Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: XjS3jyzNZYfRhqNbjkbo/yXVRIqS4TuWTICdFz+noqw=
Subject key identifier: D9:65:92:5A:0E:23:08:B1:95:1C:D5:E2:A6:97:8A:0C:00:16:4B:CC
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 0194BC3BD5A4B1190B2B6A9EA8F1F71D84FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 0D92
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: OwSVTyboedFfyrhEffPqNtI/T5/whz+XCBLR9GNquCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:a4:b1:19:0b:2b:6a:9e:a8:f1:f7:1d:84:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=d965925a0e2308b1951cd5e2a6978a0c00164bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:48:35:f7:95:3e:58:07:0e:6d:bd:02:ea:
7a:79:53:f7:c9:8f:aa:4f:f2:86:f2:ea:d9:6a:4f:
58:d5:6e:1a:f0:4d:b5:e3:39:57:8b:8b:d1:e2:33:
b1:cc:f3:30:c6:f2:01:ae:d1:9d:62:4d:b0:85:48:
96:9a:bb:b5:e1:6f:4a:8b:64:43:52:41:56:c0:c5:
70:3b:84:29:60:6a:db:6f:c6:9d:8d:84:0b:a3:14:
d5:74:fb:76:3d:3d:ab:0e:e2:aa:75:a1:df:29:02:
3f:b7:22:96:9f:70:12:51:cc:48:d0:24:5f:0f:51:
99:3d:73:9c:a4:d3:fb:a1:df:24:2c:79:2b:4a:40:
d2:1a:13:3c:50:87:a1:65:8d:f3:35:76:70:37:0f:
3d:d3:1c:75:61:07:ca:59:8c:fa:71:94:f7:28:14:
dc:f4:9e:72:27:03:38:0a:05:99:f2:1e:6d:17:22:
48:8e:bc:3e:45:ac:37:33:51:34:f5:f1:8c:e1:27:
15:5e:dc:d3:b1:46:1b:a3:24:75:b5:aa:49:e8:44:
53:81:e1:96:06:e2:71:a4:28:71:1e:c8:c8:b3:9d:
fc:5b:5b:f1:55:7a:d4:bd:84:0b:8d:9e:7e:6c:d4:
75:d4:0e:6f:96:2f:80:c3:e7:be:b5:3c:e3:f3:a8:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:92:5A:0E:23:08:B1:95:1C:D5:E2:A6:97:8A:0C:00:16:4B:CC
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:63:1c:49:d4:9f:a3:aa:c8:c4:04:be:10:95:9e:e9:96:0b:
53:43:4b:0f:0e:e9:3d:58:03:37:71:fa:6d:ef:09:1d:77:5b:
b8:15:d2:03:d9:6b:f7:15:82:48:ad:02:91:33:ad:b4:52:c7:
0e:6d:71:af:72:c3:73:79:21:79:08:37:38:f2:99:56:1a:f6:
31:21:36:b5:d0:13:05:20:7e:08:fa:86:9f:2b:a2:15:21:70:
e6:fa:1d:61:69:32:6f:10:92:99:85:ae:aa:4c:2f:f8:35:2a:
f1:d8:33:18:23:5b:4f:f5:af:7a:3f:20:88:17:19:d7:ab:e5:
e2:a3:4e:89:f0:14:8c:77:eb:8f:09:07:f6:50:ad:63:8f:72:
80:93:67:a2:59:09:aa:1c:2f:10:8b:da:6b:f3:cb:bd:41:88:
f1:97:85:2a:f6:e4:2c:1f:3c:fb:6a:64:c6:14:60:35:23:f5:
dc:0a:d2:a7:2c:44:73:c7:60:74:0f:63:b1:08:3f:9d:ee:ae:
85:ea:a6:da:20:cf:93:68:2b:8e:dc:22:aa:53:4f:83:a2:00:
24:20:bf:cc:3e:2b:8b:dd:6c:6c:81:55:e8:f7:d6:11:42:62:
5d:ed:95:3b:b4:c6:be:3d:09:d0:5a:7d:67:a6:c9:ce:fb:83:
35:ee:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:53:12 2025 by rpki-client