Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
File: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft (raw, json)
Hash identifier: dAZ3bwIR1iR+KzDEPFFfl7wEotlpHY7aAf0LTfibep0=
Subject key identifier: FF:8A:F4:A2:1F:87:18:93:44:04:3A:BA:71:08:7A:AE:FA:FA:8A:C7
Authority key identifier: D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
Certificate issuer: /CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Certificate serial: 0194BD4EB04C80223C8F396F706FBA3EFDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl (hash: vT4oHqjpYWhdvoJm4CM0xZSGxEAVVnMaDnr6U18iR4I=)
2: uFIkyOKWSzQfZzP96vWM093yaBY.roa (hash: TWsqJU2I8/yV3h8FtJmMbNc3AlR1EJP1BU5hPExE0mk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b0:4c:80:22:3c:8f:39:6f:70:6f:ba:3e:fd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=ff8af4a21f87189344043aba71087aaefafa8ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:af:37:b7:0f:62:19:69:d6:a1:8a:d3:9d:
cc:b8:8e:81:74:7f:0a:28:12:36:83:24:13:d7:cc:
b6:84:fb:25:da:e2:fc:d4:b4:6e:b7:a7:d2:65:fa:
6a:bb:07:90:0c:33:f2:f2:3b:db:c2:a4:1e:aa:35:
cf:7c:83:62:80:52:48:9f:c1:d2:49:1b:96:e4:9c:
83:66:2b:24:c6:3a:2b:66:46:fb:6a:b9:16:3f:ae:
93:b3:ce:4b:75:ad:ae:8b:12:58:5c:b4:b4:7d:aa:
a4:1e:7b:f1:a2:fc:a7:e7:c1:6c:51:05:ef:7a:43:
53:89:e8:52:be:0b:9b:0b:6e:83:97:4c:fe:c7:91:
34:29:89:91:cb:3f:4d:b4:f2:f8:33:92:54:e0:82:
bb:06:8f:a1:12:24:ed:bb:9d:48:bb:fd:53:ee:bd:
e8:35:e7:63:b7:db:a4:d7:32:8e:5b:8c:37:33:e2:
bb:33:dc:b8:cf:b4:35:ec:81:64:e1:c3:ac:66:a2:
05:8c:33:5e:b3:b8:e4:2c:bf:b0:f5:3b:e2:43:4a:
d0:1a:1e:d1:ca:ba:e4:63:60:7b:15:8b:7a:8e:28:
a7:ce:b2:15:0e:ec:b5:d3:54:a7:12:0d:e1:85:ee:
58:c3:1f:36:df:26:b7:49:a1:7f:f6:14:24:e0:c1:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8A:F4:A2:1F:87:18:93:44:04:3A:BA:71:08:7A:AE:FA:FA:8A:C7
X509v3 Authority Key Identifier:
keyid:D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:bf:76:6f:01:45:f4:64:fd:c9:a8:4a:c7:ce:51:c3:b3:2e:
01:27:0d:4f:b9:97:e4:fe:66:a0:ac:6b:df:2d:5a:c1:a7:82:
5a:9a:97:09:d4:f1:bf:17:c0:7e:2d:b9:ab:5c:93:bc:38:6a:
81:3c:1b:c6:25:cb:70:11:3d:5d:09:1f:e6:c4:b6:25:05:5b:
90:ff:18:5c:f3:68:74:12:e8:0c:14:4d:64:92:a5:03:c2:c0:
7e:b6:86:98:6f:07:1f:c2:74:14:45:90:23:dd:44:e7:4b:f1:
95:28:8d:02:c7:3a:5d:a8:02:e4:c8:2b:cc:de:53:83:cf:f5:
1b:37:c7:71:df:40:5e:e3:d6:21:37:58:24:c6:71:f8:e3:4b:
9f:df:3b:00:a9:79:3a:89:a8:84:ed:04:6c:24:00:ef:fd:a9:
15:0e:ae:36:9d:b0:96:33:0a:87:ad:82:b8:59:10:4c:7d:6c:
34:50:5b:a2:12:02:7f:77:43:33:ff:29:be:2e:fd:c6:29:d8:
13:07:76:6b:ba:45:c3:70:44:54:f8:3b:a5:cc:03:b8:e6:4b:
e4:c1:18:54:b4:fa:15:bd:98:72:2f:a8:ff:e9:ec:f6:c0:1a:
d5:3a:78:78:c2:11:0c:43:05:72:b7:cb:eb:b0:82:e5:dd:66:
b7:71:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:04 2025 by rpki-client