Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: Xw3WjN0aLvr+/StiRR7CzOrpwrf3zlQDaqOZCiZ5Ohw=
Subject key identifier: EE:8F:A7:91:37:FE:08:5D:56:6E:50:C8:89:4A:54:5C:CA:D9:F2:F2
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 0194BC3C890E25343E3433DDEF6574ADD821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 10DE
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: 6apLLkO4ZujLjoUoUnQf8yBPHodT1wvqhokejhCAmgQ=)
2: AyldtAoWafPHTkmACDxst6jxsP8.roa (hash: 5JuPcS4QOkaO/Jt7b79o9DhsMUfsXTNZilUz8aQXzEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:89:0e:25:34:3e:34:33:dd:ef:65:74:ad:d8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=ee8fa79137fe085d566e50c8894a545ccad9f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:ad:d1:16:4a:0e:ed:d0:48:0c:a4:53:33:
7d:9c:78:75:4e:58:24:ac:8e:3b:36:f2:7b:b7:a0:
f0:34:45:70:5a:13:a4:55:12:49:9c:82:3e:39:64:
98:77:88:3d:b3:61:f9:b4:bd:b7:65:d4:46:78:56:
10:e9:c6:38:b0:7d:51:5c:0b:98:4a:aa:c8:5a:d9:
48:cb:41:b1:72:40:9d:f2:1d:d4:72:b2:3a:7f:18:
b3:5d:5e:ab:bd:18:88:8d:6e:d6:1a:f3:38:7e:7d:
a3:1a:fa:24:45:c6:32:90:ff:a3:df:c4:31:0f:95:
a1:29:43:7c:72:4c:5b:a6:a6:65:54:32:cf:ff:69:
0f:91:8c:e3:fd:10:94:95:09:66:18:dd:ca:9c:4d:
73:dc:18:87:de:c2:55:f8:96:3d:75:57:04:93:32:
1c:8d:b8:23:e2:35:cb:74:f3:46:5e:c4:3f:5f:c7:
9b:f5:af:40:44:e2:a4:f6:c3:78:1c:34:b9:b6:62:
7c:e9:76:0e:cf:23:90:48:fd:59:8a:26:25:48:5e:
40:99:b9:a6:1e:f8:dd:99:6b:6a:3e:f8:48:33:68:
0f:1b:66:61:49:13:00:6a:a7:83:66:b3:75:98:3b:
3e:37:f0:17:ee:4f:0a:ba:69:c4:ff:b4:d9:20:65:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8F:A7:91:37:FE:08:5D:56:6E:50:C8:89:4A:54:5C:CA:D9:F2:F2
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:01:46:dc:d7:9d:4a:e1:19:f6:a4:17:42:15:b9:35:5c:a2:
30:19:1c:4a:5d:d0:f9:7c:28:6f:4e:8d:30:3f:7b:59:48:fa:
ab:5f:76:0c:58:c3:d4:b8:0d:3a:55:b9:27:ef:c9:08:92:3f:
61:11:fa:e1:92:ba:13:c6:98:0b:13:b2:9c:01:7a:aa:41:ef:
f1:d5:23:2c:e3:a0:0e:99:66:f2:05:32:33:37:54:98:54:47:
04:1c:b2:0d:b0:b5:73:f7:ac:25:0b:2c:d9:ac:b9:c3:de:cc:
3c:2f:68:1b:45:3d:63:d7:57:4f:15:74:b6:58:4e:42:68:30:
ff:ce:04:cb:2e:dd:97:8d:30:27:44:11:fb:b3:e1:52:4c:63:
ea:f9:f6:4a:24:3e:20:13:b4:8d:29:cd:fb:21:a6:fe:ed:b1:
01:5e:a3:3d:1c:7c:58:ff:f7:e4:90:bb:0d:37:05:61:5a:c2:
94:da:44:f2:c2:4c:29:25:ac:73:69:da:f2:40:fb:26:7a:b8:
ed:72:29:37:26:c6:49:fc:bb:f9:8a:43:4e:6f:4b:59:36:ae:
12:d3:a9:9f:e5:21:d9:0a:58:76:7b:3f:91:a7:d3:f1:88:6d:
5d:ed:d2:b6:8e:61:90:e6:7e:19:c4:5f:a3:7f:a6:89:d0:29:
13:25:ad:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:58 2025 by rpki-client