Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: GWUtjOGNYMqbK9PjqpKE4SkGfzqGqn8/m+g0BauYpO8=
Subject key identifier: DA:E7:C8:58:48:DC:DB:4B:3F:A3:61:1E:D6:39:4C:05:BF:82:4A:B6
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 0194BD17B237479C656E23EAA27A06E71288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 1219
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: pMqOr2j+SebFHjitmDwwo6B4GKJdd2Kt8zvIDkSp4gI=)
2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b2:37:47:9c:65:6e:23:ea:a2:7a:06:e7:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=dae7c85848dcdb4b3fa3611ed6394c05bf824ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:3e:8c:9f:fd:cd:aa:dd:c4:e8:f6:3f:4b:
26:9d:23:88:bc:8c:e5:89:59:69:3c:8d:79:e0:7a:
ed:a3:89:91:69:68:db:52:13:3b:44:d9:67:d0:49:
3f:5a:82:ce:63:ec:9c:8a:d7:cb:f8:b7:c7:9e:fe:
11:3e:8f:cf:40:d5:f4:81:e0:2e:34:94:27:7a:5f:
a3:89:4e:e1:60:de:f0:4c:6c:6e:e7:31:e6:e9:ec:
a1:69:59:6d:a5:26:0a:88:23:da:1d:62:be:f8:19:
af:ea:a7:d2:29:00:e4:60:37:ae:2a:cb:5b:c9:37:
73:ba:14:09:29:0c:5e:12:23:4f:1d:ea:4d:39:79:
f0:85:54:89:72:78:59:95:6d:e2:14:96:14:85:58:
23:f4:86:d0:f4:42:26:1c:a1:18:c1:2c:7f:a8:14:
2f:b2:06:ef:9f:7a:73:36:aa:1d:ce:8f:b3:ff:d2:
23:17:22:53:1f:a3:c3:56:88:61:f1:a2:43:b7:98:
d4:06:38:7f:13:41:5c:87:1e:0d:e4:aa:91:82:91:
9b:d5:d3:98:8b:46:d5:fd:f5:67:2f:69:58:9e:b4:
1f:9a:7d:17:5a:c1:c8:71:20:42:74:28:13:45:c3:
56:b3:76:3e:5f:4c:3c:47:01:51:78:cd:25:8b:0d:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:C8:58:48:DC:DB:4B:3F:A3:61:1E:D6:39:4C:05:BF:82:4A:B6
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cf:c5:02:5f:95:bf:9b:13:5e:f1:44:32:03:f4:b4:d6:5b:
c5:b1:67:57:0d:f8:49:15:86:75:88:55:db:ac:d4:8c:ec:2e:
46:17:1a:98:68:a8:4c:35:bd:3d:29:ab:d9:8f:74:b3:95:bd:
da:d8:93:6e:23:bc:29:b7:c8:ee:22:fb:0c:26:b2:13:4a:12:
ee:d7:26:70:88:40:74:39:22:31:7e:74:74:57:7e:9c:d8:3d:
34:de:c8:d0:8f:21:ac:6b:2b:91:04:1d:25:31:4c:a6:fb:e6:
9a:fc:a0:dd:cd:03:bb:46:b3:8e:6b:a8:a0:7b:94:a3:34:5b:
15:c5:49:27:eb:1c:89:b7:3f:39:2a:bc:dc:df:95:c7:01:fa:
53:81:19:41:b1:96:64:e0:6e:53:6e:c2:16:de:d2:9c:bc:9e:
16:29:29:99:67:d5:41:1c:1b:57:fc:b3:cb:1b:af:4b:fb:66:
e2:b8:31:5f:be:4f:73:54:11:e9:1d:00:b8:9d:e4:d3:bb:ef:
0e:ae:d5:d1:f7:c3:08:e2:8b:5c:95:39:14:df:88:f5:67:9c:
02:75:31:e4:ef:6d:29:19:b3:7c:00:08:45:9c:16:78:41:29:
34:ff:26:2d:0b:32:d8:95:d9:8e:46:4f:8a:6b:8c:dd:6a:3e:
37:6d:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:38:19 2025 by rpki-client