Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: St8s5znuFYYpkIfYfamR5lHcSH6YwkxeSvvjcSYmQ6U=
Subject key identifier: 50:B1:EE:31:7F:37:1D:CD:A7:DC:6F:33:99:90:FB:79:54:82:23:76
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 0194BCE0AD8F2692429FBD3FC832D9FBD92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: tWa3Q6R7nuqR/cUI3qsu3bhZJ5i+RuzvcAH4iO8baHY=)
2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ad:8f:26:92:42:9f:bd:3f:c8:32:d9:fb:d9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=50b1ee317f371dcda7dc6f339990fb7954822376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:2c:07:f9:74:c7:63:06:d9:79:83:60:48:
32:80:5e:29:8d:d6:24:b8:5d:fb:6f:03:08:51:0d:
ec:26:cf:32:0c:23:a8:a8:08:aa:37:17:22:aa:bd:
91:57:db:40:46:69:3d:00:00:b7:c1:68:f0:98:56:
7d:88:15:d0:74:af:eb:93:32:96:55:67:29:cb:b3:
d4:da:59:62:e3:56:93:88:bb:c8:6a:6d:3c:9e:4e:
6e:2e:b2:5d:63:ef:d0:2f:ce:dc:c0:e3:42:46:5c:
a5:5d:da:c4:95:34:d8:9b:b5:e7:19:19:14:61:89:
32:93:3d:e1:f2:96:04:6d:10:63:16:c1:46:8f:63:
19:28:c5:96:78:0c:a7:c1:90:36:34:e6:14:f9:ac:
3d:49:f2:c9:9f:f0:98:75:f5:d9:62:82:3d:a6:74:
3a:ff:8f:05:99:9b:48:d3:2c:fb:5c:5f:7b:47:1d:
c8:f3:f9:af:ed:c4:fb:d3:dc:1e:6b:aa:06:4f:82:
c0:cc:1a:b2:60:81:18:ac:f4:1b:c8:03:64:44:64:
a5:81:ff:96:d8:cf:b1:0d:79:c5:a0:0d:bd:2c:d0:
43:32:96:61:3b:41:13:cd:10:9d:59:b8:5e:53:dc:
79:22:ad:c9:d0:e5:a8:99:de:25:92:6a:41:f3:83:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B1:EE:31:7F:37:1D:CD:A7:DC:6F:33:99:90:FB:79:54:82:23:76
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:34:e0:d7:71:39:59:d7:2e:41:69:27:14:10:46:6e:43:53:
8d:6c:89:24:56:9a:9e:f8:e6:e2:de:df:cc:87:3b:85:16:ae:
f8:aa:79:79:0a:c7:fd:aa:f0:9b:58:2e:ae:80:d5:17:9a:40:
13:cb:94:53:0a:23:a3:91:3f:c9:d6:37:d7:b8:35:b2:8e:f5:
ff:f1:65:24:d1:2f:c3:1d:ea:b9:5f:ef:ad:b3:35:bf:82:3f:
57:41:f4:6e:32:9a:1d:d1:78:41:6e:9b:6e:53:f6:35:10:61:
ff:13:87:2c:3f:6a:84:8b:55:ad:db:3d:f4:a9:be:d9:74:92:
27:67:76:90:65:54:0a:64:d0:aa:de:c1:25:96:80:28:97:1c:
39:b8:09:87:0a:77:5f:18:6d:75:fe:20:96:d2:55:56:20:e4:
d7:5b:07:fa:d7:0a:c3:54:c4:8c:0a:4f:b4:ac:fb:4a:39:6d:
9d:83:9a:5f:29:ff:d7:fa:53:d9:07:4e:86:8b:0d:f2:a5:30:
96:e1:f7:f3:50:cf:f7:b3:f4:ce:b1:06:33:46:f1:f1:fe:f6:
f8:90:4a:ff:e1:e9:ed:b5:af:af:cd:3f:6c:c3:a5:5e:a8:52:
bf:dd:32:85:03:06:ae:ed:a0:6f:2d:48:63:1c:7d:e7:4e:1d:
ce:ad:b3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:14 2025 by rpki-client