Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: cW4Fkt1St0GtBAkEm9kfu7g465w038qc3/V73wbWU88=
Subject key identifier: E1:D7:69:64:25:49:E2:28:ED:13:1F:16:1B:42:F2:5F:09:4A:B0:18
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 0194BD4E657D9A65E0EF6717D1E24FE060D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0BB8
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: nlpFxY8DbAmPIrAQSCNTjB2kn7Mlc+0y7wcJN0n46ZI=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:7d:9a:65:e0:ef:67:17:d1:e2:4f:e0:60:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=e1d769642549e228ed131f161b42f25f094ab018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:6f:f3:9c:67:bf:00:9b:85:6d:17:8a:be:
03:c1:a9:10:31:60:af:9d:dc:e5:8e:dd:71:e2:de:
93:ac:bc:37:68:43:72:e9:ed:4a:06:90:25:77:94:
a1:56:b5:d9:76:9a:e0:fc:03:e0:68:a2:70:4a:f1:
96:46:3c:e6:9f:1e:b5:1c:6c:91:9c:aa:a3:a6:db:
54:22:e5:d1:98:9b:57:4a:a6:68:70:8e:3a:2d:c3:
eb:e5:46:5f:1b:f4:bd:f4:83:26:3a:bf:48:a5:46:
e2:7d:c9:17:0b:92:0f:7b:27:5a:4c:b8:cc:61:22:
56:b1:dc:69:8a:eb:b5:0f:ef:d9:1b:5f:0b:ca:70:
39:c1:37:d2:af:03:5c:d2:29:c7:9f:9c:64:b8:a0:
4b:36:43:36:22:e8:5f:72:fd:9a:aa:3d:47:44:66:
92:a9:e7:15:43:1a:71:b6:1a:1b:32:a6:fa:3e:f1:
c3:bf:03:4e:8a:bb:d3:5d:72:ee:b0:12:0a:9a:b9:
41:1f:7b:b9:26:f1:66:5e:e6:27:df:89:6d:6a:89:
6b:6a:9a:5a:84:73:f6:02:57:19:50:8d:51:d9:42:
19:c3:e7:40:c7:0f:f7:14:07:86:d3:36:c3:89:97:
fa:9d:97:ba:23:cd:92:96:a8:e6:8b:3e:12:87:86:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:69:64:25:49:E2:28:ED:13:1F:16:1B:42:F2:5F:09:4A:B0:18
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6e:7c:05:57:02:6e:a5:10:fa:a5:c6:45:ba:13:50:ba:da:
27:70:1d:5a:e0:91:f0:c4:72:50:a4:d1:52:8e:a6:27:70:e6:
49:fb:ff:f9:b4:3b:27:82:1c:a7:f4:e1:92:11:6b:3e:b0:e7:
b8:c3:7b:29:fb:8c:ce:50:d4:15:42:b1:86:16:8f:bd:ee:70:
09:92:85:3e:2e:b4:20:67:74:bc:5d:b6:85:67:9f:0c:40:88:
2b:44:7c:32:96:ee:1b:e4:49:9a:d7:ce:64:9f:03:a7:5e:08:
29:95:6a:64:cf:ce:7b:27:00:8c:64:a8:f2:a1:0d:4c:0c:5a:
be:d4:e8:77:6c:21:4f:97:b5:23:29:0d:7a:4d:6f:d8:56:29:
32:c4:94:fe:c7:a9:6e:3b:a6:c5:19:6d:1a:2d:95:2f:ca:84:
8e:2c:09:f5:53:db:25:92:a8:57:1f:c6:f9:38:6b:87:fc:98:
5f:e8:b5:a1:8e:c5:91:26:bd:e1:72:51:92:78:64:16:23:d7:
a1:4b:08:03:70:10:99:e2:32:14:a8:42:ba:2e:8a:ac:ab:11:
30:fa:d1:3d:a4:f5:56:c8:f6:61:66:ac:cb:39:47:dd:2c:ee:
08:b0:5b:d9:29:6d:bf:80:39:80:f0:6c:22:52:3a:61:0e:6f:
90:56:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:25 2025 by rpki-client