Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
File: 0J8gULc6LOfoLIPUdPvWHl83I1k.mft (raw, json)
Hash identifier: ycDCrg5m72/2C6r4aveRadY/gDKT/FBOR39WsaATu0M=
Subject key identifier: 3D:43:23:61:53:3C:59:7B:69:3C:32:05:59:96:BA:2D:EF:B3:0C:E1
Authority key identifier: D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
Certificate issuer: /CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Certificate serial: 0194BCA9AB28841FAEDD62D428B20C00CD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
Manifest number: 0917
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 0J8gULc6LOfoLIPUdPvWHl83I1k.crl (hash: nh9H+X5nKX64HgBVZ2FhUftoqUcs8p0ZQMgNj5mJNLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ab:28:84:1f:ae:dd:62:d4:28:b2:0c:00:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=3d432361533c597b693c32055996ba2defb30ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:77:da:ea:03:9d:aa:c4:91:f4:98:32:13:
41:d0:83:f4:25:f2:bb:a9:53:9b:00:2e:62:a5:d7:
96:ce:c9:93:26:f5:93:f0:ec:f7:16:cc:82:11:a6:
2b:80:7f:23:9a:d2:56:fa:48:cb:1c:73:b3:40:16:
7f:d3:ec:d5:07:1a:af:00:a2:c2:23:77:a0:b3:ef:
ce:0d:b9:0d:44:87:e4:1a:f2:a6:61:09:66:d4:db:
cc:12:2f:0d:85:9c:24:76:1f:d0:16:da:73:da:8e:
44:e6:94:72:5c:f3:ad:33:16:b6:d3:b5:79:f6:b6:
1b:81:a0:b0:80:58:ba:cd:1c:4f:aa:d2:9b:56:62:
76:ad:ec:66:9d:ee:a4:4d:8e:71:8a:fa:ab:6a:a0:
45:20:78:7b:46:af:4a:0a:00:6c:78:c1:a2:c8:7d:
6c:ba:9a:20:8c:cf:03:81:ab:64:3a:ad:fb:a5:ef:
4c:13:f7:1a:e5:34:b5:c0:a0:1e:d8:26:d5:12:d7:
ad:44:ae:33:7b:7e:66:de:de:e9:20:e5:e9:9d:f4:
09:22:7b:dc:ff:5c:53:e9:6c:a4:25:34:97:bd:31:
9d:ec:48:1c:9e:5f:df:f6:b3:f6:a2:4a:cd:e1:d5:
98:2c:32:2b:bb:5a:c3:ac:79:8d:94:6d:48:84:37:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:23:61:53:3C:59:7B:69:3C:32:05:59:96:BA:2D:EF:B3:0C:E1
X509v3 Authority Key Identifier:
keyid:D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:36:25:28:b3:0e:2b:9e:7d:5e:39:27:d1:59:0b:4e:b3:5d:
95:d4:4e:1c:db:22:22:88:02:32:cb:a3:11:f5:c2:37:42:2b:
87:46:62:85:a5:b7:f1:92:b2:2d:8c:4a:43:5c:d1:48:d8:86:
9e:5f:7a:16:02:37:15:40:5d:29:87:49:52:11:d6:23:42:ec:
7b:61:3c:31:4d:e6:62:ed:e6:da:f1:b1:72:e5:a0:8c:b7:c1:
b7:3b:41:33:67:70:14:ee:59:97:bb:2f:c3:35:7a:19:f6:9a:
ea:ff:ff:ac:a9:0e:bf:9a:c3:5c:6d:5d:c9:60:46:94:45:51:
a1:b5:1d:71:b0:e3:fc:31:1f:e5:47:d3:41:52:bf:94:b6:04:
4d:63:af:39:1d:2c:e6:8c:e0:9e:b6:6b:d7:e2:70:af:c9:ea:
a3:83:8a:09:cc:fd:21:46:08:dc:0a:16:f1:7e:1b:09:5b:b4:
85:4b:b8:7b:b3:d2:43:09:f8:65:1c:44:a9:c9:34:76:7a:0a:
8c:4a:ae:ef:a7:73:01:63:6c:83:a8:75:1f:05:a2:db:5f:a2:
09:c3:ab:6b:61:54:e3:f5:d1:d2:0d:64:4d:89:df:8e:50:45:
12:98:4e:8e:f5:19:c3:76:e6:dc:6f:9c:2f:fb:ac:38:9b:9d:
dd:9b:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:42 2025 by rpki-client