Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: AcKOAc8EogIor2OPxWs6030X7JIm+afcctK0OSc9iOg=
Subject key identifier: 0F:39:04:4A:79:E7:DE:B1:1D:44:98:E6:A2:FD:C6:14:DB:72:B4:05
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 0194BC3C7CA967BDA97B569E61FECCE0F356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 05E5
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: yR17FqcsJ5snZaGPUFPV+Y+MgqSypwb7uezEGvZF9fU=)
2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7c:a9:67:bd:a9:7b:56:9e:61:fe:cc:e0:f3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=0f39044a79e7deb11d4498e6a2fdc614db72b405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:d5:66:29:ed:1d:25:48:f1:01:27:f6:27:
6d:f6:64:5d:48:de:da:bf:d0:ce:4e:e3:20:91:ba:
54:f5:3a:ad:14:65:c3:50:0a:ae:ec:01:d1:50:43:
b9:33:9d:13:d0:cb:d3:41:0f:a3:38:71:56:d4:82:
c1:89:94:91:ca:44:8e:cf:14:ee:60:0f:9b:f7:cd:
13:93:76:d1:9f:d2:77:d1:4e:ad:0d:dd:3f:da:50:
ef:8b:36:94:f1:c5:e4:d2:48:14:18:e8:05:f8:9e:
f1:91:e5:31:42:51:c8:17:6b:6d:85:ae:11:28:e0:
d2:d2:09:1d:cc:9c:ac:5c:29:83:97:7b:aa:f1:29:
25:80:45:0b:25:f3:66:f6:9a:83:d8:d1:7e:96:09:
4c:7a:cc:b6:fa:87:0f:82:17:dd:70:c8:5e:56:78:
50:83:1d:8a:50:77:cd:af:3b:db:80:c3:60:02:15:
e1:66:d5:d1:d5:d2:c1:2c:d7:0e:bc:34:e5:4a:8b:
74:eb:8e:1c:37:f8:2b:3e:a0:0c:88:58:27:80:a3:
67:9a:5f:b7:5f:44:d7:35:be:01:5a:0b:ff:cb:25:
0c:db:64:2f:27:f8:de:5b:58:5b:d7:ad:3b:7a:4e:
2f:1f:69:3e:bc:a9:e5:dd:f1:3b:7c:08:db:5d:77:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:04:4A:79:E7:DE:B1:1D:44:98:E6:A2:FD:C6:14:DB:72:B4:05
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b1:36:65:61:7b:f9:f4:da:dd:55:60:1e:de:46:10:90:01:
e2:4c:50:a0:c8:fc:6c:e9:16:00:31:36:78:f5:1e:b1:f5:d8:
27:46:d1:ce:ac:93:eb:71:a4:05:e6:56:73:ff:9e:f4:c8:8e:
e3:2b:b1:bc:52:73:bc:5f:6a:3e:ec:f8:b1:04:d5:94:c2:cb:
df:91:49:44:e4:37:73:0d:50:fb:2e:2d:75:ac:f7:75:ac:5f:
64:d3:e8:27:79:81:81:3d:a8:39:36:ba:99:9c:0b:a2:c9:6d:
39:8f:37:57:5d:cb:08:46:49:56:85:ca:2c:2c:3c:aa:ec:e9:
41:bf:28:92:20:ca:86:fd:a2:07:88:03:c0:ea:62:60:6f:5e:
6c:5c:2c:5e:ff:18:70:71:cf:ee:c2:3e:08:df:be:32:60:b5:
85:28:8d:7b:84:ed:7f:a2:d8:d0:29:c1:bd:13:92:25:cc:a4:
cb:a2:48:81:4a:12:f2:7d:26:34:0f:a3:ec:9a:2a:01:f2:46:
f7:e7:cd:ca:f7:dd:40:26:97:0a:a5:3c:61:a4:16:82:0c:0b:
a7:c2:45:02:e7:4e:ec:a5:cc:31:21:ec:30:f1:57:d2:51:06:
ce:eb:a2:00:23:4e:87:b5:cf:dd:7a:22:18:bc:a3:c8:8b:81:
e4:17:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:05 2025 by rpki-client