Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: NKz3w8DvG0Y8tKyrfnuP9Q/6OfH/C3SnLFqY0J2kY2w=
Subject key identifier: D6:47:F1:E6:3C:38:9B:45:81:30:86:54:CC:4D:CD:BD:93:9B:18:E0
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 0194BC728DAAAD04BE6185ABFCD49549C253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 011F
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: i/C+/HIDJs/Mp/y2kmnoCioqcj6X/qu9tGtK/tZlOl0=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8d:aa:ad:04:be:61:85:ab:fc:d4:95:49:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=d647f1e63c389b4581308654cc4dcdbd939b18e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:48:19:f0:6a:2b:01:dd:8a:f9:d4:4b:64:
2f:76:e9:6d:87:86:3d:2e:50:b9:93:4c:18:48:3e:
8f:2f:2c:92:6f:76:47:d7:65:b0:84:45:ba:aa:8b:
0c:b0:d0:73:48:0c:07:20:df:70:5a:e7:0b:9a:9d:
fb:61:a7:f9:9e:be:34:f4:70:de:45:89:8f:17:68:
50:ab:3f:ca:a2:6b:96:15:86:3f:ef:c9:1e:60:9a:
a2:f7:d3:a3:14:50:a5:24:4f:8e:5f:19:c5:0c:2c:
6d:88:16:43:36:2b:16:ac:cc:b8:5b:34:55:3c:bc:
48:9d:08:49:e7:71:30:82:02:45:d1:fe:67:1e:08:
73:50:43:d0:98:54:a0:cc:fc:2c:ff:35:58:9b:a2:
67:41:f0:9c:ff:93:40:51:fd:f3:d6:82:07:31:01:
48:3d:ca:c7:0b:5d:2c:37:85:d8:8c:43:46:e7:f0:
3d:36:a2:15:e1:69:e0:4d:ce:50:b7:72:13:e4:04:
2d:98:c5:fe:bd:6e:29:cb:ba:92:68:32:b6:13:41:
59:7f:62:59:df:b8:82:6c:fa:35:34:ef:f9:25:2a:
fe:2a:9f:b7:7e:c8:1c:a9:bd:ab:fb:b4:b4:45:b4:
ab:b2:ab:85:37:24:32:e6:72:0d:6c:6d:5d:29:19:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:47:F1:E6:3C:38:9B:45:81:30:86:54:CC:4D:CD:BD:93:9B:18:E0
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5a:9b:50:ef:42:b6:33:55:f3:aa:1c:28:a5:e2:85:e1:7e:
01:38:c4:26:e3:c7:f7:59:ff:37:fc:9a:1e:37:6c:36:18:d5:
f0:4d:a9:d6:14:17:78:51:d4:28:f3:2d:fb:a8:21:05:ed:ec:
55:d0:40:8e:34:ee:37:32:33:68:75:ba:e3:89:9b:31:f7:28:
af:13:3f:e1:35:65:d5:ef:bb:bc:9e:d5:73:7e:b6:c2:b3:ea:
53:11:12:1c:12:55:fd:61:84:7a:28:cb:d7:24:5c:62:5f:69:
ec:c8:da:c9:f0:aa:89:57:e1:0b:b6:c2:8f:1d:e4:ad:32:48:
93:4e:00:68:50:f2:ea:9c:ef:2a:39:25:1d:95:c5:b8:cc:a2:
c2:2c:b6:61:2b:cb:12:e8:93:1d:71:85:9b:01:2d:aa:5d:08:
dc:a9:30:9b:de:bd:46:4b:f1:7e:dc:26:f9:e8:e2:b9:13:71:
9a:3f:79:c1:53:a4:ab:c3:e3:1f:e0:9b:09:6f:23:c3:84:eb:
fb:9a:95:1c:21:79:1c:62:2f:0a:42:df:79:1a:13:81:15:df:
f7:86:ee:99:be:8b:0c:06:36:77:93:5f:8e:9e:7a:45:b0:8a:
0e:bc:4a:b8:22:2f:d8:cf:9e:da:3a:d9:d4:5f:a0:8b:86:80:
1f:16:24:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:03 2025 by rpki-client