Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: LNo0tP8YeC+c5JmBag6DtQ3hzKrOThNTRtkb+cIOAl0=
Subject key identifier: 0A:DE:25:45:30:5E:CA:D7:70:7C:E5:D7:76:B5:C3:6F:45:C7:2E:6D
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 0194BCAA3006DA6C54011191E26A6BFC54E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: dFf6m2pR3JAo650cnUCp1hdBj/o0bv+EJzZMSFlm9ws=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:06:da:6c:54:01:11:91:e2:6a:6b:fc:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=0ade2545305ecad7707ce5d776b5c36f45c72e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:66:8a:9a:08:28:c0:b2:80:a5:dd:9a:4a:
77:2e:0a:fd:2d:70:12:33:2e:a5:8e:e6:76:56:e6:
d1:d0:12:e3:1f:5e:bd:a7:c0:88:27:29:ca:25:80:
91:04:6a:e8:c3:06:12:b3:b5:26:77:cd:09:e3:d7:
06:59:a8:06:14:23:3e:ec:69:4f:f0:eb:ef:fd:b0:
95:28:ba:06:6e:e6:04:b5:01:f6:b8:bd:f3:99:14:
4f:02:1d:17:f9:dd:1b:47:9c:df:dc:06:52:e1:98:
0f:a4:ca:34:a0:0b:30:57:d6:f7:b7:b4:91:96:8a:
e8:ee:1b:d8:1e:10:23:06:f4:77:dc:ec:d2:ac:bd:
d1:f9:fb:09:b1:b5:f7:b7:0b:69:ed:88:c5:87:7f:
2f:10:fd:b7:e0:ec:a6:2d:68:59:fe:e5:9c:87:65:
09:b3:25:75:71:cb:3a:76:c9:03:e4:bf:3e:22:cf:
f8:5a:74:b3:b6:21:03:9a:de:5d:2f:cd:1b:d2:fc:
a0:3d:e5:8e:a8:fa:31:4f:68:99:a3:79:94:9b:dd:
96:08:d6:4a:eb:52:71:ee:a7:03:f4:0a:0f:3a:d5:
55:77:35:c7:ca:cf:50:38:87:a1:36:8e:1f:18:de:
4d:0a:22:b9:ae:f6:fe:df:88:0d:9e:bf:25:e7:a4:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:25:45:30:5E:CA:D7:70:7C:E5:D7:76:B5:C3:6F:45:C7:2E:6D
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b4:e4:82:20:2a:ca:c5:60:f6:a1:c4:64:3b:d4:c6:da:0e:
73:ac:c3:90:2f:5c:23:68:97:90:69:25:5a:49:a3:44:20:5d:
33:06:aa:2a:98:73:b6:c6:c9:3b:6b:e5:cf:87:1c:a5:44:f5:
d7:ba:57:c9:2e:1e:a8:54:32:9a:22:d5:ac:99:24:60:bf:aa:
9e:bb:6f:1f:74:f3:8e:9b:06:26:b7:df:e2:b2:b1:15:c9:f2:
55:82:e7:25:53:32:1d:67:84:e2:fa:f7:f9:6d:71:0f:fc:8a:
58:cb:3a:49:34:f9:d9:74:22:48:10:e1:6c:40:ad:d8:1a:bf:
f7:ce:63:c9:ab:46:f9:1d:7b:25:ca:d6:cc:92:e4:d5:4d:68:
a4:f1:f3:30:3e:f9:90:42:d7:af:56:8d:78:75:6c:0c:dc:21:
b9:df:0a:08:73:43:19:f3:44:08:11:72:ab:26:15:fc:51:b5:
b6:d1:dc:0f:00:35:4e:c9:4e:45:92:5b:f2:60:b6:7b:c1:12:
e7:2d:ba:b0:6f:0e:bc:bd:91:cf:dc:36:b5:b5:ce:d2:54:6f:
1b:ea:79:6c:5f:f0:5e:5b:23:b2:6d:d4:fb:f7:2f:48:30:0c:
eb:91:20:48:29:40:38:62:3c:6c:a6:cf:cf:de:0d:ba:4f:f7:
d7:75:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:53 2025 by rpki-client