Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1b950f-9a3e-407f-98bf-305a6e75a389/1/dp3DK-F9nk3s1Pt77uJ15Xg-qJE.mft
File: dp3DK-F9nk3s1Pt77uJ15Xg-qJE.mft (raw, json)
Hash identifier: Uhl6aKsOnwEZSG00xMsTpRaH4+V/8uPk6Ku/eAMAIYk=
Subject key identifier: 9A:9F:B4:F6:18:0D:CA:24:04:10:CF:F9:4A:E1:A1:B0:A7:F1:8F:5C
Authority key identifier: 76:9D:C3:2B:E1:7D:9E:4D:EC:D4:FB:7B:EE:E2:75:E5:78:3E:A8:91
Certificate issuer: /CN=769dc32be17d9e4decd4fb7beee275e5783ea891
Certificate serial: 0193DD8094D1D44404F5A73A8991A16B8F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp3DK-F9nk3s1Pt77uJ15Xg-qJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1b950f-9a3e-407f-98bf-305a6e75a389/1/dp3DK-F9nk3s1Pt77uJ15Xg-qJE.mft
Manifest number: 0E68
Signing time: Thu 19 Dec 2024 06:00:11 +0000
Manifest this update: Thu 19 Dec 2024 06:00:11 +0000
Manifest next update: Fri 20 Dec 2024 06:00:11 +0000
Files and hashes: 1: dp3DK-F9nk3s1Pt77uJ15Xg-qJE.crl (hash: j1YFeHVCxLw0Wc6gFj4c9X7gZHC2lWmwTQu8+YqSAcc=)
2: xaGg0XHQiaq-jS1Q23zgSri4bp0.roa (hash: m/YSNi3nOlLGYJHyn38ygs1l8OJnt4w3LNGkvyubCU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:80:94:d1:d4:44:04:f5:a7:3a:89:91:a1:6b:8f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769dc32be17d9e4decd4fb7beee275e5783ea891
Validity
Not Before: Dec 19 06:00:11 2024 GMT
Not After : Dec 20 06:00:11 2024 GMT
Subject: CN=9a9fb4f6180dca240410cff94ae1a1b0a7f18f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:5d:91:98:53:f6:38:c6:5c:ce:5f:68:54:
60:d2:90:d0:5d:f7:b0:8d:37:3a:56:51:d4:d8:05:
ea:93:44:4e:f1:fc:08:bc:42:7e:b3:36:39:e2:34:
cf:f3:67:fc:ef:60:c8:48:42:f8:b7:3e:d9:fb:07:
88:b8:10:fb:e6:b2:95:22:3d:8b:5f:a9:aa:36:59:
71:d9:ba:39:c3:e1:68:fb:55:14:14:10:1c:25:7c:
8f:81:dc:51:6f:e9:ac:c9:e6:b7:14:db:75:b8:ae:
7e:17:02:2a:25:9f:5c:5e:50:17:3c:51:80:d2:7b:
a7:25:61:fb:73:a8:40:df:d8:53:6a:ca:21:f0:bd:
60:c2:5a:13:a2:84:13:a4:d3:43:42:59:13:4b:19:
e7:10:bb:23:37:17:73:86:f7:21:6e:6b:df:30:59:
11:fe:58:28:ef:d8:55:b5:8a:2a:d0:51:04:9b:2f:
9e:9b:57:c1:c3:81:d2:ae:0b:85:e0:6d:ea:d9:b2:
d3:63:58:c9:4c:5f:72:f2:e5:71:78:e5:2c:18:27:
d6:25:b2:08:b3:82:c9:ff:d9:7b:1c:9d:17:f4:48:
7f:00:38:f1:b6:a9:a3:f3:8d:c6:b6:a6:b3:72:35:
a1:f3:9c:41:44:3f:53:80:19:6d:a8:dd:72:b6:71:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9F:B4:F6:18:0D:CA:24:04:10:CF:F9:4A:E1:A1:B0:A7:F1:8F:5C
X509v3 Authority Key Identifier:
