Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: PbHuNGAo7pKgq0JA9UCQpOD2GGxHS0SKgdWp/5maNaM=
Subject key identifier: ED:CC:07:15:6D:13:AE:46:F0:F8:BD:55:8A:87:49:49:3E:08:15:92
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 0194BBCE839210DEA1A4ED4B27DB200BA826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0BA1
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: JWRTmHO/l2ICHs5wLLQRtHSSbdTIKpOWa00HtpLayi8=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:83:92:10:de:a1:a4:ed:4b:27:db:20:0b:a8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=edcc07156d13ae46f0f8bd558a8749493e081592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:48:1d:fd:47:be:62:59:d0:8e:2a:b6:54:
00:d1:54:ec:da:01:32:82:8c:ae:bb:d6:2d:ac:10:
33:ec:2f:eb:69:c6:0c:e8:97:41:9f:db:21:29:64:
8e:9d:8d:b8:72:8e:d5:6f:be:c4:c3:07:ad:97:59:
24:47:9e:46:c7:b1:6e:48:d8:d1:76:9b:10:f8:d1:
27:b6:0b:80:d5:75:24:8b:0c:dc:40:60:de:70:a6:
48:20:4d:2f:bf:11:0c:a3:d4:cc:e7:81:78:ad:bf:
27:37:7a:57:33:8a:69:ad:9c:ab:31:22:bf:3f:29:
19:a2:bd:ec:d6:90:9d:92:0c:9f:c2:99:22:89:bb:
bc:14:87:f1:0a:14:38:49:9c:36:bc:5b:87:f9:ce:
91:14:5a:f2:c6:a6:aa:8e:18:f5:a6:fa:3e:fc:2f:
69:14:90:3f:5a:ac:a3:fa:1b:ae:00:69:47:75:b0:
0e:0e:ca:f9:7e:19:5e:40:e7:b8:e4:79:d2:1d:21:
97:93:c6:d9:ef:82:55:05:ad:56:92:0f:3d:df:1e:
d4:3c:3c:f1:e8:55:e3:ef:b5:04:ea:c4:67:7d:07:
bb:22:dd:9a:e5:2d:2c:35:04:ac:73:8c:8e:46:29:
aa:c5:de:df:f7:ac:47:36:e5:58:a5:b0:14:11:e8:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CC:07:15:6D:13:AE:46:F0:F8:BD:55:8A:87:49:49:3E:08:15:92
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:23:b8:27:cd:a6:39:5f:d5:ed:f1:40:f3:0d:35:e4:a9:3c:
eb:1d:89:87:6a:40:af:c6:3d:94:ef:17:83:8f:31:61:c9:73:
69:d2:b5:8a:0e:73:eb:2f:73:b2:27:ac:5a:03:8d:a3:2f:90:
4d:57:ec:fc:a9:2d:61:97:bc:9a:57:06:5e:a2:45:57:32:15:
a3:49:3b:5f:55:92:62:77:f3:ea:f1:7a:2b:aa:4a:7c:74:79:
25:83:a9:f8:98:82:b6:bb:10:72:74:29:9a:f8:41:9e:a7:55:
89:ee:a1:f4:54:90:c5:bd:66:c8:1e:06:1d:66:26:83:21:ff:
31:d1:57:df:6e:cb:32:f8:16:d4:35:51:f0:d4:61:c4:7a:07:
5c:4a:2c:13:ae:ed:3d:40:d5:69:2a:31:30:0c:3b:11:99:19:
6d:3c:fa:ed:a6:1c:2b:9f:66:ec:8d:fb:22:99:1b:f6:be:59:
81:56:9b:8e:d0:d1:b9:ec:34:be:24:7b:85:9f:40:9a:4f:1f:
e3:36:d0:76:ae:01:2b:30:e3:0e:c5:95:55:30:fc:44:90:66:
9b:97:fa:a6:2e:82:ab:c5:4e:88:ba:d0:c9:6f:54:d2:cb:18:
a1:27:9c:7e:d4:f2:6f:ba:ed:4f:aa:da:b9:ed:75:ad:a3:47:
e1:f4:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:15 2025 by rpki-client