Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: SgrjdvJld7fKz6zSRyERl912Ul4cd0KkUGYk+VGRgr8=
Subject key identifier: 0E:52:71:D2:14:A9:04:93:6A:C0:B9:A4:CB:29:AF:5D:F5:C4:B1:F6
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 0194BD856762A53B251C50A1094C5B540713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0536
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: WWh5HUU86uDD9F5W/SWCCikNGKjQNgXNE0wvIPS6TQc=)
2: XYDcPLsMJ5XYkYL0PQrHKhNJ9s4.roa (hash: 1m7+mEL2iJYkvJfrDXaZzofwFCojsAzxm4zXV5nNyDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:67:62:a5:3b:25:1c:50:a1:09:4c:5b:54:07:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=0e5271d214a904936ac0b9a4cb29af5df5c4b1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:8f:a7:b2:f6:5b:37:a6:3a:07:33:1d:f2:
b8:12:d4:8e:0e:41:4a:bb:d3:bf:2e:ad:f0:16:96:
1e:f3:70:7c:30:5b:30:ba:76:45:1c:27:a0:2c:59:
45:80:9d:d6:16:96:0e:7f:9d:df:c8:81:f1:d7:5f:
e4:fc:2d:ca:f9:ce:9a:22:0b:b8:13:75:5e:68:74:
da:f0:45:a7:db:cf:69:d9:d1:cd:30:05:36:f0:38:
50:96:56:32:7f:e8:f3:ec:ad:3f:14:c3:18:63:a6:
d7:b6:61:07:6c:10:c4:47:c8:38:96:4b:bf:c5:cd:
5b:c0:0c:65:7f:ad:eb:68:20:29:ce:2a:f3:41:d9:
fd:42:be:4d:00:f6:bc:b5:d3:cc:27:71:d9:69:b7:
2a:57:08:34:d2:c8:a9:6a:2d:58:c9:9a:1f:8b:63:
93:cf:c9:8e:12:1d:f8:b4:98:35:a1:f0:7a:82:3d:
b5:0c:de:47:03:34:04:1a:a3:4d:b6:87:a7:98:d9:
3c:43:d8:12:c9:94:33:9a:97:01:3b:14:9a:87:6b:
ec:95:a2:65:99:5e:2d:22:70:1d:bd:ba:f8:1c:ee:
17:a0:97:e7:a6:8b:c0:5d:2a:c1:9a:b0:22:bc:c9:
65:17:80:07:1d:80:a9:e6:9e:60:99:97:71:de:e5:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:71:D2:14:A9:04:93:6A:C0:B9:A4:CB:29:AF:5D:F5:C4:B1:F6
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cd:f6:d5:41:a5:d0:0b:62:b8:1b:46:86:d1:d2:25:f4:07:
0b:8f:ab:24:f2:34:32:ff:f2:4e:3f:94:09:c6:95:9e:17:a0:
6a:d1:8b:1d:0d:02:0b:d3:a2:f8:9e:94:2c:39:5c:55:f6:09:
cb:3a:6e:ec:9c:14:5e:8a:71:17:2b:5a:41:c1:cd:e7:2e:5b:
a5:3f:af:1f:93:7d:75:8d:11:86:fa:b6:ec:e9:28:dd:bc:21:
0d:bf:82:b4:fa:6b:61:0d:91:14:a6:bd:23:91:f7:7b:00:d3:
c2:6d:24:02:7b:21:e1:bd:19:47:84:59:27:71:47:d6:f9:03:
8e:b0:1b:62:76:57:77:96:0c:85:9e:57:ae:75:cf:2f:5a:c8:
8f:74:fc:d1:49:0f:6a:08:7d:ca:e7:32:10:d4:84:10:f1:57:
ff:be:13:bb:72:10:e2:f6:90:02:48:dc:57:54:29:84:03:37:
c8:5e:fa:70:c9:4d:83:57:59:13:c8:af:51:f3:d7:99:e0:8f:
1d:0d:de:03:97:79:ed:a6:e9:90:52:4d:4f:75:f4:df:3d:3c:
c6:28:19:dc:4f:8c:87:82:b2:c6:0b:a1:ed:61:8e:98:ab:d8:
4f:25:9e:99:7b:e1:9d:ba:81:0b:30:82:29:76:7b:b9:b6:8b:
a6:fe:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:23 2025 by rpki-client