Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: P4nsgrBYk3d/Go6ft1bcK7jahOUiFHvVwy+xgKendRU=
Subject key identifier: 89:87:56:AB:64:51:E8:6C:8E:81:81:F6:2F:48:8A:35:69:92:C2:00
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 0194BD856507C3AB2B621CC53FA5C6B74BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 0F15
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: kJyVYcTud+Y2Iz5LxX/3ic891IpsGYXuXTfOcxGktEc=)
2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:07:c3:ab:2b:62:1c:c5:3f:a5:c6:b7:4b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=898756ab6451e86c8e8181f62f488a356992c200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:7c:f8:dd:26:4b:f3:be:b9:20:e7:72:70:
5b:8a:5e:99:59:bb:2d:3a:e9:8f:ed:96:cd:ca:79:
ca:6f:73:ed:48:2c:16:06:22:9f:64:93:ca:ad:5c:
3b:a4:a6:09:a2:60:9e:af:22:7a:28:fb:b3:7a:15:
97:04:28:a5:76:be:83:99:9a:36:28:71:c5:64:1e:
5d:ea:63:68:29:96:41:ab:c6:0a:3f:24:48:e4:dc:
81:b2:51:84:b5:e0:12:ef:b1:b3:95:b4:fe:a0:c9:
b5:ec:79:58:44:42:7c:98:a1:02:10:77:3f:e4:3b:
d9:69:5e:59:23:46:1f:7c:77:77:ae:15:8a:64:50:
62:c9:23:a9:9a:80:73:fd:8f:7c:83:aa:d1:fe:c7:
82:a8:d5:6a:ee:62:19:dd:15:b1:e2:0e:1f:67:a1:
99:df:04:30:37:9b:ac:1d:44:aa:79:45:2a:a6:67:
58:24:ab:53:c8:02:da:52:c2:02:8c:32:44:97:34:
d9:42:aa:2b:17:bf:2b:6c:34:4f:0e:26:24:4c:30:
81:e6:1c:83:20:7f:18:16:b3:68:3c:cc:25:08:c8:
b8:7f:8e:93:8e:61:ce:40:9c:4c:de:53:06:bc:52:
e7:44:53:6b:2b:db:ab:6f:6f:66:ed:da:95:12:9e:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:87:56:AB:64:51:E8:6C:8E:81:81:F6:2F:48:8A:35:69:92:C2:00
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9d:b6:ad:e9:a6:78:c6:22:a2:bc:ea:92:ae:d4:a0:87:10:
c6:e7:f8:b2:8d:ae:9a:50:e1:d9:ca:af:b0:3b:7f:f5:31:57:
1e:08:9c:37:99:2b:5d:aa:96:1f:e7:0f:30:88:68:85:fa:3f:
3e:42:61:4e:4a:64:13:be:66:c5:ac:24:4b:4d:55:7a:be:72:
15:1e:4f:9e:3b:fc:a3:16:07:c1:63:f4:9b:91:65:f0:a2:63:
67:2b:6e:1b:cd:09:7d:64:1b:a9:7a:c7:31:d5:75:70:e9:1a:
90:3e:ec:59:53:93:a0:49:ea:0b:66:54:92:04:18:82:d9:67:
71:be:c1:77:fd:32:0c:23:6b:f7:f5:c3:a8:9d:f0:a9:3c:5c:
f2:48:75:a6:4d:07:69:ed:35:0e:0d:81:a0:93:63:7a:5a:a9:
f6:3e:14:fe:75:73:51:87:b1:a0:d7:32:d1:88:be:f7:a8:22:
fb:4d:c4:9c:99:b4:96:e3:4c:00:c4:f7:0b:59:e5:23:4c:a1:
fd:81:da:59:be:29:83:a8:14:a3:46:0b:f0:61:c8:8f:6a:e0:
33:68:4d:1a:90:1e:e1:b4:ff:0c:44:f9:05:c1:a7:c6:f8:2c:
3c:f1:7e:03:50:8a:3b:d6:5b:83:c5:e4:1e:88:fe:63:53:78:
9a:bc:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:12 2025 by rpki-client