Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier: TfMd2dwAIPCLBRs3Jh8lOsHXyktoTEPZwjb7j2c1Iiw=
Subject key identifier: 4D:8F:68:F2:2B:5A:9B:9E:9B:1D:5A:F1:FD:AF:D7:4D:17:61:40:4B
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial: 0194BC7331E576438F9C767349C75362E08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: vz+obVX5yyccWVB7fbQce87Qog4cMB7bgotTINm3+vY=)
2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:31:e5:76:43:8f:9c:76:73:49:c7:53:62:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=4d8f68f22b5a9b9e9b1d5af1fdafd74d1761404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:e8:19:d4:7c:59:dd:eb:c6:a9:b6:6d:51:
ac:00:a4:28:b2:09:16:7c:65:fe:c2:74:b5:32:71:
75:04:80:29:e8:f0:34:3c:a6:83:b0:73:3f:8d:7d:
82:82:33:48:86:3f:ce:2c:9d:bb:47:58:f5:a7:d0:
08:85:fc:16:2f:20:24:98:f1:b8:fa:f2:6a:c3:28:
60:ab:13:52:8f:ac:a7:d5:e2:89:06:70:9e:4b:3f:
a5:26:8f:97:b1:fe:d4:72:a8:63:fc:6f:7d:ab:81:
d8:ca:8a:2f:bf:b0:ee:42:42:03:61:78:0a:54:74:
18:a5:7f:2a:b8:32:e9:2e:87:db:72:49:0c:f6:b3:
df:cb:70:ac:ad:81:bb:45:cd:6a:09:d8:a6:b5:42:
19:63:36:a1:24:66:73:12:b7:59:01:7b:a6:64:ac:
dc:30:52:7a:44:de:64:f6:9d:4b:b1:e1:34:08:33:
0b:46:cc:1a:7c:32:d8:b3:ae:33:32:c4:09:2d:b2:
d3:30:1b:e7:3e:75:70:de:db:68:2b:e9:c6:fe:fd:
25:cc:37:93:b2:26:84:05:f6:2b:26:64:0b:7e:f4:
11:74:36:2a:45:95:26:2b:76:1a:20:88:2b:d6:6d:
a1:9e:86:a1:c3:cf:89:1c:70:22:26:30:cb:db:cb:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:68:F2:2B:5A:9B:9E:9B:1D:5A:F1:FD:AF:D7:4D:17:61:40:4B
X509v3 Authority Key Identifier:
keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:04:20:e6:03:e6:a8:18:25:b7:e1:c4:72:a0:d0:ef:8a:ed:
5b:34:68:3f:1d:29:33:b5:e8:67:64:46:9a:e4:37:cc:3a:74:
2a:a2:dc:85:ea:55:ae:e6:ef:29:55:e3:6f:7e:74:73:f2:4c:
37:37:9e:7e:e8:8a:a4:f6:de:6c:f5:82:60:5b:b5:2b:32:bf:
8f:df:c1:1d:8f:87:13:14:51:8d:6d:af:45:e4:24:46:9b:3f:
f1:b0:2e:43:e0:0e:cb:fa:c7:6d:5d:1a:7f:94:43:5a:e1:6a:
65:06:3c:d8:5d:87:95:b6:71:e1:dd:83:20:48:31:01:ee:0a:
73:f6:f1:ce:e6:7a:88:8c:9c:af:5d:7a:4e:83:36:a6:b8:b5:
43:3e:f3:fd:1c:d3:83:72:ec:4e:4c:b8:f3:e0:95:47:a6:b7:
c3:73:1c:3b:5f:6c:5f:0a:f8:c7:e5:65:d7:22:10:21:24:50:
16:13:28:6d:e9:65:64:64:da:62:a9:15:ac:65:03:a6:fc:e5:
85:ff:9f:68:f8:d5:ab:2e:cf:95:e4:a7:42:43:6e:63:7c:b2:
b8:32:fe:a8:67:2d:d8:87:7b:6f:44:53:13:a3:92:59:ef:c9:
10:37:50:ee:72:49:a1:1f:ed:b8:f9:ea:a6:1a:b9:cb:a3:3e:
8e:f2:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:24 2025 by rpki-client