Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: J6ph6xbAKTJyZozucLHK0xUz+OyUnmYDhhnLVLKPCd4=
Subject key identifier: B0:F0:25:15:8E:9C:53:6B:DB:C1:02:56:7E:6F:26:7F:38:B1:50:36
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 0195E07D1C94560ED016A4EBCDAAE4C47852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0366
Signing time: Sat 29 Mar 2025 06:00:50 +0000
Manifest this update: Sat 29 Mar 2025 06:00:50 +0000
Manifest next update: Sun 30 Mar 2025 06:00:50 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: RhhjFq3O343GxrIgrXIIiFv8niw5FINwLqfpPKyMtYE=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:1c:94:56:0e:d0:16:a4:eb:cd:aa:e4:c4:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Mar 29 06:00:50 2025 GMT
Not After : Mar 30 06:00:50 2025 GMT
Subject: CN=b0f025158e9c536bdbc102567e6f267f38b15036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:01:14:4f:73:17:31:ca:24:49:48:76:58:3a:
ae:1e:7e:8a:1e:56:d5:ba:14:4c:41:f1:ea:65:24:
cc:d0:c9:e2:a2:25:b9:a6:48:ae:19:42:da:cd:dd:
b2:ff:a1:cb:fc:e5:b2:2e:57:97:9d:c8:e3:53:41:
a4:b2:55:9b:22:7c:2e:fd:c1:52:66:ec:40:93:ce:
ef:9c:76:ff:c3:94:70:e0:8e:05:29:2f:9e:bb:4e:
60:3a:9e:0b:cb:2d:c7:bc:d9:28:a2:b0:56:79:de:
92:c6:f7:bf:aa:ac:05:8d:cd:db:a7:97:c6:0a:7e:
2b:d5:c9:92:7e:70:1c:db:a1:e0:64:f9:17:5b:19:
86:97:26:1f:0f:46:5b:be:02:6d:b7:ef:57:94:ba:
05:32:a2:0e:5b:36:dc:d3:1d:d4:57:e7:0d:07:33:
90:43:f9:79:c7:e6:8b:3e:c2:2c:2b:27:d7:2b:f6:
51:23:d9:0a:3a:59:b1:cb:92:7f:b8:89:c6:5c:87:
a0:e6:d4:c1:3e:21:86:5d:0d:9d:c4:b1:a5:ff:cc:
33:95:f3:fd:d2:7b:a6:5d:d8:31:d0:c6:82:32:70:
cd:e7:a8:d8:0b:5f:fe:24:d6:06:24:82:72:ac:1a:
4f:f4:c3:2e:3c:b9:e2:27:4f:94:c5:1d:b5:af:95:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F0:25:15:8E:9C:53:6B:DB:C1:02:56:7E:6F:26:7F:38:B1:50:36
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:04:98:20:f3:f2:64:64:2a:b4:62:aa:9a:86:cc:28:11:
6e:51:34:89:49:35:0f:b0:fe:bf:66:ac:ec:6d:c2:bb:f4:82:
54:0f:1d:77:65:df:d8:4c:c1:4e:0c:ec:8b:1a:0a:9c:c1:d3:
3a:c8:84:dd:dc:cc:fb:56:25:a8:be:25:2f:2d:b3:8c:ea:f5:
ca:3c:d1:93:98:63:8f:9f:99:be:b5:72:1a:54:24:7c:49:b0:
bc:5a:e1:93:51:45:6c:31:dc:b1:3c:91:00:07:65:20:f9:ad:
11:83:18:cb:6b:45:af:25:1a:40:ab:3d:29:45:ef:3c:bc:c6:
d3:6b:fc:f5:13:fa:ae:5a:cb:ac:17:6a:ad:1f:58:70:da:c3:
3f:7d:4f:aa:d3:47:70:1e:a6:93:a8:0c:d8:63:64:25:58:36:
b5:0e:a1:b5:63:92:42:b8:a1:5d:77:74:1a:37:24:ae:7a:2e:
86:65:4e:14:ab:a2:b1:15:6f:05:bb:7e:de:a3:01:e5:0c:37:
40:ba:28:bd:2b:59:37:6e:6e:ed:f2:17:83:f5:e0:b2:8c:da:
24:b7:c2:b7:50:37:ca:e6:f8:48:38:9d:3a:03:f0:22:e0:9a:
66:67:f5:6f:9d:96:91:28:58:65:88:f9:f2:c2:1c:7e:0e:13:
17:3f:7e:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfRyUVg7QFqTrzarkxHhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm
NWNlNTEwHhcNMjUwMzI5MDYwMDUwWhcNMjUwMzMwMDYwMDUwWjAzMTEwLwYDVQQD
EyhiMGYwMjUxNThlOWM1MzZiZGJjMTAyNTY3ZTZmMjY3ZjM4YjE1MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gEUT3MXMcokSUh2WDquHn6KHlbV
uhRMQfHqZSTM0MnioiW5pkiuGULazd2y/6HL/OWyLleXncjjU0GkslWbInwu/cFS
ZuxAk87vnHb/w5Rw4I4FKS+eu05gOp4Lyy3HvNkoorBWed6Sxve/qqwFjc3bp5fG
Cn4r1cmSfnAc26HgZPkXWxmGlyYfD0ZbvgJtt+9XlLoFMqIOWzbc0x3UV+cNBzOQ
Q/l5x+aLPsIsKyfXK/ZRI9kKOlmxy5J/uInGXIeg5tTBPiGGXQ2dxLGl/8wzlfP9
0numXdgx0MaCMnDN56jYC1/+JNYGJIJyrBpP9MMuPLniJ0+UxR21r5W7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDwJRWOnFNr28ECVn5vJn84sVA2MB8GA1UdIwQY
MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt
NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm
LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEwEmCDz
8mRkKrRiqpqGzCgRblE0iUk1D7D+v2as7G3Cu/SCVA8dd2Xf2EzBTgzsixoKnMHT
OsiE3dzM+1YlqL4lLy2zjOr1yjzRk5hjj5+ZvrVyGlQkfEmwvFrhk1FFbDHcsTyR
AAdlIPmtEYMYy2tFryUaQKs9KUXvPLzG02v89RP6rlrLrBdqrR9YcNrDP31PqtNH
cB6mk6gM2GNkJVg2tQ6htWOSQrihXXd0GjckrnouhmVOFKuisRVvBbt+3qMB5Qw3
QLoovStZN25u7fIXg/XgsozaJLfCt1A3yub4SDidOgPwIuCaZmf1b52WkShYZYj5
8sIcfg4TFz9+lA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:49:49 2025 by rpki-client