Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
File: D-qK4ZBhrMVImsJxkIKs6lovxdM.mft (raw, json)
Hash identifier: rvxEZZ32x6xAPkGYjYZ1VbA2FFC4+1cnk8b1Suj9gso=
Subject key identifier: 37:36:B7:A1:D3:DA:5F:0C:8B:E1:E8:CC:B0:E8:EE:32:EB:B6:9E:69
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Certificate issuer: /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial: 0194BBCE2BC5EF230594F7CF911698DCE568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
Manifest number: 06F3
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: D-qK4ZBhrMVImsJxkIKs6lovxdM.crl (hash: NroNaYrQGw4UhLPUbsc90lGomeGZ9QP/+kjBYv3VsUU=)
2: M10vf4QxH5-zWTvsa4ILhkuyN0k.roa (hash: ddpmJOxtLixoYeVKM1qcWIIFhN7ghewh8wxesIUHdzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2b:c5:ef:23:05:94:f7:cf:91:16:98:dc:e5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=3736b7a1d3da5f0c8be1e8ccb0e8ee32ebb69e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:d2:e5:a9:b8:94:36:a7:7e:a1:a9:24:3e:
2d:ec:39:21:26:0f:b7:fb:c5:45:ea:67:a4:1f:8b:
97:28:43:91:57:5c:f7:10:21:0f:2b:0a:12:13:5b:
c8:34:ea:2a:50:e8:7a:df:72:c1:74:37:0a:50:0b:
1c:41:82:30:13:8f:54:85:11:66:7e:47:a4:fe:79:
de:98:3d:37:63:40:db:5c:33:eb:50:18:e1:53:11:
b2:d1:5f:41:6e:98:9e:63:2a:6a:96:ad:7c:65:19:
75:88:6f:98:d9:d6:46:32:ed:2e:49:e0:19:2a:7c:
4d:87:20:0c:a7:ef:4f:22:43:f9:e1:8e:43:b8:6f:
31:48:fa:47:a1:5f:5f:90:4f:53:58:07:16:c2:55:
00:b8:25:a4:1b:28:19:14:56:c8:09:c4:ef:dd:75:
c8:f1:55:25:cf:16:e7:95:6b:4e:5e:39:01:db:0d:
4a:23:3f:52:00:de:26:59:d9:6f:3f:cf:6d:76:bb:
d1:9a:c4:54:9f:d6:b7:b7:c7:f9:27:da:dc:03:19:
56:c1:7b:f5:33:36:83:f8:32:56:17:ab:ec:b9:94:
8a:34:1d:3b:ca:53:56:2a:fb:c8:23:eb:d8:ab:87:
4e:d8:7b:eb:ba:96:9b:b8:67:2b:cb:87:10:7c:82:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:36:B7:A1:D3:DA:5F:0C:8B:E1:E8:CC:B0:E8:EE:32:EB:B6:9E:69
X509v3 Authority Key Identifier:
keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:47:ea:eb:7f:10:fb:b5:22:34:1b:a1:71:81:2c:3d:eb:
4d:51:c9:3c:62:17:69:63:83:7e:97:4e:54:1c:c3:05:9a:fd:
0c:c6:9d:b4:81:f6:51:ae:42:9d:66:02:34:2b:79:f3:58:07:
2d:81:24:ca:c7:b2:be:fe:34:3b:b8:72:7d:b1:35:1b:d4:ea:
59:4d:b9:af:6f:79:6c:b6:a4:49:13:86:1a:83:5a:e4:9f:c6:
36:f1:c0:c4:99:c0:3e:16:91:60:22:03:a8:f9:28:9c:ed:19:
80:d2:bf:29:f6:15:e0:18:00:37:85:0a:d3:3c:a7:2e:05:65:
b5:b8:75:bf:69:76:b1:3e:92:0b:48:bc:d0:ce:e2:d5:18:18:
40:7f:4d:82:e6:3c:89:65:b6:a7:49:27:a3:f4:38:ea:b4:91:
38:91:d2:08:91:a3:5c:6e:f7:00:a8:b9:30:9d:ca:22:bb:d6:
ec:b8:7f:50:23:d4:f4:6c:6f:f8:74:81:1e:8c:20:3a:17:3d:
b5:d2:aa:9a:06:85:5f:1d:80:06:02:1c:78:61:1c:5c:1f:96:
4f:28:af:84:12:63:b3:92:ce:93:ed:c4:df:ba:ac:8c:76:8b:
18:17:bc:1d:c9:b0:c1:82:97:7b:0f:6c:e4:12:63:f3:9f:44:
4d:2d:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:50:17 2025 by rpki-client