Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: quRfh8UAelgEY5Ue0sZJwXi4cTKKPs73dQqki6r7gU0=
Subject key identifier: D4:2A:6D:CD:AC:FF:F8:EA:04:48:64:89:39:2A:EA:04:D6:4C:1F:47
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 0195E07DCBB23F486BD46E4A762918A3BA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 10D0
Signing time: Sat 29 Mar 2025 06:01:35 +0000
Manifest this update: Sat 29 Mar 2025 06:01:35 +0000
Manifest next update: Sun 30 Mar 2025 06:01:35 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: iq4xk9U03JqkjoZCo0F3AUvWnB4hDDiNZuCMcnn9rRc=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:cb:b2:3f:48:6b:d4:6e:4a:76:29:18:a3:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Mar 29 06:01:35 2025 GMT
Not After : Mar 30 06:01:35 2025 GMT
Subject: CN=d42a6dcdacfff8ea04486489392aea04d64c1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:90:5f:e6:fd:0e:8a:ae:40:fe:93:be:01:
11:c6:02:0f:07:26:da:c6:7a:dd:82:ed:bd:49:55:
c0:4d:e6:97:a2:10:0c:ab:f1:66:6f:91:1c:cd:2d:
75:14:00:50:3e:9f:6d:f6:10:a6:60:fe:5c:69:4b:
c4:a9:fc:62:48:f8:a3:01:d2:d8:f0:bb:9f:cf:51:
fc:71:a8:47:71:e0:3d:09:63:0f:c3:1a:b0:09:a0:
94:ac:b8:e1:e6:14:72:4d:04:4c:15:66:e6:89:83:
3c:82:20:29:c9:09:9a:90:f7:e2:b2:e7:bc:2a:ed:
48:ea:45:31:79:66:c1:d0:9e:94:3c:74:33:1b:0a:
46:ec:50:f3:1d:44:3e:af:30:27:25:6e:f4:cb:c4:
71:5d:77:c5:72:74:49:a0:57:18:d9:0e:e6:a3:03:
4a:da:a9:43:27:45:52:fd:ca:a2:00:76:a8:89:15:
2e:1f:41:16:a1:80:74:19:25:9d:07:ed:db:c4:33:
25:ab:80:80:33:fd:a4:e1:35:e6:39:c0:26:c6:f2:
56:04:74:49:7f:48:74:25:88:b5:da:45:7b:f6:b0:
56:5d:ff:71:2b:15:83:a9:79:ba:e8:70:44:61:81:
34:fe:f3:db:a9:21:cd:a2:4f:be:ac:61:24:f8:cb:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:6D:CD:AC:FF:F8:EA:04:48:64:89:39:2A:EA:04:D6:4C:1F:47
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0d:20:c0:40:38:d0:7d:bb:bd:b4:08:49:cb:26:6a:8c:9b:
f1:dc:c8:cb:f1:0d:1e:b8:b6:13:af:39:94:29:b4:eb:f6:a4:
45:9d:f0:ea:bb:f5:d6:f6:b6:8f:b3:59:60:c3:58:95:68:4c:
f0:cf:b5:f3:44:e6:d3:08:21:8a:ab:4f:2b:a4:ad:7a:b8:6d:
10:13:d5:ac:98:23:3e:fc:5e:89:52:cb:eb:23:c5:45:95:f0:
89:bb:c0:cd:44:b6:0a:f5:d2:a5:67:2f:89:e6:8e:8b:e4:c6:
17:c6:79:66:e3:64:a1:52:f4:33:c7:c3:51:9a:cd:02:c3:80:
ff:77:d6:6e:13:a6:34:3c:c1:e4:67:2a:b3:3e:6e:e1:f7:b6:
1e:4f:8b:37:d6:f9:83:06:dc:86:4e:89:18:3c:dd:7b:15:55:
58:31:63:8f:f5:66:d9:4c:59:98:92:d4:d6:93:c9:51:fb:de:
81:b6:c7:f9:f5:a1:eb:9f:74:0e:51:34:44:45:bb:32:68:ae:
0a:de:34:73:2c:ea:74:7e:7b:24:c7:01:4e:a5:58:b7:5a:f9:
20:6e:be:33:1e:0b:3b:5b:a8:d9:d0:f1:6c:52:14:d9:44:97:
7a:14:02:bc:b1:e6:06:a3:68:01:38:6a:1c:3e:5f:c9:e9:a1:
5f:86:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:51:36 2025 by rpki-client