Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: nGN10McQjwLfbziQbVfa1UJ7GzMrjiaDtTFsSfNcdtU=
Subject key identifier: D6:32:6B:C8:36:D3:B3:E7:CE:33:C9:B0:43:1E:F0:6F:FF:00:F9:48
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 0194BCA96A185EE43F861D1AD339FE76048B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 0DF4
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: BPbGrmnPvvZWpQcHby2fZth3f53VLGcWCZbHkovwLTw=)
2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6a:18:5e:e4:3f:86:1d:1a:d3:39:fe:76:04:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=d6326bc836d3b3e7ce33c9b0431ef06fff00f948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:8c:1f:8d:5d:3f:02:3b:c0:83:ce:c2:c2:
c4:cc:b7:8c:bb:e6:f2:aa:1d:5a:b2:d5:86:15:4c:
c0:50:a1:23:f0:b1:79:0f:fd:4d:4c:61:19:4d:13:
4e:e9:d2:1f:71:32:cf:08:14:2d:36:ef:90:94:1c:
97:88:60:03:64:16:5e:7c:87:41:c5:4f:77:fd:83:
76:49:9f:e3:ed:70:5f:ca:d2:15:bd:29:3b:93:f3:
2e:21:fd:b8:54:dd:58:3d:0b:c8:e1:0d:5d:10:ab:
05:50:d0:cb:0d:17:ff:3f:c6:92:84:e1:bd:b6:03:
5e:46:d0:6b:1d:84:e1:15:00:02:a5:a9:df:9e:50:
0b:7f:59:f0:fe:c8:71:76:96:86:c8:e7:a2:56:00:
3a:2f:1f:de:8f:1a:1f:be:b1:9b:87:2f:ed:01:86:
ee:27:2e:ef:03:6b:0f:3e:4b:13:1d:52:81:50:3d:
0a:80:4b:c9:02:1f:5c:54:34:a7:41:b5:4d:ba:cf:
0b:41:11:d4:9d:96:76:76:29:6a:cf:d0:17:45:b6:
05:21:89:50:44:e3:8d:a5:58:46:d6:5c:7a:1b:85:
e6:e2:5f:d0:4b:a9:46:a4:31:72:5c:cf:11:10:de:
24:a8:67:df:72:e6:fc:c8:10:16:be:ff:4e:a2:5c:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:6B:C8:36:D3:B3:E7:CE:33:C9:B0:43:1E:F0:6F:FF:00:F9:48
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5b:e4:af:d0:27:3b:57:21:c8:8f:d4:c9:1b:33:45:c7:43:
49:f3:b5:a3:5d:30:a4:70:f0:6d:bc:32:1d:d4:a3:ee:76:84:
99:71:15:05:af:9b:44:99:92:75:8d:30:8d:26:19:76:be:f2:
9a:42:54:d8:4c:ea:ff:ce:70:bf:eb:95:99:34:67:ee:10:9c:
ca:05:ac:40:0d:b4:96:5f:6e:55:cc:c7:95:d0:2d:04:36:d9:
ac:de:ad:66:71:1d:ed:dd:50:1c:4c:c0:8f:c0:29:e4:92:9e:
0a:6d:33:60:41:79:18:13:a2:df:1d:09:4f:b6:3c:9a:3a:56:
0d:02:c2:be:e5:38:e1:3e:2d:1b:58:cc:78:ce:87:ee:9f:e8:
ef:c1:cb:21:75:93:7d:93:f9:47:21:16:57:39:d4:19:f9:87:
7e:dc:6f:71:4e:98:c1:c0:4e:22:3c:23:11:a3:d7:f3:c7:d1:
e9:96:25:bb:01:57:7a:5c:39:a8:f7:22:26:3f:e2:cf:f4:27:
ac:f1:41:2b:72:b4:9b:7a:34:28:37:55:0e:7b:94:a3:b9:ef:
3c:3a:11:b7:88:de:03:bc:38:b4:df:f5:e6:af:c1:d1:5d:df:
f3:5f:ae:d8:8b:39:5f:7c:29:53:30:5d:1e:cf:a2:38:50:ec:
3b:09:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:39 2025 by rpki-client