Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: 3OPnkaHwYMnBJJg3IPgfHZAFtTweO0gZ8XvQ+G+DwhI=
Subject key identifier: 1E:DA:4C:E4:94:E7:BF:5F:72:E8:DB:CC:C4:B2:BF:8C:A0:16:05:EE
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 0194BC72C8FCF1E7AC271FDA75BD59FD03E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: s1iRmY8JJ/yNDmm9vzMbftr7iyIRaGoFc19ThplSJzc=)
2: oo-z_CXtsFEYNitndCSAJspDNSA.roa (hash: QnQx9vPssVxJL7EjnTa4Xy3dXyJwi0Kmh9Xnp+svQIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:fc:f1:e7:ac:27:1f:da:75:bd:59:fd:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=1eda4ce494e7bf5f72e8dbccc4b2bf8ca01605ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:73:ef:e3:e6:a8:a4:ee:58:36:7e:62:df:
7e:12:b5:ce:ff:d3:db:f0:7e:6e:d4:87:58:91:c4:
e0:30:09:f8:ec:af:bd:98:24:65:f0:df:3d:bf:68:
82:97:70:44:78:df:82:ba:f2:d9:03:ab:b4:08:8e:
45:4b:78:78:2d:17:05:2a:a2:32:8e:28:a8:fc:7f:
6e:cf:38:d9:d6:c0:67:45:6e:11:3c:b7:b0:ca:d2:
97:cb:3b:4e:e3:55:19:24:39:b9:2c:19:a8:d5:d1:
81:04:80:7a:74:d8:9e:ca:a3:a5:7d:7b:98:85:56:
f3:bb:20:ec:f8:65:ec:db:d6:1e:ac:51:1f:fa:e7:
7f:d6:f1:c9:ca:9f:65:ce:ad:1a:4d:0f:0a:ab:33:
90:c3:18:d0:4b:11:a1:30:d9:0a:ac:22:a6:60:5f:
3d:13:34:93:70:56:1b:5d:dd:7c:4c:47:28:ac:49:
e8:1f:b8:2c:86:bd:91:9b:c4:14:a6:ed:c1:d0:0a:
49:a0:db:c4:86:d2:fa:6e:21:9b:cc:e7:62:f3:67:
eb:b8:d0:9f:66:0b:44:13:93:92:73:38:26:f9:e0:
ef:e5:a9:ba:23:5b:9c:eb:6d:94:5a:b7:38:1b:14:
27:c1:0c:02:68:76:4e:b4:8a:b8:54:54:6f:f5:7c:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DA:4C:E4:94:E7:BF:5F:72:E8:DB:CC:C4:B2:BF:8C:A0:16:05:EE
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:52:8c:72:4d:9b:2b:f8:b3:2f:a6:99:ff:38:05:61:54:
ec:93:15:b1:ea:c5:49:a3:ac:c8:e0:93:0c:64:5b:13:8c:31:
59:31:e2:32:26:8a:f7:b0:b2:5f:24:40:90:98:88:88:f1:3d:
b3:67:00:cd:d1:7c:7d:62:62:e6:a7:9a:42:46:16:25:ad:7e:
80:25:3c:ad:17:a8:4d:e8:f5:50:9c:67:81:a9:ea:a5:27:0c:
b6:49:25:f6:a5:b8:7c:76:1d:cb:76:cd:db:0a:b5:d3:27:78:
58:ad:b9:46:ef:18:e3:9b:3f:3b:09:dc:af:b9:21:0a:4d:c9:
93:5c:77:6a:9a:a1:d2:1a:63:65:dc:0b:7b:47:bb:fb:fb:be:
41:08:31:8f:e6:58:7a:94:0f:06:f6:d4:a4:7f:fd:29:45:c4:
8e:df:83:df:0c:e6:2e:fc:a5:36:81:d0:dc:73:33:8f:10:0b:
e2:3a:e2:aa:a7:65:f6:3d:56:cc:a3:ce:e4:54:e4:9b:9d:7f:
09:5b:5d:60:7c:02:3a:c7:9e:9b:a7:63:f7:2f:87:5d:d8:e2:
86:d6:71:44:8b:9a:54:3d:a0:48:12:83:7b:f9:7f:5e:d1:22:
52:1c:64:12:3b:9c:aa:d9:e3:0a:1f:46:d8:c5:db:e2:af:b2:
f3:eb:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:13 2025 by rpki-client