Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: nrMhNMGkv2LFeiDVIkmQlc/43WL+m8FHgBWaJH9/AN8=
Subject key identifier: 7A:14:5D:30:AE:30:B7:2B:B1:7E:D7:AB:B4:45:DD:28:F9:D5:DF:40
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 0194BCA216C5A985008BA4BA4A7DEB1D355E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 03DB
Signing time: Fri 31 Jan 2025 13:52:06 +0000
Manifest this update: Fri 31 Jan 2025 13:52:06 +0000
Manifest next update: Sat 01 Feb 2025 13:52:06 +0000
Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: ZeaeXIdjdamWArMvoOT2HOHWJwXbOBgA5fgkoRPu9Pc=)
2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a2:16:c5:a9:85:00:8b:a4:ba:4a:7d:eb:1d:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Jan 31 13:52:06 2025 GMT
Not After : Feb 1 13:52:06 2025 GMT
Subject: CN=7a145d30ae30b72bb17ed7abb445dd28f9d5df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:a9:f1:af:d4:c9:0c:08:0a:b5:e4:f7:a6:
1d:7b:5b:f1:98:87:a2:98:a4:bc:4c:d9:6f:d3:d7:
df:c4:7a:ca:52:f3:29:d5:2c:3d:86:03:3c:d2:43:
9b:2a:5d:44:1a:64:ac:70:c8:ef:d0:d5:03:e9:5c:
2e:a7:31:6d:34:9d:ad:65:62:b5:02:41:aa:93:23:
d0:66:4b:ae:17:f0:a8:c6:c6:52:fe:25:f9:60:c3:
5d:f3:ed:29:6e:35:bb:bb:44:58:ad:b6:80:bd:8c:
a5:f2:ea:29:26:2b:1e:1c:2c:be:b1:71:1e:a7:20:
6c:af:8b:63:2d:b0:2a:6b:75:aa:3b:9c:88:71:c6:
8c:00:63:cc:cd:13:1d:b1:a3:ea:e0:d4:b0:d4:f3:
26:4d:e4:d4:7a:e4:f9:c5:7f:ec:7e:d1:f8:06:77:
99:26:73:ec:02:b8:7b:4c:06:30:bb:ff:5b:16:0a:
eb:9b:82:d6:dd:bd:2d:9d:4d:06:39:2d:e2:8b:d1:
a8:ba:83:9a:a3:c8:66:80:df:fc:fd:e0:1c:b9:c5:
24:89:45:ff:8e:12:33:1a:21:4a:01:e7:a6:18:be:
0c:f5:a3:c6:9d:6a:37:33:13:4a:41:b4:7b:e5:9f:
c7:8d:3e:3b:d6:8d:57:69:82:b8:54:76:8f:88:34:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:5D:30:AE:30:B7:2B:B1:7E:D7:AB:B4:45:DD:28:F9:D5:DF:40
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b2:7f:b0:3c:c1:06:15:0c:b4:48:ea:1b:0e:f7:45:46:6f:
9a:e6:12:f7:b8:8f:5e:43:f6:3b:5e:0a:0a:76:be:17:e9:62:
7b:f0:24:aa:3e:1b:75:92:83:3f:7e:d9:93:99:4f:c2:e6:d3:
f2:ef:fb:3d:d5:7f:6d:9e:1b:54:76:97:39:c8:9c:5a:f1:3e:
09:74:13:32:6a:b3:6c:e3:0a:9c:5f:f0:69:f9:0f:d8:9f:19:
9d:44:67:39:72:0e:04:90:99:fa:95:cd:35:bc:f7:2b:a9:7c:
e5:d9:c1:a3:6b:f9:f3:4d:6c:28:69:c1:12:c0:b2:2f:e5:c6:
de:10:d3:74:e9:a0:b8:db:fc:c2:07:7c:7e:9c:ad:46:76:5e:
dd:31:90:1a:8d:2b:fe:29:72:53:2a:e7:1d:30:18:2f:20:5a:
d2:97:6b:55:e5:86:f6:75:a7:d9:fa:bf:1e:4e:15:00:ce:7f:
00:3b:49:51:f8:86:09:bb:1a:5d:17:86:ec:c7:6f:71:54:a1:
ad:f7:ff:8e:98:0c:88:d3:89:75:30:5d:93:97:3d:8f:e8:f0:
1c:c7:f5:94:77:af:8a:3e:cf:6b:50:20:01:0c:84:09:01:74:
c2:f6:79:e8:64:38:07:aa:9f:cc:a5:c3:f7:a6:6d:b6:93:39:
ba:1c:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:19 2025 by rpki-client