Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: zFoQUZFYxfCFZDAJ/7iKbelr2YZxThs/5ei5vJ1rxig=
Subject key identifier: 2F:2F:EC:75:1A:57:B5:F2:5D:97:2C:58:CB:3D:3B:46:0F:71:B8:FC
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 0195E046AE444737B0B337BE24BC5E92DA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 09CC
Signing time: Sat 29 Mar 2025 05:01:23 +0000
Manifest this update: Sat 29 Mar 2025 05:01:23 +0000
Manifest next update: Sun 30 Mar 2025 05:01:23 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: 13ynmF2/e0t0AvQBGIR1Z6a3UyppQ9yM8jm+Bbw+PBw=)
2: xx1FjY8JYYnnymM_Usd0dhEPXMc.roa (hash: jThxXylFfBYyWhSUb/DWJLhZb//oHbnd3oYRtsD1klg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:ae:44:47:37:b0:b3:37:be:24:bc:5e:92:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Mar 29 05:01:23 2025 GMT
Not After : Mar 30 05:01:23 2025 GMT
Subject: CN=2f2fec751a57b5f25d972c58cb3d3b460f71b8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:c3:52:81:64:35:42:b1:c4:00:b9:79:2d:
72:f1:db:3c:b2:82:91:47:21:b8:4d:76:60:94:cc:
66:38:c3:33:11:0c:56:97:2b:1e:97:dc:51:94:f5:
ee:87:c2:74:6e:5a:d1:5e:27:d7:38:16:9a:c9:74:
9e:6f:f9:40:03:37:5b:da:59:1d:42:81:8e:9b:37:
2a:cd:a2:30:05:58:b8:d9:f2:8d:28:9e:ce:ca:a3:
03:8d:b0:ab:80:db:5a:c8:a7:57:bc:be:c1:e8:60:
6b:d4:ad:f3:e6:37:da:7d:52:7a:47:66:20:55:60:
ee:6b:90:f6:c5:64:05:a4:0b:73:14:44:06:5a:43:
b7:64:14:ce:45:e8:a4:d3:89:e1:fa:9d:a0:67:4d:
b6:97:79:ee:77:01:47:cb:be:13:bf:f6:3d:e9:e3:
dd:75:97:11:a1:51:47:46:19:13:36:27:2d:63:3d:
2f:2f:ee:bd:26:69:34:ef:2e:a3:64:43:0f:ac:90:
00:42:0c:65:9e:58:7c:c2:c8:0d:8d:07:b7:f8:23:
06:15:cd:f7:56:14:fe:66:61:f6:9c:74:09:f7:56:
36:63:3c:80:ca:9c:00:93:bc:13:1b:ad:98:65:40:
1c:e6:94:14:ad:7e:a4:3e:cc:72:ce:9f:7f:b1:64:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2F:EC:75:1A:57:B5:F2:5D:97:2C:58:CB:3D:3B:46:0F:71:B8:FC
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:19:53:2d:22:7f:af:9e:f6:ee:90:f6:80:a5:64:51:d3:be:
02:22:75:5e:7b:2a:1d:fa:46:f5:90:10:29:8c:49:e8:6d:f9:
3c:57:d5:11:8b:68:08:04:6e:2f:57:68:da:47:4f:6e:24:7a:
80:1f:83:d2:8a:40:82:6d:06:3c:bf:e8:51:23:d8:8a:87:10:
b0:cd:16:f0:8e:46:5d:3c:5a:4d:13:3f:da:62:d7:00:0e:9d:
08:42:dd:c8:98:d0:00:db:0c:3d:26:88:a7:92:d2:d7:21:56:
87:17:0f:70:9e:5a:20:f5:6d:53:b2:fc:f8:68:04:5b:ef:91:
b4:eb:a6:58:ab:bc:13:30:c4:d3:ee:85:5e:e9:e3:d7:cd:49:
86:22:d8:65:00:30:f7:c4:fa:be:d6:15:a7:03:ec:e7:36:b0:
4f:b7:da:86:b9:a1:27:88:ac:1b:f5:d5:cc:b4:43:13:10:5d:
10:6e:5e:7e:01:5c:97:9e:89:e6:de:0f:b4:e1:01:04:8f:83:
09:6c:62:24:c4:c5:8e:05:33:36:04:c6:34:67:30:de:8e:47:
a8:58:a9:39:6a:a3:f4:71:83:96:1e:ae:f8:f4:80:a7:b0:29:
36:6f:0c:2a:c9:29:2d:ce:cb:a0:b0:de:3b:22:c7:8e:8b:b1:
36:15:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:47 2025 by rpki-client