keyid:76:9D:C3:2B:E1:7D:9E:4D:EC:D4:FB:7B:EE:E2:75:E5:78:3E:A8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp3DK-F9nk3s1Pt77uJ15Xg-qJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1b950f-9a3e-407f-98bf-305a6e75a389/1/dp3DK-F9nk3s1Pt77uJ15Xg-qJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1b950f-9a3e-407f-98bf-305a6e75a389/1/dp3DK-F9nk3s1Pt77uJ15Xg-qJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3b:fc:e3:53:ba:cf:e8:69:c3:18:f5:1f:08:04:e7:72:f1:
ce:74:22:82:cb:55:90:82:37:f3:5c:c1:06:9e:46:9e:b9:86:
9c:9e:89:5f:28:b0:c6:e8:f1:f0:c5:d9:43:13:53:c2:28:d5:
72:70:e9:22:f2:ea:6d:2d:47:c0:3f:f6:3e:9a:be:7d:f5:3d:
4c:35:6c:0b:dd:af:c6:e9:58:5f:9e:53:50:78:67:91:a7:aa:
16:a9:43:ae:2c:6c:41:63:f8:04:b4:71:62:0a:c8:42:e2:86:
47:28:fa:8a:ec:03:b2:cb:cc:aa:d6:ce:64:17:b6:26:96:ac:
eb:7b:b8:37:31:16:94:9b:04:7a:b4:cf:bf:a8:10:37:29:18:
13:ec:4c:7b:10:6e:b3:69:d8:b6:12:15:13:a6:25:e4:1c:30:
6a:42:8c:bc:89:91:76:89:ce:f0:be:df:3b:95:08:53:7a:88:
e7:4d:27:d1:a1:7a:98:77:88:2c:c6:36:11:b4:aa:2f:35:d5:
81:d3:4f:11:4d:36:ed:63:8f:ec:f1:27:85:a9:d3:9f:29:2a:
e8:63:f6:76:ca:e4:e1:52:d3:28:e5:12:02:cb:b8:19:6c:9f:
63:c2:76:46:16:29:d4:a9:51:a7:b8:8f:a4:a2:ef:c2:60:f1:
72:37:4c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPdgJTR1EQE9ac6iZGha49vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OWRjMzJiZTE3ZDllNGRlY2Q0ZmI3YmVlZTI3NWU1Nzgz
ZWE4OTEwHhcNMjQxMjE5MDYwMDExWhcNMjQxMjIwMDYwMDExWjAzMTEwLwYDVQQD
Eyg5YTlmYjRmNjE4MGRjYTI0MDQxMGNmZjk0YWUxYTFiMGE3ZjE4ZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yVdkZhT9jjGXM5faFRg0pDQXfew
jTc6VlHU2AXqk0RO8fwIvEJ+szY54jTP82f872DISEL4tz7Z+weIuBD75rKVIj2L
X6mqNllx2bo5w+Fo+1UUFBAcJXyPgdxRb+msyea3FNt1uK5+FwIqJZ9cXlAXPFGA
0nunJWH7c6hA39hTasoh8L1gwloTooQTpNNDQlkTSxnnELsjNxdzhvchbmvfMFkR
/lgo79hVtYoq0FEEmy+em1fBw4HSrguF4G3q2bLTY1jJTF9y8uVxeOUsGCfWJbII
s4LJ/9l7HJ0X9Eh/ADjxtqmj843GtqazcjWh85xBRD9TgBltqN1ytnEA5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqftPYYDcokBBDP+UrhobCn8Y9cMB8GA1UdIwQY
MBaAFHadwyvhfZ5N7NT7e+7ideV4PqiRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHAzREstRjluazNzMVB0Nzd1SjE1WGctcUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xYjk1MGYtOWEzZS00MDdmLTk4YmYt
MzA1YTZlNzVhMzg5LzEvZHAzREstRjluazNzMVB0Nzd1SjE1WGctcUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xYjk1MGYtOWEzZS00MDdmLTk4YmYtMzA1YTZlNzVhMzg5
LzEvZHAzREstRjluazNzMVB0Nzd1SjE1WGctcUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzv841O6
z+hpwxj1HwgE53LxznQigstVkII381zBBp5GnrmGnJ6JXyiwxujx8MXZQxNTwijV
cnDpIvLqbS1HwD/2Ppq+ffU9TDVsC92vxulYX55TUHhnkaeqFqlDrixsQWP4BLRx
YgrIQuKGRyj6iuwDssvMqtbOZBe2Jpas63u4NzEWlJsEerTPv6gQNykYE+xMexBu
s2nYthIVE6Yl5BwwakKMvImRdonO8L7fO5UIU3qI500n0aF6mHeILMY2EbSqLzXV
gdNPEU027WOP7PEnhanTnykq6GP2dsrk4VLTKOUSAsu4GWyfY8J2RhYp1KlRp7iP
pKLvwmDxcjdMCA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:45 2025 by rpki-client