Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
File: 0d2oMnacMWgfglaFFHNorzoR9vg.mft (raw, json)
Hash identifier: AvFBVDWJxjzR+8pHitSsjaYgaZPTPgGeUM++v4nKze0=
Subject key identifier: 07:B0:B8:2D:99:AE:2B:E5:C7:CF:06:DF:CF:A2:47:16:98:95:F8:47
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 0194BC3C28BDA780E04C1558901A36A97EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: 0d2oMnacMWgfglaFFHNorzoR9vg.crl (hash: 6D+1KB/dD0Nv6m212i2ry3Kom3X9M4hNpiQwe32c2uo=)
2: b7sNWlzHmaj36hpl7542OiFeLhk.roa (hash: r2LdfaqH2ThvketoRQBfUQ9ZRTad2+2P2sxQXJTCIiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:28:bd:a7:80:e0:4c:15:58:90:1a:36:a9:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=07b0b82d99ae2be5c7cf06dfcfa247169895f847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:ff:69:44:38:e3:b9:b6:60:03:e5:e5:cb:
18:34:30:04:fc:27:33:7b:28:f4:4e:8e:8d:b6:c2:
68:11:ca:44:4f:e3:c0:d6:18:09:15:03:d9:a4:cb:
12:57:d7:8e:8c:9e:8b:ad:31:cd:8e:f9:fb:05:87:
28:30:d7:8f:d2:00:e8:11:3e:8f:2a:bd:58:41:9b:
34:d1:61:0e:25:16:e9:9b:66:cc:12:36:10:fc:e0:
35:55:fb:0f:84:ec:6b:b2:4f:c3:74:fe:b2:a5:60:
cb:f8:cc:9b:cf:89:8a:c5:d0:7d:2d:ea:19:40:24:
ef:72:86:33:6e:af:af:08:12:95:1b:52:d6:7b:6a:
52:22:84:4c:14:42:93:a1:73:51:d2:5e:22:67:5b:
24:a2:b3:f8:02:0a:8d:c0:91:cf:d4:e5:32:52:e3:
1a:0d:b0:8b:9b:e8:93:de:10:8a:9e:32:b5:dd:24:
f1:d6:71:e0:08:b0:f3:ba:f6:ec:b9:e0:9c:36:b1:
7f:c9:26:79:f7:92:73:89:9c:de:cf:71:15:b2:39:
fa:fb:d7:e1:f0:a9:dd:fd:61:54:f9:65:8e:2c:0e:
60:c9:fe:a1:fb:5b:7d:1f:0c:f5:17:0c:59:01:3d:
98:53:c4:6f:9e:af:7c:82:91:4c:8f:c3:8d:ff:85:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B0:B8:2D:99:AE:2B:E5:C7:CF:06:DF:CF:A2:47:16:98:95:F8:47
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8e:d2:64:c6:2b:c2:66:6f:b7:10:59:f2:19:31:b6:ad:dc:
02:71:44:64:e5:79:82:9d:c1:6f:0e:5e:11:4a:2e:ac:40:cb:
dd:b3:11:5f:1a:cb:ee:95:41:1e:54:3f:82:19:f2:2c:73:fb:
d7:ca:c1:83:d7:6d:c7:21:93:31:53:9c:3d:32:e4:eb:51:dd:
53:61:77:6c:11:f8:08:93:af:69:a9:64:47:45:87:62:41:92:
83:5f:06:b9:86:2c:57:9c:9c:51:e2:d5:21:87:f2:c6:fc:09:
be:09:0c:a3:09:48:b8:17:18:b2:49:66:48:5a:be:24:6a:21:
e6:d1:63:fd:54:dd:6a:25:ca:88:79:97:34:22:28:de:d2:59:
e5:80:bd:13:5e:1f:c0:a8:2f:cb:c2:08:65:45:f0:5f:06:9d:
18:43:a8:8c:96:b7:d2:58:57:fd:44:22:d6:ff:3c:96:8d:5b:
69:ea:0e:b0:2e:33:bb:bc:e3:04:ad:65:5b:db:c7:ea:95:00:
f4:12:d4:bd:5c:5c:fd:a5:7d:89:74:8d:ce:e1:91:d0:7d:4a:
11:fb:a5:84:2a:ac:6c:e8:a1:76:c3:49:89:4e:18:53:ed:54:
5b:4c:b7:20:36:69:9e:e8:2f:37:60:66:a6:13:84:fb:75:b9:
04:a8:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:07 2025 by rpki-client