Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier: oii+hCOp4FNEKGvK3/o1xrTsCOdj0xDbqIDz74+6Vew=
Subject key identifier: 89:EC:66:AB:33:3B:F3:A6:A3:8E:F9:62:E6:F9:98:4D:62:88:D8:01
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 0194BD17A008944451F26AD725B5D868564D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number: 055B
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: X+/YwiTtITD+rzzpDg+gtqYutFnI+Mdl1/pa4BiIxtw=)
2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a0:08:94:44:51:f2:6a:d7:25:b5:d8:68:56:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=89ec66ab333bf3a6a38ef962e6f9984d6288d801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:9a:fd:c4:b0:a6:13:76:34:8b:4a:2b:7b:
05:b9:b9:a1:a8:ff:86:f1:bd:92:d8:ec:86:14:e0:
b8:67:aa:31:e7:63:38:e0:ea:7d:be:e8:92:8d:3c:
03:7c:cf:12:cb:2b:df:a2:5a:22:a5:87:87:3f:db:
5a:fe:a3:78:02:18:45:29:fb:2b:f2:01:6c:91:df:
1a:7a:44:04:08:78:73:54:94:fb:c8:0b:3e:4e:ac:
44:08:a0:1f:a3:c6:0d:8d:91:66:2d:cb:b5:c6:1e:
e2:dc:11:da:3c:dd:38:17:6c:f5:16:cb:39:54:aa:
76:7e:a9:8b:83:43:65:67:f6:75:ac:25:d3:a3:e2:
7c:4d:58:0a:31:59:57:cf:dd:21:89:0d:0e:0a:b9:
72:3c:a6:b7:c4:94:51:8f:34:40:81:2b:0a:94:37:
7f:58:ea:40:d0:4b:59:d6:c5:55:58:83:fa:fd:98:
3d:67:8f:2b:89:af:da:a4:60:64:51:87:c6:ac:5d:
34:ac:87:7c:75:f6:f8:fe:4b:1d:0f:91:6c:21:ab:
fa:61:1e:c6:e1:ad:f6:e1:31:ac:e4:dc:29:33:96:
79:c0:18:35:c8:4d:61:a9:c2:60:b4:7c:5f:55:f6:
fa:96:b9:f8:da:2d:d0:2a:c0:8b:dc:a8:3c:f9:01:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EC:66:AB:33:3B:F3:A6:A3:8E:F9:62:E6:F9:98:4D:62:88:D8:01
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:53:f7:b6:2b:89:c2:68:cc:27:b2:61:8f:92:53:d9:15:09:
fc:03:cd:bb:9f:a1:4d:71:97:77:37:be:fe:ba:9d:2e:9c:76:
07:e0:7b:15:90:0b:4f:bf:e3:e8:a3:1c:cb:18:53:9e:de:3d:
ac:24:ab:c9:53:db:63:68:c1:4e:4f:fd:7c:73:6a:63:6f:50:
20:49:6b:7c:7e:7f:c7:b0:4a:b9:16:a0:8d:30:0f:fe:ad:59:
f2:f7:89:63:44:ae:47:d9:99:7f:78:ee:f9:f8:3e:28:a9:56:
be:c2:93:ad:2d:8b:9f:80:98:c5:4e:57:b0:c0:2c:74:39:f8:
44:1f:46:20:09:d1:44:ec:e5:1e:2e:51:9d:c9:1e:9a:77:a0:
cd:b9:53:e0:6f:c4:04:30:1f:8c:67:89:09:89:30:c0:b1:9a:
0e:0c:cf:3b:ae:2d:23:57:05:1b:66:45:c2:b1:09:f3:88:11:
32:ce:90:1c:41:51:6b:76:40:53:4a:02:62:76:05:44:08:37:
aa:7d:6a:96:a8:24:ad:33:b8:a8:b7:0b:ea:7c:a1:81:e1:de:
f3:2c:55:77:60:4c:0c:4d:84:c3:48:72:e2:fb:4c:33:ff:d5:
ca:ba:71:6d:98:7c:c6:8b:02:1d:27:14:65:93:31:36:58:23:
01:74:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:40 2025 by rpki-client