Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier: /vbwhJtjy7f+8NDZzS55wnKCpmA5nrkLJuKLS4TRII8=
Subject key identifier: F3:3C:0E:30:13:34:7D:87:D4:FD:36:A3:9A:D3:F6:AF:23:C9:CE:A6
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial: 0194BCE0A51197869D4BEC253939296038A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number: 0217
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: 4Y5M2liKEPDL+6FwEJCivnBl5U5z3DDYZqOdPQ2cz0k=)
2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a5:11:97:86:9d:4b:ec:25:39:39:29:60:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=f33c0e3013347d87d4fd36a39ad3f6af23c9cea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:0c:7f:a5:7f:dc:34:ce:8f:a6:56:ed:b1:
3d:6b:ec:3e:b2:b3:2a:8a:9c:e1:b9:14:d2:b6:48:
a6:16:0f:fc:54:da:c8:63:03:d5:b1:9d:41:60:0f:
ec:51:f4:bf:cb:83:bc:15:32:b2:3d:f0:ab:ac:bc:
ff:64:ce:76:d4:b9:44:57:ef:e5:3b:8d:59:67:f0:
dc:2e:9a:c1:a8:8a:9a:db:90:43:e1:e2:89:cc:3d:
09:5c:f9:e0:7e:c9:4a:08:1b:4d:9a:fd:68:01:af:
ba:64:13:03:2b:c1:e9:b2:5c:d4:8a:05:50:58:18:
34:ac:83:93:79:4f:4d:c3:a7:d5:c2:52:94:3a:a8:
98:c1:47:db:00:bd:5c:20:61:70:c2:dd:bb:01:84:
7f:12:33:fa:cb:7f:96:55:62:cc:cd:ac:02:b8:86:
a5:dc:a4:86:7a:cc:e8:59:11:fd:6a:12:1c:1d:71:
cb:99:26:9f:8a:7e:74:da:c6:50:cc:33:63:0d:37:
de:97:35:6d:15:69:44:ed:8f:53:9c:96:b2:79:6b:
1f:a4:e5:ff:75:61:7b:00:c7:5e:a9:c1:6b:73:3f:
f5:20:96:b0:cf:5e:42:9b:dc:5d:a3:eb:68:97:d2:
40:06:00:55:63:a2:ad:76:cb:06:c7:d1:af:55:65:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3C:0E:30:13:34:7D:87:D4:FD:36:A3:9A:D3:F6:AF:23:C9:CE:A6
X509v3 Authority Key Identifier:
keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d1:e0:9a:44:3b:b7:2c:5b:64:3d:92:72:5d:42:c2:30:5e:
3f:84:11:c3:66:fc:f2:23:e8:4b:53:a4:96:65:79:c7:67:b9:
dc:ae:f1:49:0a:89:c4:a1:0d:99:7a:52:a6:1e:6d:36:94:c4:
b3:94:39:95:5a:92:1c:ff:7d:7d:b3:ca:bf:dc:46:ac:6a:e9:
5f:7a:bb:f5:57:c8:f8:44:37:75:86:c6:24:6c:79:14:d5:b7:
df:e1:1a:46:ea:48:03:7b:f0:86:06:98:1a:3e:5b:0e:df:e2:
f1:73:91:cc:9d:89:8a:17:c6:58:c9:ca:ae:7e:b0:fd:37:0c:
12:cc:97:74:ea:48:3f:02:ac:6c:10:df:b6:ef:27:c4:9b:e0:
29:7b:45:8b:b1:bf:2e:4a:5f:08:f7:58:a2:0a:e2:13:dd:39:
86:a0:9b:f1:97:e5:59:e6:cf:00:7e:d2:eb:43:bc:8d:64:f0:
11:ce:8e:bf:6e:39:00:13:c1:70:56:6d:64:e0:56:f5:66:4f:
06:7d:ba:ac:21:77:80:d1:7b:44:d1:8b:f0:b1:2a:9b:28:dc:
40:72:20:03:f4:68:55:c2:83:41:2d:53:92:1f:30:76:73:f9:
14:72:62:e9:9c:06:a3:c7:96:36:a2:e8:24:55:89:d1:9e:a7:
21:75:41:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:50 2025 by rpki-client