Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File: 0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier: nJdD130eyoha1uB61Nzb+PtayyK+lr46Ue2r3Pz4TJw=
Subject key identifier: 58:C7:FD:83:F0:7C:26:0F:88:4F:C8:66:64:F8:FE:1D:A4:39:10:C0
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer: /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial: 0194BC73172B428B2229798132D37590497C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number: 055B
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: QVskfY6CXZ+zcgBfKSdVswJYaHTCF0brhdbQWghZ/Uk=)
2: _tDyQl_V4oGcaoTQCOv_1tAVV5w.roa (hash: NfAtzjH7XpKV/Nx/c7iUxK0arZdAcmbSlWPMtQY58/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:17:2b:42:8b:22:29:79:81:32:d3:75:90:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=58c7fd83f07c260f884fc86664f8fe1da43910c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:1f:38:ad:95:36:ea:29:c9:39:c9:5b:02:
84:5b:98:c6:1e:fe:7d:e3:c1:12:f1:67:78:59:81:
d0:0e:ab:ac:21:2b:3a:93:a6:e4:75:90:64:32:5a:
5f:c3:ef:bb:07:5a:79:31:d6:0b:e8:5c:99:20:c3:
02:3d:3d:7b:0b:fd:af:48:c3:52:b1:8d:96:05:8f:
58:30:29:3c:9d:4a:5e:3d:0f:b1:56:47:bc:b7:0c:
d7:e6:4e:ee:c6:d4:18:59:0c:ce:9b:ea:db:3e:d8:
c1:7d:bf:d3:37:70:7e:08:80:ab:d5:bf:27:a0:86:
e9:c3:ec:41:99:f9:cf:88:23:2d:15:69:79:b1:13:
6d:4a:30:60:61:f1:69:32:f0:64:53:0f:4a:2d:95:
d9:f8:df:06:13:f0:1d:4d:1c:0f:d4:f1:e6:89:53:
7b:5b:0e:aa:3d:c7:2d:f4:c7:47:9f:5b:fc:69:db:
e8:0c:a5:e1:06:ff:24:dc:6e:ca:34:86:38:c1:90:
45:b0:c9:59:19:14:c6:9e:45:fc:1e:ce:7b:1e:c3:
cf:2c:82:dc:d7:8b:15:62:2b:44:dc:59:61:d4:d9:
51:07:c6:0c:63:db:c7:67:ac:2c:9c:92:27:d4:f3:
9f:70:12:1b:05:96:d7:91:c2:da:8c:8d:0f:0a:87:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:FD:83:F0:7C:26:0F:88:4F:C8:66:64:F8:FE:1D:A4:39:10:C0
X509v3 Authority Key Identifier:
keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0b:b6:8b:e2:c7:99:47:f6:a0:4e:9e:02:35:25:bd:db:f4:
b0:77:33:e5:c5:6b:20:9e:84:24:d3:68:6a:35:cc:b3:59:b9:
40:f4:89:7b:16:59:d0:f9:30:93:34:f6:0b:7e:4e:5a:66:f1:
c7:54:ed:d8:6d:1e:84:b9:c3:f2:06:0f:3d:78:bd:fe:a8:08:
d1:73:bb:52:f4:7b:8e:40:bb:01:9e:99:a8:55:5c:e6:e6:da:
85:bd:bc:19:7e:8c:7f:26:52:72:bb:b2:40:91:3e:1e:f0:72:
de:bb:cb:06:75:c4:1c:81:6f:f5:b7:e4:88:bd:74:1f:25:e4:
00:91:93:74:be:6d:46:79:64:61:d6:d6:a2:ff:8c:a4:43:e7:
f2:8b:33:9b:23:95:f6:88:be:7f:ab:ad:68:07:92:47:40:dc:
4d:49:0c:f4:a9:6a:fa:60:dd:b9:14:44:9f:3a:1a:19:16:30:
50:e4:af:ee:e4:6e:ff:a2:36:d2:e4:94:55:19:1e:29:88:f9:
7d:d8:fe:83:f7:e6:cf:02:b2:8e:c3:93:24:0f:b3:d1:a2:20:
30:94:d6:a5:be:80:e4:5d:cf:3c:40:66:0b:53:e5:d5:96:92:
1f:54:3c:44:29:02:51:bd:ab:6f:52:37:9d:5a:af:91:1b:bc:
62:d6:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:07 2025 by rpki-client