Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier: GBdtFLHY2hoVNhm7oF2NUQpUDA2wCytDLGYEuGsWiu4=
Subject key identifier: 71:B0:EA:17:F1:34:FD:9F:4E:02:A2:23:59:EC:14:55:0F:94:53:40
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 0194BD17D96D1A731F79A42F4D04695FE4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: vcu6YekJ+S7eg7bck9/PzuJMzty8NSbmb/yE9Nyn7po=)
2: OCcJDhB4OQ1X-MIeEHbwYqPSbys.roa (hash: bYb4Alf329H7/hgxf3+yXtwxwALKiQ1xJi7nvHZupTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d9:6d:1a:73:1f:79:a4:2f:4d:04:69:5f:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=71b0ea17f134fd9f4e02a22359ec14550f945340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:fd:03:a2:97:f8:58:13:fc:99:a1:bc:0c:
af:ea:a3:87:5f:c7:21:b9:f9:60:5e:fc:19:96:95:
0b:fa:f7:77:50:65:2a:8a:af:2d:d0:9b:75:af:18:
46:e7:b7:2f:e6:45:bd:96:85:c8:ec:2f:8b:5b:c2:
ca:f0:22:65:95:0a:a2:fb:e7:b1:3d:ee:0c:6d:02:
9d:a1:e9:8c:8f:ef:87:b8:94:da:35:a1:15:cc:79:
06:5a:08:16:ec:a0:44:a2:c0:59:bc:60:f5:90:93:
f0:b8:57:42:35:33:38:29:c0:04:c0:32:68:92:dc:
ea:9c:a3:05:dd:c1:b1:63:f6:b7:77:0f:ca:8d:44:
d8:22:72:d8:e9:6c:22:6e:18:cf:61:f5:c3:5f:c6:
59:91:18:a8:3d:77:c9:41:51:c9:34:23:8c:a0:6c:
6f:74:d4:11:ec:1c:e5:27:c8:35:53:5d:33:69:d2:
42:c2:47:1a:75:20:4f:e0:70:f8:c7:1f:b2:3f:dc:
24:06:a9:62:7f:69:96:91:06:3f:97:69:20:f5:c7:
a8:d5:04:0d:9b:63:4e:d0:10:d1:bd:ef:ae:20:83:
08:52:d1:ad:fc:d3:5f:01:6d:c6:a5:ce:85:4e:6c:
3e:5d:78:55:09:54:f3:90:9c:95:ba:76:12:42:cb:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B0:EA:17:F1:34:FD:9F:4E:02:A2:23:59:EC:14:55:0F:94:53:40
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:83:7c:e4:f7:48:81:27:6f:e6:12:56:d1:a2:3a:c9:b2:
6f:0e:d0:13:63:89:40:9e:29:2e:0f:ce:63:fd:fa:b2:c8:35:
2c:16:3c:17:c5:41:fb:18:1f:92:54:2c:e0:3c:2d:11:d2:8e:
a1:69:b6:2f:35:a8:96:c5:bd:b7:fc:0f:9d:7d:2e:28:2e:fb:
b4:3f:03:48:79:e6:c6:47:61:00:13:ca:72:cd:6e:ec:1d:2c:
8b:32:d7:cb:98:06:f5:d3:5a:5b:62:f7:fb:fd:9c:b3:bc:6f:
58:24:80:82:5c:aa:94:81:f6:1c:69:7c:55:c0:65:c1:79:9e:
37:4d:8c:54:1c:4a:11:4a:79:d4:4b:64:32:3b:dc:8e:a4:8c:
39:c2:0e:e0:c2:04:f4:01:c0:4e:35:e4:43:c1:e6:8f:76:9e:
d4:34:af:7a:40:77:88:02:c5:f2:f7:2e:ce:30:be:79:46:2f:
17:69:de:fa:43:46:e2:e7:89:50:7e:6a:0c:f4:da:49:4b:24:
58:eb:d2:34:ef:37:b3:e7:7d:b6:23:14:c7:19:01:ec:f8:e5:
45:c7:f6:55:de:bb:77:5e:c1:2e:0a:16:11:5a:df:e1:18:d3:
f7:7d:6d:1a:f4:6c:13:dc:1c:f5:64:97:1c:5c:f3:78:97:18:
31:a8:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:53 2025 by rpki-client