Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: RwHCbRT+DkO61d8xMdloTmXFPeRT9u3DAQR9mB1wxnY=
Subject key identifier: 3A:49:B5:21:75:49:52:7B:4D:08:D6:F6:37:0A:3E:A2:27:B2:00:71
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 0194BBCE59F0FCB534055490CD608CB52E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0897
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: BbQcUVYojCmTwxeXx3lSzUhkQBjUeqaQI9+EXrhenHg=)
2: Z6jijp-NqGecwIu65j-qEMAm0nw.roa (hash: 19TQbomnm0YTugnf3c9Z0fKykpuT1EtKWHuZ0GsZG+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:f0:fc:b5:34:05:54:90:cd:60:8c:b5:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=3a49b5217549527b4d08d6f6370a3ea227b20071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:28:e1:9f:9b:fc:13:36:9d:09:d7:1b:fe:
d0:44:9a:dc:59:b6:6d:24:fa:14:d7:ff:be:76:e3:
ca:8a:c1:06:47:39:24:ae:05:9b:55:8c:1d:e7:c2:
be:ae:20:30:4d:cc:fc:5f:62:18:df:0a:1e:55:a4:
54:a3:03:98:6f:1e:b6:1c:89:43:31:bb:1c:db:75:
0b:3b:56:61:08:a9:05:c7:c2:2f:c9:fe:a4:2b:67:
fd:80:8f:c5:73:18:85:96:36:d7:a4:5a:0d:93:5e:
a8:02:c2:6d:c5:5c:be:a1:af:b4:60:2e:7c:62:ec:
85:f0:88:aa:92:a1:1d:54:25:58:92:e1:4c:a6:3f:
ef:ac:c7:22:ec:7d:1e:e8:ea:57:1c:52:7e:f6:d8:
9f:75:c2:7a:f3:52:f4:ca:54:70:3b:2c:be:e6:73:
38:4a:f3:f2:59:72:43:ee:6f:45:48:82:7b:f8:b6:
5a:a7:fd:35:8e:7a:23:8a:09:f3:c1:91:99:e9:f3:
27:03:3c:9c:52:fa:de:eb:60:bc:6b:e5:fa:54:80:
ae:91:8e:a8:fd:f1:49:d1:16:94:ea:87:b8:67:7d:
82:00:e5:59:13:46:8a:f8:82:41:db:75:b7:35:2e:
83:10:3e:60:0e:25:0b:e7:22:3e:e3:26:8a:0a:49:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:49:B5:21:75:49:52:7B:4D:08:D6:F6:37:0A:3E:A2:27:B2:00:71
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:74:6b:1c:43:58:20:fb:f6:e5:60:38:f2:c9:a1:62:0f:7a:
fb:30:79:e9:fd:06:a3:07:fe:40:90:38:57:20:16:a0:58:94:
76:a6:18:f8:2d:01:72:1f:ed:75:3f:1b:36:83:4a:09:39:60:
0e:e2:c4:46:c2:cb:ef:82:f4:c1:f5:f9:19:11:62:8b:aa:fe:
ff:7e:97:c6:df:48:c9:67:06:e3:93:62:7a:99:ac:33:19:d3:
ba:3b:d4:e4:fb:d9:77:5c:37:f8:8a:6a:93:73:65:4c:1d:27:
d5:fd:db:4b:fc:65:12:64:0c:99:4a:bc:84:f5:3f:ce:31:65:
0c:bc:70:3a:bb:9a:97:f0:c3:b7:f7:82:d0:f8:ea:a5:45:72:
97:49:61:7d:f3:f6:fd:56:5c:b2:5c:a9:fd:9b:cd:17:23:22:
50:4e:2d:7f:6f:b9:9b:13:3c:4b:52:75:0f:ab:fd:82:79:78:
c7:ae:df:cf:5b:68:7a:83:47:6d:c7:be:a0:27:87:13:d2:95:
1e:ab:1b:50:f7:65:e1:47:4a:51:7f:8a:b3:67:fe:c1:6e:3b:
3d:ff:01:74:6d:e6:cb:01:7d:1f:a3:08:d8:65:23:d9:2d:c8:
af:01:01:d9:4c:b9:d6:da:34:9d:17:46:6b:35:89:ed:ee:3d:
d9:fd:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:16 2025 by rpki-client