Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: iA1JSTkkoTEhSOuUqgBVoVqcD7wS5UCC9A4DHRou5qE=
Subject key identifier: 38:87:A0:49:69:74:10:A3:4C:F2:D1:C9:EF:0E:F4:83:E1:F5:23:0B
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 0195E1592F1B2163C40240500AB7B5293997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 10:01:12 +0000
Manifest this update: Sat 29 Mar 2025 10:01:12 +0000
Manifest next update: Sun 30 Mar 2025 10:01:12 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: 1bfPL5Zdys+ri9N9hTgK6ZSUtDtst0L6lW6I6YMZmuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:2f:1b:21:63:c4:02:40:50:0a:b7:b5:29:39:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Mar 29 10:01:12 2025 GMT
Not After : Mar 30 10:01:12 2025 GMT
Subject: CN=3887a049697410a34cf2d1c9ef0ef483e1f5230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:e5:59:f4:22:4f:f2:49:f2:86:a8:d2:4c:
1b:cc:81:e7:5e:ac:1f:9a:5d:1c:f4:a5:ca:4b:94:
6f:27:26:52:0e:09:55:ff:93:e4:54:ae:90:06:76:
c9:d8:b1:ba:20:cb:2a:99:80:8f:94:b1:ab:b7:aa:
af:cb:da:a7:7c:11:63:05:57:9b:01:3e:00:05:1c:
56:db:d3:c3:db:83:7d:6d:09:3b:af:71:ab:8f:a0:
a0:2a:b1:36:80:8e:2b:9e:73:77:d7:57:50:74:1b:
52:62:4b:95:36:93:4e:3b:c3:d3:e6:1b:81:ae:ff:
34:8f:a2:82:47:7d:93:aa:9b:9c:3b:78:e6:b6:94:
ac:47:88:74:ce:56:0c:46:c8:17:74:7e:1e:85:be:
ea:1a:71:8f:aa:ee:b1:a5:a2:2c:37:7f:fd:a4:d6:
63:bc:fd:65:ee:63:4c:76:78:aa:19:de:b7:36:ee:
74:57:a3:84:4c:80:74:25:f7:25:9f:3d:19:79:7d:
bf:cc:cd:3f:22:2a:36:f9:dc:10:90:1f:2b:74:7d:
c0:4a:9d:60:d7:3d:36:38:70:4b:15:a0:20:7e:93:
79:8d:04:f2:3a:93:7d:40:02:7a:82:93:28:90:14:
2d:c2:6a:79:31:26:26:99:4f:03:03:b8:d1:15:69:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:87:A0:49:69:74:10:A3:4C:F2:D1:C9:EF:0E:F4:83:E1:F5:23:0B
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e3:ea:69:9c:e2:d1:57:08:5a:58:d4:c2:3e:52:2f:f0:1e:
8f:e0:e2:82:73:09:d7:a0:37:a9:46:8a:d8:dd:8f:9e:8c:87:
d8:8d:36:82:cf:4b:16:fa:c7:31:0e:67:f0:b4:86:67:79:64:
4d:94:3f:8b:54:41:ac:5d:8c:ff:31:1d:72:b4:be:fd:7a:81:
e4:d1:61:d3:94:9b:c4:9f:ef:d5:d7:e8:71:e2:50:82:db:12:
15:6a:c2:14:f0:49:83:02:c8:9e:e6:8a:df:f5:92:99:d9:fb:
7d:d1:3e:3f:fc:ed:e8:b4:ab:c8:97:39:e8:d9:cf:46:28:3e:
eb:c4:e0:d7:b9:1d:3c:2e:c7:91:80:6e:d7:7d:db:4f:aa:dd:
de:0e:04:6e:a8:7b:92:1d:92:05:38:cc:02:39:e5:7a:48:0f:
8b:68:32:95:72:e7:15:90:c0:bf:d0:f3:cd:ee:f4:b1:5c:57:
d0:6a:d1:70:59:bb:26:95:43:fd:97:be:d7:83:a8:49:3d:43:
87:3e:0b:fe:7b:18:0a:35:aa:40:1c:58:3a:4b:08:cf:5f:87:
b8:3a:c4:2c:f3:81:e4:a4:21:2c:70:6d:f9:a3:e4:b0:8b:c9:
05:a6:51:35:4d:8d:b7:1d:a9:d2:79:cb:9d:b4:c1:eb:f2:4c:
b9:f1:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:28:38 2025 by rpki-client