Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: d+GaQrbq5aRC1Jy758HXHLCC0o3n4SyRwgVHMhHeOvg=
Subject key identifier: C2:B6:7A:B1:7B:93:58:48:B2:B0:A2:4D:94:0D:40:D3:DB:4A:AB:97
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 0194BD17A04F68F5891028DFA4AAD0FAC4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: xq0cxOxfoh6SEjoeSlXDQU8sno5/qTW/tX/0+0Yb4Is=)
2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a0:4f:68:f5:89:10:28:df:a4:aa:d0:fa:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=c2b67ab17b935848b2b0a24d940d40d3db4aab97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:db:5f:7f:80:cf:b1:d1:2e:79:91:11:2e:
5b:43:ae:52:d7:8e:3b:e2:cf:2d:ae:cb:bf:6f:29:
90:6f:e6:d7:17:16:c0:2d:16:89:c1:a7:bb:4e:8a:
7b:f9:0b:2f:9a:fe:ff:cf:7b:ff:b2:f1:e4:6d:f8:
de:34:49:06:d6:de:53:ee:44:47:56:d6:67:67:e7:
7b:b6:16:3e:db:f8:fa:1c:3b:cf:f5:8a:f1:f8:0a:
84:50:36:57:c4:0e:40:39:f8:e0:e4:cf:a3:3d:d9:
68:0a:cc:9f:72:d1:f3:33:39:e4:aa:1f:a9:fb:81:
9a:3f:0f:aa:a5:c6:06:13:e7:60:db:71:05:ca:cd:
98:f9:e2:36:ec:10:64:9e:3c:64:46:a1:1b:38:a0:
4a:50:91:0b:2e:07:e3:98:5a:af:08:ce:2a:02:e3:
e9:a3:2c:70:2e:fc:98:5b:33:dd:c9:58:c8:fe:82:
50:7a:85:c2:f5:dd:7b:68:9b:43:75:57:ce:26:6b:
3c:67:20:0e:9f:6e:2a:65:89:97:1b:52:2a:86:b5:
48:36:37:9e:a4:ec:18:90:80:4e:f0:f3:a7:35:cf:
6d:17:ce:22:d9:bd:2c:8b:da:ea:c5:41:d2:30:ed:
50:5b:e1:27:e0:67:01:01:78:d4:25:1e:70:fa:00:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:7A:B1:7B:93:58:48:B2:B0:A2:4D:94:0D:40:D3:DB:4A:AB:97
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e0:e2:16:33:d0:16:6d:06:b7:11:09:4f:75:22:ea:44:41:
cd:8e:0b:69:97:da:cd:50:81:3f:8f:81:48:ab:eb:13:ad:9b:
7c:39:f1:2c:be:14:5a:36:ab:42:a9:e2:49:a7:98:90:c5:44:
2c:5f:a5:97:c6:77:42:8a:31:12:55:7e:26:b1:09:3a:41:48:
1d:8a:17:f1:36:15:43:77:5f:b0:af:8c:6b:a0:5c:f0:97:87:
f4:0e:b1:0a:f3:3f:06:b0:2c:3e:09:10:a4:7c:bf:4a:57:9b:
07:c9:df:10:83:fa:09:6a:41:6d:ed:15:e4:d1:f4:1a:b9:6a:
eb:22:44:6c:55:24:65:37:5e:6a:37:51:23:04:bb:df:2d:e7:
06:dd:d2:97:c2:fd:3f:46:2c:cf:9f:fe:7f:14:ce:ea:e3:e4:
b6:1f:38:ea:e7:94:48:02:45:08:d8:0d:c9:2f:eb:59:ee:6f:
d5:1f:3b:14:a2:da:ed:18:3f:17:d5:38:ea:c1:9a:2a:57:91:
95:a1:e7:a8:8f:0e:7c:3f:1a:38:51:ce:a8:91:45:ef:da:3f:
ac:06:f6:c0:8b:7a:33:4c:8e:20:d6:d3:e9:09:f6:17:54:3f:
c6:02:3d:95:71:62:28:fb:2f:cc:81:c7:76:df:d7:e7:71:b4:
c4:90:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:24 2025 by rpki-client