Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: dFya3ZI5hlHok62P/fTOKm3UQ/Ifad9+B2m599fyIXU=
Subject key identifier: B6:5E:76:F9:F0:E4:FC:49:11:E3:A8:A4:DF:D3:B9:03:21:5B:2F:2C
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 0194BCA9D5FA03E10192E69EBB806FD6F21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 0BF1
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: QBSZYDD0bgc7/yB0OXwAikkBYOEfYk8tao5iZsirCLk=)
2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:fa:03:e1:01:92:e6:9e:bb:80:6f:d6:f2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=b65e76f9f0e4fc4911e3a8a4dfd3b903215b2f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:a4:3e:0f:97:af:bd:b4:dd:d7:35:ee:62:
4d:3f:0d:eb:6c:16:57:c0:4c:e3:9e:8a:3d:ea:7b:
45:63:92:1e:4d:c5:95:61:18:80:85:d3:56:ae:9a:
0c:9d:f9:45:2c:d9:6d:c3:dc:e2:71:5c:e7:e9:36:
4d:c3:83:35:75:d3:ad:ca:dc:10:6d:5f:a8:7a:29:
03:cd:33:d6:e1:4e:11:95:6b:ba:2e:0a:eb:4f:52:
ce:d9:ab:e0:fe:3e:9a:dd:7e:03:3d:c1:59:96:fa:
8d:39:02:98:e0:aa:51:4b:7b:47:dd:56:34:36:2a:
54:5e:d5:10:1f:02:46:44:65:d0:26:50:0e:74:b5:
a0:2f:af:cd:90:69:77:e2:74:1d:2b:eb:46:a5:c1:
27:7e:36:8f:1a:83:82:1b:4a:f1:0b:23:67:29:82:
e2:e0:c0:8d:55:bb:d3:b5:1b:0b:e1:47:b1:3c:f2:
62:4c:2a:8f:38:dd:a1:0c:3d:c6:d4:cb:09:04:36:
18:6b:37:53:25:9b:e3:41:57:3a:f3:69:8b:28:fa:
ea:5e:aa:b1:ca:ad:47:a2:75:03:59:02:c3:96:5f:
a8:3e:05:a4:df:c9:ba:99:2e:c1:9f:3f:d7:e3:5e:
d4:45:17:f1:85:44:6e:e5:58:cb:38:c5:6c:49:3f:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5E:76:F9:F0:E4:FC:49:11:E3:A8:A4:DF:D3:B9:03:21:5B:2F:2C
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bd:34:61:c5:0a:0d:dd:70:d1:50:d3:0d:3b:f9:77:47:c7:
d8:1b:8d:e6:6d:6d:21:3b:be:1c:ea:96:35:16:32:eb:8d:3f:
77:e8:d0:2d:14:9b:b3:85:59:c6:b2:a9:e7:61:22:11:9d:16:
28:da:55:28:10:9c:49:7a:5f:8c:0b:c7:4a:6d:e6:38:c0:19:
b0:4b:c9:55:6d:12:16:47:1e:18:ea:58:0a:a8:42:c5:08:15:
9c:7a:fe:db:b7:5d:ee:1a:48:7f:63:88:ef:31:62:55:57:e0:
b3:d7:bd:2f:3b:6d:37:6a:4a:bc:f5:eb:a6:1c:34:e5:be:8c:
09:f0:2a:44:0f:f9:60:61:1a:ec:96:dd:f4:d2:c2:ca:89:c7:
60:ff:16:5b:55:37:98:8f:3c:49:8d:ea:e8:f1:8d:d3:92:80:
27:06:81:fb:ef:88:0a:bc:68:52:13:63:37:56:ab:6a:b9:d7:
99:00:7e:9f:c6:13:2e:94:2c:7e:a0:ee:43:85:0f:bb:89:9e:
86:5f:29:c2:f2:1f:8a:79:9c:3a:0c:2f:b6:1d:af:cb:31:15:
d2:cf:71:a7:21:ba:0a:62:a3:2f:07:7e:1b:69:93:01:2f:28:
1d:00:03:00:cb:1f:c2:42:ae:4c:a8:37:ef:77:b1:41:80:13:
89:4f:2c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:37 2025 by rpki-client