Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: 2aKe8WC2KA43wVEzikjxU1sLVYyfHO2l/8knzN1I400=
Subject key identifier: 41:27:34:E0:4B:79:DA:03:09:27:36:FD:F5:1C:B0:87:BD:86:52:0A
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 0194BD4E999918D91F76C840E47B5596187A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: jVcOdlxa3oeig7fDYKguLYaScD89Ups1SRBkvHaujQw=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:99:18:d9:1f:76:c8:40:e4:7b:55:96:18:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=412734e04b79da03092736fdf51cb087bd86520a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:45:30:2f:ed:92:5d:a3:74:2a:fe:17:ef:
4d:73:bd:44:cf:3d:64:af:65:a2:c1:77:70:f9:f1:
ff:b1:cb:fd:8f:99:20:66:c8:99:7b:97:47:66:d1:
4f:87:14:55:5a:16:ce:ff:ef:39:d4:ad:5b:68:d0:
07:7c:4e:71:2b:a2:65:f3:23:9b:a6:5e:d4:aa:e2:
cc:64:61:a4:8e:f1:12:6e:fd:14:dc:00:a1:2f:68:
04:55:4b:b6:13:58:80:a5:11:24:57:5f:0f:2d:51:
52:69:87:6b:cd:e0:39:4b:d6:25:6a:40:0c:ac:54:
49:f1:20:cb:67:3b:a4:41:d8:de:5a:fd:2d:0a:d8:
4b:eb:86:60:dd:c6:ca:38:f8:6e:8a:00:76:58:e3:
ae:b6:46:94:90:e9:23:00:d5:66:b3:40:e5:d9:37:
67:3d:c8:63:08:c3:7e:dc:2b:87:56:f9:92:f5:f8:
c6:8d:94:a3:ca:14:64:9a:6e:7d:1b:94:da:0f:00:
40:5a:3a:c3:93:ec:69:38:e0:ea:ab:01:26:16:c3:
32:ec:61:75:39:18:1c:57:e3:f8:9b:b0:05:fc:4c:
ae:74:60:04:9c:4f:f9:23:d7:bf:60:ac:79:46:69:
d8:f7:8f:22:30:14:9b:4a:e5:33:7f:4f:e5:ec:26:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:34:E0:4B:79:DA:03:09:27:36:FD:F5:1C:B0:87:BD:86:52:0A
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1f:47:fd:18:d8:b4:f5:8d:be:2c:0b:ce:13:c8:cf:a8:90:
65:01:d9:d6:83:50:e7:26:4a:8e:2a:ef:ed:27:40:f7:1d:86:
4b:75:7f:d3:59:0b:43:87:3b:49:6f:d4:c5:28:b5:5f:26:19:
e9:d0:66:82:41:4b:c2:40:2e:6f:36:81:2e:6e:9a:d2:27:a8:
e3:43:14:30:62:b4:0b:43:56:35:e1:bd:a3:84:a4:30:0b:9e:
50:8b:38:86:b9:02:8e:9c:fb:47:f2:28:02:9d:af:c6:35:bf:
1a:05:36:47:7b:18:7c:1f:3c:53:fb:d6:aa:e8:1a:ab:13:65:
88:fa:cf:27:c5:4a:e6:ae:c9:d3:73:35:5b:09:1c:01:05:b8:
52:b6:3f:bd:74:4a:13:15:06:6b:1f:b5:a5:fe:b0:fc:50:9b:
44:4e:b3:73:2b:8b:f8:e5:fc:83:ee:4c:62:a0:76:12:3f:3c:
4b:21:a9:7a:ac:d6:79:54:b1:14:a5:4b:07:19:50:4b:b8:85:
35:cf:30:96:34:01:2e:b1:d2:1a:e3:a1:af:0d:98:51:50:6c:
de:99:51:79:3c:b2:26:26:4c:b4:5b:db:a0:65:9c:8c:df:81:
f2:c6:d3:e7:44:2f:9a:6f:58:97:f2:b9:c2:6b:24:7a:22:f3:
a6:89:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:02 2025 by rpki-client