Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File: D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier: LHJ92wEkVee1gm8bmUkJdlgc4oIbottNLpFU/LkxpBg=
Subject key identifier: 9B:89:59:4D:60:DE:53:1B:75:4C:1E:05:91:F1:9C:5A:95:F1:EB:A5
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer: /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial: 0194BCE0E14643178E877617D3495C3F3EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: MiClk3b6dgu3Pi43uiXtI3mRAbNVt08SXUBmZwDZGAc=)
2: hfGXrKTt6u41NiQkrNCRG03FgTo.roa (hash: DUf/jFg7LXlvnvWQ7PksqyhLZu7mleW34Ka9y48nKKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e1:46:43:17:8e:87:76:17:d3:49:5c:3f:3e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=9b89594d60de531b754c1e0591f19c5a95f1eba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:7b:5c:46:38:aa:f0:f1:3a:f2:09:bc:e2:
16:fa:0f:64:51:19:ac:8a:1e:54:15:d8:e7:e6:e8:
e6:61:e3:0e:b5:9e:8a:9c:0d:b1:e4:ba:45:2e:ef:
b7:5c:f1:a3:ee:6a:d9:41:f4:f6:8a:da:d6:3a:c2:
e5:f7:0e:b5:ed:14:e6:b3:01:44:e1:1a:16:77:df:
1c:82:2b:44:b6:2b:80:3c:49:cb:73:97:7f:b9:1a:
77:eb:61:5e:68:07:5a:9a:07:17:02:cc:44:d2:ac:
38:69:d0:1d:82:2f:3c:ee:63:43:68:33:22:aa:92:
f8:8d:a4:5c:ed:92:1a:43:2a:0a:85:2d:28:be:90:
de:89:f2:51:cf:86:89:1d:9b:7f:e2:ac:65:ff:57:
34:77:16:0e:36:c0:71:50:55:f2:18:6c:62:7c:27:
16:c0:43:c3:75:61:db:e9:c0:b3:fd:f8:cf:f6:eb:
dd:98:6e:8a:3f:ad:b7:0c:39:59:96:19:9f:5c:87:
bf:ef:b1:77:f1:8c:e3:e3:85:e0:ae:df:98:74:dc:
a8:47:78:75:e1:20:11:12:d4:41:e1:67:e5:70:5a:
59:d5:1b:ee:b0:3d:2a:8e:80:12:c8:39:7f:83:2f:
7f:c9:6b:1f:07:b9:af:f0:06:3d:16:82:35:a3:fe:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:59:4D:60:DE:53:1B:75:4C:1E:05:91:F1:9C:5A:95:F1:EB:A5
X509v3 Authority Key Identifier:
keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d3:84:b7:e9:84:6a:96:1d:38:a3:2b:9d:cd:b7:d5:b1:60:
06:d4:bb:bb:ca:3c:b2:21:09:ef:b5:af:45:0b:c2:92:7c:92:
a5:77:f3:be:5b:b0:2b:3a:5d:50:cf:1f:e9:c7:40:42:8c:b9:
ef:cd:bc:5e:b9:d7:db:cd:cc:2c:71:d6:fa:95:12:72:d6:87:
f0:ba:a3:45:ad:0e:b4:b8:39:6b:4e:f4:2e:b1:cf:90:bf:c2:
e9:9a:54:76:c8:80:55:8b:46:4b:e1:06:9e:05:3a:51:4d:84:
63:51:08:2b:a2:e6:f3:11:c0:93:1e:e0:c8:e2:5e:77:75:e6:
9b:b4:da:3c:41:a9:5b:e2:98:a8:85:25:18:12:d6:f3:de:53:
9e:14:68:1b:92:22:43:16:29:9d:30:54:42:33:a9:9e:c1:9f:
e1:cd:65:08:e7:1a:0a:a1:60:f9:c6:5a:a3:92:4e:91:f5:8f:
33:fd:09:d9:7e:26:68:2d:45:6a:6b:be:71:3a:f6:83:d2:6d:
d8:96:e1:10:85:14:e2:18:1a:00:1d:96:b6:81:af:ab:9f:e2:
bc:73:f5:1e:a6:c5:ea:bb:fc:9f:91:85:c6:ad:87:69:f2:fe:
9e:9e:9c:a0:40:f9:4d:17:d1:01:2b:66:34:71:1b:50:4a:78:
21:18:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:06 2025 by rpki-client