Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: 7J18eJMezeBd41oFl2pkZaeVG+yGqxho86uR62QLDOo=
Subject key identifier: 6A:DA:84:F8:F6:27:B7:2B:F4:7F:5E:D3:72:9C:08:96:04:09:DE:1B
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 0194BBCEE9D92E14D7C2C6A5F9352159A49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 1382
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: y9Uq9+mCdW7A0/s16569fPeWeamVFlkgv/P+p3VtEJA=)
2: I8hH4YeV3HM0yWrc52lfIOhYTt8.roa (hash: colmP8j9TQydvYGFc1+glmJgVJjDM5AxsV+6TerMW6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:d9:2e:14:d7:c2:c6:a5:f9:35:21:59:a4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=6ada84f8f627b72bf47f5ed3729c08960409de1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:b9:55:da:28:0c:0b:33:4f:47:12:a4:76:
92:fa:6a:7e:8f:6c:b9:da:b0:1c:57:98:c9:85:51:
7f:b3:b6:ad:1e:f1:23:66:15:21:65:2d:eb:df:20:
0a:28:a7:48:cd:b7:0c:52:ac:75:88:db:26:48:e1:
bc:6d:c9:e1:be:f8:87:ef:3d:ee:ab:ff:0d:c6:a7:
e2:df:b3:1e:d1:a9:3d:4c:f0:da:94:c6:ed:f9:f8:
4e:6d:bb:8d:1f:bc:d1:b9:67:12:8c:73:0a:a8:e9:
e9:05:5e:a2:b0:26:af:81:3c:6f:d1:87:4e:d6:56:
18:71:18:82:92:7c:6f:f9:b5:85:d1:89:ed:9b:2f:
8a:f6:ab:95:9f:09:77:70:f4:3e:96:13:6e:fc:95:
f9:0c:d0:a2:1e:ae:39:db:f4:6c:0a:77:29:d8:36:
ac:3f:7a:00:98:9e:9e:71:db:6b:d8:af:35:1f:55:
81:da:ec:58:72:f1:84:84:73:13:3c:89:0e:00:10:
af:df:86:2c:f6:5d:2b:8e:c8:0f:0a:21:f7:8f:ca:
10:78:99:fc:fb:14:a6:08:87:01:2e:95:f1:6c:b9:
69:bc:83:4f:73:fe:2f:ed:de:ed:9f:72:40:ea:35:
2a:42:a5:b2:66:76:13:7a:75:1c:cc:57:91:23:0d:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DA:84:F8:F6:27:B7:2B:F4:7F:5E:D3:72:9C:08:96:04:09:DE:1B
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9d:0e:83:e9:2b:a6:ce:e5:57:d3:cd:da:8d:6d:a0:1c:9f:
e8:7c:8a:70:36:cc:20:49:55:7a:13:20:56:c5:34:4e:f3:82:
2d:4d:6f:d4:9b:b8:14:7e:ab:6e:65:c7:ac:35:0b:90:98:e9:
a0:65:06:07:70:9d:e2:21:ec:1c:f3:75:74:a7:96:57:11:a2:
29:f3:1f:81:7f:92:39:84:ae:8e:74:26:3d:3c:9b:03:d0:f2:
65:31:2b:bd:26:b9:47:1c:23:33:ea:cb:0e:60:54:72:a5:d0:
90:72:c8:4c:8c:7b:73:4f:e2:2d:04:f4:82:b0:4e:83:9c:58:
38:ff:8c:d0:c7:ab:7b:ff:e4:16:d4:a2:45:74:d4:c0:2f:62:
a2:78:d7:c6:75:ab:48:ba:7c:59:32:86:60:02:ae:04:1e:6c:
5a:41:21:8c:1b:d4:1b:ef:a1:4c:ad:63:50:c4:42:a8:79:d1:
b7:70:2d:77:fb:02:61:5b:77:db:2a:cd:6b:77:ea:9e:d5:02:
9e:af:1f:34:b4:2a:2f:2b:4c:e1:9f:81:40:a3:4d:e1:ee:43:
46:3c:33:39:c9:ee:b8:44:b1:e3:f9:bf:dd:f6:df:d0:5b:dc:
af:5f:42:b3:58:fb:77:fe:21:70:37:f4:46:0a:80:74:53:49:
5f:93:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:35 2025 by rpki-client