Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier: FdPiXVdGHom/2M4taf0pT6N0eL9neIYNSF8F9fVYjfg=
Subject key identifier: 00:5C:A6:92:0D:F4:C2:3C:9C:06:AD:51:34:26:CC:0C:48:0E:6E:EB
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial: 0194BD8541E4301B7B49F585BBB24776C98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: 0e4cj0jAPdMyzSye7itAXWn1YO16LOQcstv+EEmNv2k=)
2: AddwdaQYSDgJ_-W9pipGLPibD4Q.roa (hash: YjKAFD6jnw8P32xCITagf8KVgpNGeRxCswidFmsKIOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:41:e4:30:1b:7b:49:f5:85:bb:b2:47:76:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=005ca6920df4c23c9c06ad513426cc0c480e6eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:70:4d:77:64:3f:27:23:fa:93:94:da:c2:
a6:d8:99:cd:b9:e8:57:f9:96:95:f7:67:29:31:25:
1d:7e:d4:95:4f:e6:d3:5e:33:1b:cd:2a:50:bb:c1:
da:39:1c:21:e6:14:44:62:db:2a:da:cb:45:bd:5d:
6f:53:33:9e:fd:22:00:cb:d9:f6:e9:94:58:da:d5:
96:87:aa:e6:cd:52:00:81:70:55:88:99:20:e1:98:
df:fb:72:a8:5b:3f:8d:3f:66:33:ed:f6:41:54:d1:
12:04:4d:01:25:ef:9b:ee:04:d7:8e:61:80:53:9d:
e0:fa:00:ba:c5:6f:be:bc:ad:e0:97:23:52:bd:90:
cb:be:2c:a6:50:d9:59:46:da:23:67:84:4c:6e:28:
f1:c6:83:4a:44:21:df:15:6f:3c:d2:5a:63:2e:66:
a4:59:c0:5d:a0:f8:2c:81:24:6f:49:e9:be:45:aa:
aa:a1:de:fc:63:b5:74:b0:a7:00:55:00:f6:96:70:
ab:ee:55:f5:90:28:4f:da:ad:99:ef:be:8f:12:29:
49:29:4e:1b:a6:8b:20:4d:c7:e2:f5:dd:7d:e3:ac:
6b:6d:64:b0:9c:54:90:fd:34:da:40:67:45:aa:5e:
73:88:38:18:c0:39:6b:bb:ca:6d:ad:c9:75:cf:a2:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:A6:92:0D:F4:C2:3C:9C:06:AD:51:34:26:CC:0C:48:0E:6E:EB
X509v3 Authority Key Identifier:
keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:65:f9:17:04:f3:66:40:34:5d:e2:84:9e:29:26:3e:63:7c:
dc:95:77:d7:5c:b8:ee:ed:cb:3a:11:a3:70:1e:0a:07:56:ad:
14:ef:55:d1:09:38:ba:9a:11:69:9d:13:ff:37:f5:8c:d7:4c:
16:f9:c5:2c:89:fa:a5:0d:00:2e:07:58:42:c8:f1:44:ac:57:
62:41:f8:2d:d3:cf:e2:f0:a4:dd:7d:08:8d:c4:11:88:3b:fb:
6c:72:82:15:fb:0c:e4:2f:0c:e8:8c:92:04:79:77:b5:05:35:
89:46:58:83:36:68:30:06:4a:ad:26:49:4b:d3:73:02:d6:ac:
83:6d:ee:3e:6c:82:28:30:7c:f6:83:82:91:6f:23:45:52:40:
e3:e2:31:f8:73:92:8b:47:66:2b:78:74:21:1b:91:16:df:ec:
01:02:3e:42:97:97:ba:ca:63:c2:13:35:dd:45:38:fd:dc:4c:
c7:d4:f1:ec:4b:49:35:39:9c:24:c8:8e:94:22:2a:9a:a3:07:
9f:08:2f:82:ae:b6:eb:5f:8f:cf:56:56:f8:1c:bc:d1:9e:cd:
48:5f:61:b8:be:b3:b6:87:1f:ae:8d:91:bf:ff:1f:6a:5f:10:
c8:56:76:46:ca:11:6e:37:0b:2d:a8:03:6d:c9:33:9c:c3:e7:
c6:cb:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:08 2025 by rpki-client