Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: ltIAGyjf5BK/xZ/htoYWyKmj32U5A5gqL5+0NoG4xFA=
Subject key identifier: 00:95:64:08:BD:8E:C8:36:03:0F:02:AB:07:31:D1:AB:7F:D7:AD:5A
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 0194BD17808168865EDB0D0F9BA9472133C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 10C7
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: gIYOTh71ecT3QuOIkDKyR+RsxhXyNootCkO7D6lElns=)
2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:80:81:68:86:5e:db:0d:0f:9b:a9:47:21:33:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=00956408bd8ec836030f02ab0731d1ab7fd7ad5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:02:f3:a6:53:de:7c:cc:e8:a7:5c:81:d9:
10:23:13:85:59:cd:6b:cf:bb:66:be:b7:91:49:2f:
01:9c:1e:e8:00:24:60:4d:a5:a9:66:9a:0e:08:cd:
64:fa:b8:48:d3:d3:80:c6:a0:a2:79:ee:8e:93:07:
d5:09:8d:97:a2:e1:c8:b3:33:30:12:2d:bf:37:d0:
59:e3:54:de:dd:5c:81:78:36:54:a8:1f:e4:51:67:
a8:6a:c6:f2:17:22:54:5d:68:5e:1f:17:5e:15:67:
7c:2d:32:0e:47:44:75:c1:f2:b5:a6:ac:57:6c:12:
b3:a1:8a:6a:4a:d9:fc:9c:f8:90:e6:c1:ba:f0:5e:
04:90:1f:60:a6:82:1c:6c:a4:5f:3b:57:a1:22:f8:
eb:f8:de:98:98:90:7f:a1:91:94:57:03:6a:e9:d3:
0f:a7:68:da:bb:1a:8d:79:84:1e:e6:2c:c5:50:df:
7a:bf:46:2d:e4:f7:50:35:d4:82:1e:a8:a4:26:f6:
a4:d1:0f:52:30:5d:84:2d:f9:6c:7b:f6:bb:10:08:
9d:b1:78:72:e1:f2:27:8a:a8:b2:76:f3:ce:bc:aa:
51:fe:9d:80:8f:07:92:d8:1f:ae:46:b5:81:50:2a:
c9:7a:47:e2:a7:c1:1c:2b:a7:27:e5:25:f5:81:97:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:95:64:08:BD:8E:C8:36:03:0F:02:AB:07:31:D1:AB:7F:D7:AD:5A
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:60:16:43:89:0e:14:fc:df:f5:b4:88:0f:c9:e9:41:3b:4b:
d7:ee:ab:42:80:cf:a7:bd:90:84:0a:20:53:a0:56:73:e1:b9:
26:be:73:5b:37:89:76:f4:3d:07:df:77:c2:32:1f:86:7f:69:
fe:13:83:9f:ca:51:21:5f:87:e2:22:6f:89:a3:5e:30:27:23:
57:53:56:3c:f7:f0:f7:7e:e9:2e:2a:47:b0:50:5a:ed:1b:ae:
35:41:18:cc:3c:c3:22:66:1d:93:b6:65:81:6d:48:07:8e:4c:
08:a2:a6:3b:ec:45:9c:a4:76:0e:7f:a3:e9:9a:00:f5:4c:77:
34:be:ed:71:f8:b0:c8:73:85:12:30:dd:f0:42:26:0f:96:5b:
01:46:42:67:ff:fb:d9:05:35:ea:a1:c4:bd:29:78:b6:c9:64:
2c:5f:dc:f9:a9:c8:f3:10:f8:05:24:42:ab:78:4f:ed:8c:c9:
93:51:7a:6c:a4:f1:09:dc:37:e7:9f:eb:bb:9f:e6:ad:52:56:
6e:d9:d0:0a:c5:95:5d:ba:b4:5f:79:1e:53:f5:7e:85:87:bc:
fe:7d:98:6c:18:22:77:10:f6:6c:af:64:18:0d:bd:d5:9f:73:
3b:89:a7:28:9e:aa:ac:c9:43:43:bd:11:ed:c3:27:7d:f0:aa:
28:59:d2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:45 2025 by rpki-client