPp06tFYsK612U=)
2: RSYdG5gg-YCPUfslf96tr_CDk9g.roa (hash: M9FWyf6d3I10rIL5aBwIBRBiTbEoITfpKpVAl4zvaYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:23:0f:12:c8:cc:1f:ec:be:c2:88:d2:6c:aa:59:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Validity
Not Before: Apr 9 06:00:49 2025 GMT
Not After : Apr 10 06:00:49 2025 GMT
Subject: CN=9b78410becf26d2687506d042f22181711650af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:a7:41:34:59:dd:c6:12:44:42:a1:60:6f:
86:0d:2d:24:a4:45:68:0f:cb:a1:36:5c:95:53:55:
e9:4f:c1:e0:b4:3c:4b:66:33:e7:10:8e:0d:95:87:
1d:f4:b8:c5:f8:49:69:59:06:f6:21:c5:db:24:92:
da:57:22:bc:d3:1d:79:70:2e:dc:79:b4:81:75:db:
ee:13:60:c5:72:bb:78:cd:6a:69:e0:01:9b:f4:75:
f5:a0:41:ac:6c:d4:d2:97:d0:ec:59:95:ae:06:67:
b7:e0:ce:0e:37:c3:3d:22:ab:54:0e:fe:0a:c2:5e:
b2:3d:64:f7:aa:b4:21:63:bb:61:63:4f:a5:d1:59:
71:51:61:d8:cd:18:4e:d8:aa:97:90:a0:43:a3:18:
53:0f:93:b0:7b:73:87:60:39:8d:8a:c0:a4:66:f7:
d7:66:44:f6:fb:33:34:47:13:09:72:f7:85:77:ee:
ef:cf:aa:91:1d:95:d7:81:66:82:5d:8c:d2:25:fa:
ba:c6:53:1d:76:9c:31:3c:5a:76:ec:31:b8:a1:5b:
f5:00:18:3e:99:46:ed:9b:6d:5d:e0:5b:c4:e4:b6:
ef:ea:1a:a4:1d:64:36:65:2b:9b:99:ba:dd:ec:7b:
24:68:bd:1e:7e:5b:b5:97:fb:45:db:d2:b3:fd:bd:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:41:0B:EC:F2:6D:26:87:50:6D:04:2F:22:18:17:11:65:0A:F5
X509v3 Authority Key Identifier:
keyid:0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1a:39:ea:d9:10:93:65:92:ef:93:10:ad:87:5f:3d:dd:e3:
b1:dc:3d:b5:0f:9e:ec:28:a2:30:2c:65:1d:7f:13:a4:5c:c1:
f9:ef:66:14:34:00:6c:00:d4:c2:58:a4:38:87:2f:a3:22:f5:
e4:a4:e3:c9:8a:08:d2:96:06:ff:72:6b:a9:28:45:eb:ed:d2:
ac:7d:69:d9:0c:49:73:50:48:34:ab:d9:21:80:c8:a8:93:67:
09:14:ea:b8:99:24:ab:bd:bd:63:96:0c:28:1d:35:6d:e4:25:
ad:54:57:17:70:30:cf:bc:6e:98:d1:4c:77:fe:94:5a:b6:ea:
07:4e:b8:0c:a0:7d:d2:6a:35:0c:01:fd:31:c3:e5:a0:65:dc:
ea:82:4d:0e:5a:60:4f:35:e9:e9:92:a3:d0:21:29:11:0e:96:
12:f6:db:a1:49:19:92:3b:66:e2:57:ec:b2:2d:cd:f8:32:a4:
e8:11:2a:ae:a3:fd:8e:a6:78:03:3b:df:c4:4a:42:e3:4a:14:
10:27:2f:54:02:e2:6c:7c:ff:3a:89:bb:16:fe:e8:68:68:2f:
21:2e:bb:eb:6a:7d:e1:3d:b9:67:cc:c6:8c:8c:ee:c3:35:3e:
4b:0e:d1:71:52:46:69:a2:af:41:f7:92:70:06:1f:30:b1:d3:
4b:07:24:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYZIw8SyMwf7L7CiNJsqln4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTJlMGM3Nzc0MTkxYTU1YzNkMTkzMWZiZjIwMDA0MzM1
ZmQyMWMwHhcNMjUwNDA5MDYwMDQ5WhcNMjUwNDEwMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg5Yjc4NDEwYmVjZjI2ZDI2ODc1MDZkMDQyZjIyMTgxNzExNjUwYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKqnQTRZ3cYSREKhYG+GDS0kpEVo
D8uhNlyVU1XpT8HgtDxLZjPnEI4NlYcd9LjF+ElpWQb2IcXbJJLaVyK80x15cC7c
ebSBddvuE2DFcrt4zWpp4AGb9HX1oEGsbNTSl9DsWZWuBme34M4ON8M9IqtUDv4K
wl6yPWT3qrQhY7thY0+l0VlxUWHYzRhO2KqXkKBDoxhTD5Owe3OHYDmNisCkZvfX
ZkT2+zM0RxMJcveFd+7vz6qRHZXXgWaCXYzSJfq6xlMddpwxPFp27DG4oVv1ABg+
mUbtm21d4FvE5Lbv6hqkHWQ2ZSubmbrd7HskaL0eflu1l/tF29Kz/b3gcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt4QQvs8m0mh1BtBC8iGBcRZQr1MB8GA1UdIwQY
MBaAFA0S4Md3QZGlXD0ZMfvyAAQzX9IcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJMZ3gzZEJrYVZjUFJreC1fSUFCRE5mMGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85MmI1NDgtZmRiYS00Y2Q0LTgzNjEt
M2NkOTUyYmEwMDVkLzEvRFJMZ3gzZEJrYVZjUFJreC1fSUFCRE5mMGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85MmI1NDgtZmRiYS00Y2Q0LTgzNjEtM2NkOTUyYmEwMDVk
LzEvRFJMZ3gzZEJrYVZjUFJreC1fSUFCRE5mMGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxo56tkQ
k2WS75MQrYdfPd3jsdw9tQ+e7CiiMCxlHX8TpFzB+e9mFDQAbADUwlikOIcvoyL1
5KTjyYoI0pYG/3JrqShF6+3SrH1p2QxJc1BINKvZIYDIqJNnCRTquJkkq729Y5YM
KB01beQlrVRXF3Awz7xumNFMd/6UWrbqB064DKB90mo1DAH9McPloGXc6oJNDlpg
TzXp6ZKj0CEpEQ6WEvbboUkZkjtm4lfssi3N+DKk6BEqrqP9jqZ4AzvfxEpC40oU
ECcvVALibHz/Oom7Fv7oaGgvIS6762p94T25Z8zGjIzuwzU+Sw7RcVJGaaKvQfeS
cAYfMLHTSwckNQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:11 2025 by rpki-client