Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier: 6yUEDQrYI6lrgqeQhLP0+pclj9h3jdvj60pqtUzuWm4=
Subject key identifier: B0:7F:9A:06:66:DF:C6:ED:D6:41:1A:57:46:D7:8D:04:53:27:23:C4
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial: 0194BD4E69D9B8356F25D50F81791C382164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number: 0149
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: 5ogVIDsdSUr7A4BgT62QYHS8RrXKC46IIE1PEW5BfKM=)
2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:69:d9:b8:35:6f:25:d5:0f:81:79:1c:38:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=b07f9a0666dfc6edd6411a5746d78d04532723c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:d8:b5:2f:d8:25:c1:3f:23:0c:f9:50:d8:
62:56:6e:63:66:9d:e3:69:0d:a6:ff:76:b6:89:b1:
2f:e0:d0:60:20:01:5d:46:84:b1:68:52:ae:b8:25:
3f:12:7e:1a:a6:1b:1a:d8:40:92:ac:2a:98:b7:d8:
c8:35:83:6c:cb:af:e6:7f:69:43:e6:3e:69:04:d2:
e8:13:8f:9d:05:37:53:5a:44:12:04:17:77:ac:e6:
bb:63:9e:b1:83:55:a7:5c:d0:35:c1:45:23:dc:32:
4c:ae:75:9c:69:be:7a:c5:18:72:7f:1f:d2:b2:2b:
ae:df:b6:19:98:de:d6:f7:11:55:61:50:5e:52:37:
33:14:08:5f:7c:22:3d:8d:67:06:22:16:4d:b0:b6:
db:72:32:1e:9d:c8:48:a2:23:5e:3e:2d:8a:ec:03:
d1:33:40:a4:df:80:20:3a:63:7d:fb:6d:1a:32:7b:
88:ff:c2:24:9d:e7:1c:a1:ac:ec:bc:ae:54:92:04:
91:aa:25:19:04:48:f7:af:6a:43:f4:b6:6d:23:19:
6c:43:8b:86:0d:a9:62:5d:76:8c:77:ea:eb:b7:fb:
47:76:84:fc:b3:7e:ef:79:55:65:1d:77:46:c7:e0:
dc:ec:00:85:43:aa:2b:44:5a:fa:54:4f:35:c3:7a:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7F:9A:06:66:DF:C6:ED:D6:41:1A:57:46:D7:8D:04:53:27:23:C4
X509v3 Authority Key Identifier:
keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ae:11:6a:a7:ee:61:c3:f8:f9:56:f4:d9:1b:75:19:e9:16:
78:62:dc:b0:60:f0:7a:91:ce:a6:32:88:06:e4:a8:cd:cc:27:
17:98:71:81:75:a6:ec:5d:75:12:49:10:c8:6e:cf:6c:9c:e0:
8c:90:d3:a9:4d:24:1d:a4:3f:08:b7:a6:d5:7d:83:cc:88:df:
ef:7f:56:52:e0:ec:4d:48:6a:67:82:e2:0e:01:0b:bb:a4:66:
6c:81:d2:43:18:9e:0f:88:73:0d:b3:fe:62:71:49:4f:83:c5:
e1:38:a5:2a:a1:e6:09:3b:f8:e1:39:bc:1c:c9:b8:a0:c6:f7:
8b:e6:9a:73:62:e9:5b:62:58:ca:1f:65:a6:14:1d:f1:ee:34:
7e:e8:d3:c7:f6:1e:bc:68:d7:1b:52:a8:54:77:47:f9:41:6c:
65:9d:f3:fc:d1:1a:ea:b8:aa:97:23:6c:a4:55:57:96:80:9e:
04:3f:81:66:23:68:5a:84:d9:f9:b8:ae:d1:e9:9e:c1:69:38:
4e:b6:7b:23:62:76:10:db:ab:2c:6f:c6:cb:c3:ec:29:41:ac:
9f:52:20:90:ef:5c:b8:c9:8d:81:db:e8:5f:aa:58:3e:e2:d0:
81:c0:98:df:9a:7f:ac:77:df:a3:00:c8:3e:ac:2f:9a:9d:df:
73:75:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:04:02 2025 by rpki-client