Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: PvavuGqa/itAicXMJpuKcUB0lbT6+QPaEGvMDmtj9vI=
Subject key identifier: D5:C9:7F:90:18:AF:DD:DB:FF:08:AF:91:94:80:76:10:26:C7:98:90
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 0194BBCE5C8FF578F7654EFF460DFA085E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0869
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: Q2cf5fQuRYBVYh/BlUmXBiQRvGJAmlhuujlpRvPvsEk=)
2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5c:8f:f5:78:f7:65:4e:ff:46:0d:fa:08:5e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=d5c97f9018afdddbff08af919480761026c79890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3e:a3:70:d9:cf:9e:a2:96:e8:89:31:79:90:
f9:f7:44:1c:ff:62:a3:ee:65:5e:d5:e0:2e:29:09:
5f:53:cf:34:98:2b:e2:e7:40:19:12:07:91:73:72:
c2:04:9c:3c:95:0d:f6:8b:7b:e0:02:49:ce:8a:ea:
9b:4a:c9:76:63:d9:89:87:47:2a:fa:c3:44:a4:d4:
c7:1a:14:c6:d3:5b:68:03:9b:96:18:cc:50:9c:bc:
4e:57:37:1c:8c:75:79:5d:7a:0a:02:0d:82:c8:03:
35:5d:85:6a:0e:4d:be:c7:e7:05:9e:2b:17:ce:9b:
c7:a0:6e:d4:6f:1a:3e:1f:e9:62:e8:6a:a9:52:a0:
2e:c8:d1:83:cb:36:81:14:09:ff:03:02:f0:7a:5a:
2f:c5:12:91:99:5b:01:bb:3a:05:3a:6f:7c:16:91:
47:56:4a:b5:92:a5:0e:ee:77:5b:48:23:2f:24:1c:
00:aa:af:5e:a9:71:4c:95:33:e4:45:55:f4:23:d7:
90:ce:ec:8c:4f:13:bd:5d:ba:10:09:18:cf:b0:3d:
f4:2d:fb:7d:ed:37:35:23:4e:d3:49:dd:3b:5f:e1:
07:4b:af:10:61:65:d6:ab:12:f4:84:dd:42:86:08:
f7:85:e9:5c:cf:c7:91:82:03:3b:0e:72:3a:12:58:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C9:7F:90:18:AF:DD:DB:FF:08:AF:91:94:80:76:10:26:C7:98:90
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:be:a2:e9:d5:95:b3:6b:65:b5:8f:27:7a:4e:9f:fc:a6:1d:
35:47:51:04:ce:8f:0c:71:01:b3:a5:b5:89:02:82:2b:6d:82:
80:cb:55:fd:0a:10:23:cf:c0:8f:99:db:e1:87:74:63:8f:f2:
b9:dd:d7:99:30:8a:fb:f7:57:43:97:4e:43:b4:bc:16:00:c5:
cf:2d:45:d1:a9:9b:eb:94:cd:43:5b:76:12:25:b7:84:56:d7:
34:7b:42:38:87:76:d8:65:f0:cf:cd:c4:65:67:80:c8:ea:68:
88:7d:c1:12:47:89:46:db:63:eb:93:04:44:40:8a:8f:77:5b:
c9:32:90:44:39:be:fd:1b:f1:00:bc:44:1e:d4:8e:8a:41:8b:
16:83:06:f1:b5:00:99:23:56:34:29:78:fb:ae:b3:f2:7d:e5:
dc:f7:c6:ce:26:f6:61:4e:f3:e8:a6:16:16:1e:47:67:e2:ec:
1d:4e:fd:a4:65:3a:0b:99:a1:fb:05:bb:64:71:cf:e0:32:f7:
d3:00:9b:2e:93:23:91:81:28:dc:0b:81:75:d9:0a:60:4d:b4:
dc:f1:c3:28:96:60:90:c1:04:d5:54:30:24:05:80:45:22:f2:
e7:30:7a:98:df:08:99:94:e5:9b:09:29:08:1f:8e:8a:df:64:
f5:e3:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:48 2025 by rpki-client