Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: BcETbpeyvuXzL7M3mf078g4Tz8miXtMgCHDkVjA7b3c=
Subject key identifier: 14:76:E0:05:FD:21:BE:F6:B7:26:B7:3B:77:5F:0A:5B:5C:7A:88:40
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 0194BC3BE336F46FE036F257CE68DB46D560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0B78
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: JJV2bvnJGEngJU/iTD1KYt+qsXu49xeKYGpTXt79Tf8=)
2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e3:36:f4:6f:e0:36:f2:57:ce:68:db:46:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=1476e005fd21bef6b726b73b775f0a5b5c7a8840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:e0:ac:87:22:91:3f:64:2c:10:bb:c1:12:
99:b8:67:fc:4f:e2:c7:51:c6:7b:77:fc:09:a1:21:
24:eb:f2:ab:51:c3:4d:6d:3f:3f:1a:3a:61:6b:91:
b5:a8:2c:6e:2b:aa:d0:55:4f:5e:c5:97:23:d4:7b:
67:66:21:e5:87:c6:9f:04:18:9a:ec:a7:26:36:3d:
f2:c6:4b:3e:a6:41:2a:66:f2:cc:02:33:01:75:13:
fd:57:89:9b:9c:40:52:b6:28:1f:7e:91:53:0c:5f:
86:d6:40:f8:f9:53:cb:34:d9:8e:f8:90:6c:2a:63:
44:03:c5:aa:4a:76:ec:ee:c1:cb:82:c3:03:8a:a7:
67:0b:30:73:82:24:fd:9d:99:97:f2:ea:38:fd:d7:
d3:a8:d9:d7:29:4d:95:7a:53:df:f5:da:10:3b:29:
94:51:22:7b:c2:48:82:98:9b:94:7a:c6:cb:79:69:
8d:b6:aa:f0:8c:6b:89:e8:3d:af:a8:1d:c3:05:e3:
14:98:2a:1d:74:50:fa:2f:16:a5:9b:9c:4a:06:6e:
7b:22:7d:fb:f0:9c:16:35:4c:59:11:11:c2:28:09:
72:e9:4a:5f:06:65:eb:68:e8:12:af:51:c5:71:32:
de:e9:12:3c:be:5b:b6:40:04:3a:92:e0:c4:45:cd:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:E0:05:FD:21:BE:F6:B7:26:B7:3B:77:5F:0A:5B:5C:7A:88:40
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f9:1e:f6:e9:c2:c2:b1:5d:5f:53:db:a0:e3:11:67:23:ee:
4a:d9:32:c1:d9:64:cd:da:36:a1:b8:3a:bd:65:25:21:85:49:
fd:66:36:9a:33:26:01:67:87:d6:5a:f3:5a:6f:8f:37:29:fa:
7b:38:89:5f:0b:30:0f:2b:db:80:bf:14:76:a6:50:13:a9:9d:
23:1a:82:ca:33:93:2d:83:4d:c8:00:6e:ea:b0:3c:6b:67:fd:
74:51:f7:ba:9c:b7:ec:0b:90:52:fd:03:04:4e:e7:cb:1b:bf:
63:b2:11:61:84:f8:44:94:65:86:13:98:79:c3:cf:fa:2c:bd:
9c:05:75:78:24:94:52:c6:51:72:ce:3e:fe:16:be:f5:28:f0:
83:58:d5:07:96:2f:48:58:31:21:3c:d9:e8:f5:3d:03:7e:11:
de:bd:68:8b:ab:4c:27:ed:33:e7:70:dc:05:06:ca:ab:43:5b:
74:8b:6a:b4:a3:62:4a:31:aa:76:c7:93:ed:b8:e0:cb:bd:f6:
e7:5c:4f:fd:77:52:2d:cb:a6:2b:c8:18:30:97:c9:7a:d2:5a:
14:64:90:d5:b0:c3:33:5e:5d:8f:66:a3:2e:4c:db:4e:30:de:
ac:27:ed:36:42:b9:ee:e9:61:17:f2:e7:42:b9:ec:02:c7:9e:
51:73:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:40 2025 by rpki-client