Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: YI/H4C+t78b/1GHd0is3v/8hqAiHxlNjCN22zkAfW3k=
Subject key identifier: 68:20:C9:A2:3D:ED:36:8F:BD:A6:1B:4A:D6:28:81:94:41:84:36:93
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 0194BD8532285594AE04D457286BC047D1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 02C1
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=)
2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: rGkme5jMderJVfFtfkg1WpBg9ZOh7kWOw0ADelfObR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:28:55:94:ae:04:d4:57:28:6b:c0:47:d1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=6820c9a23ded368fbda61b4ad628819441843693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:7a:30:8b:3b:9f:3c:25:6e:8b:87:0b:37:
c5:15:b3:1d:8c:79:5c:d2:70:fd:f8:4c:b3:25:82:
34:29:29:0a:21:dc:4b:7e:db:0b:83:f5:71:98:fc:
c0:10:db:39:fd:55:db:25:58:26:53:fe:67:c1:37:
d4:50:0e:93:0a:cf:fe:df:4f:54:74:86:36:7b:95:
a7:35:08:bb:75:e2:9d:94:45:94:1d:54:c6:e1:05:
e0:e9:65:cf:79:83:95:20:bd:27:b9:5e:d9:4d:df:
3a:4d:e9:a3:1f:e1:88:73:cd:58:c0:f1:c8:bc:d0:
92:f5:82:92:00:b4:19:80:af:9c:0d:dc:6d:4e:4a:
d3:d5:b5:94:39:d7:ec:d4:a9:b8:72:ca:dc:b0:16:
fc:96:7b:84:dd:96:2a:37:38:c0:3f:40:5c:4e:2f:
5c:54:87:17:5e:59:a6:0b:a3:b3:4f:68:ad:7f:85:
0f:30:db:85:c6:42:7c:05:47:27:00:99:e4:c1:ee:
e0:b0:44:12:80:61:4d:94:c2:9e:55:74:b8:65:1f:
d7:8b:54:e6:b4:86:1e:9d:d1:5a:77:8b:c8:7a:a0:
b0:cc:b6:ed:37:38:88:40:f0:f6:d0:ab:cb:4d:bf:
d2:60:68:02:d0:84:53:1e:89:16:94:bb:e0:f2:71:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:20:C9:A2:3D:ED:36:8F:BD:A6:1B:4A:D6:28:81:94:41:84:36:93
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b5:50:a0:00:b8:09:f0:66:0f:2a:b1:8b:0c:bd:b6:6a:e0:
b1:27:74:3e:5c:9d:66:cf:a9:c1:ff:c7:53:50:49:cc:e5:73:
e6:f3:82:0c:a2:95:ff:d9:fe:95:95:53:22:99:a1:bc:5c:c3:
3f:11:03:b2:17:ab:ab:4e:e9:2f:5c:3f:8b:9e:32:f8:dd:a7:
81:7e:58:0d:69:e1:ba:c9:ea:da:9b:7b:00:ae:6e:05:24:77:
4a:ff:8a:9c:8d:3c:01:75:34:11:3a:22:08:90:26:72:6e:eb:
21:bb:4c:ad:72:97:4e:f6:f0:cc:95:39:61:bf:85:28:05:84:
6c:e1:2b:ef:bb:77:72:1c:5f:04:56:83:d6:39:3c:cf:c2:1f:
7d:6c:7e:df:1c:04:15:ba:fe:97:90:e0:36:f1:7f:c2:9b:f5:
c9:da:4e:d1:4b:f4:dd:a9:80:69:e2:a3:eb:4f:02:d0:e4:7c:
2b:72:55:62:6b:90:28:1c:33:d0:99:0f:38:8b:52:ed:a9:de:
c7:73:50:5b:ea:d6:95:b1:64:dc:94:8e:5f:6c:5a:00:35:24:
56:45:ac:7c:d0:78:a3:6c:3d:60:15:5e:4c:25:5f:38:85:ea:
7e:e9:34:a1:b8:13:49:4c:ef:52:b3:e5:37:f8:84:9f:32:af:
96:0d:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:02 2025 by rpki-client