Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File: 0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier: hv3cikgMqgjd1S2BSdHn6RZuaX+8e8+LwxrhjOoe728=
Subject key identifier: 26:C2:CC:6B:15:03:27:CA:89:E2:7C:3F:CA:9F:2A:C8:B5:C2:38:FB
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial: 0194BCE0C4C3162B3F1A9ED13E3B55E8F46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number: 059A
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: JBa/MfcZzCyS/coXBbPUhU6s+5XENTcX/zt3/70ELl8=)
2: Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (hash: YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=)
3: U5cqWkNYnX_IKXRLiqWhPWLnj30.roa (hash: rOJ0i9MLtk8hwnYB2wL88M/HGe+Y/PZ5cxU/VSesy7g=)
4: qiRRCoLxoqoPkxabLfDyCC_ddgo.roa (hash: PHrnZaBjRsNXJj/q3wfcCyeQ30fafauER7XzOTQ6umk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c4:c3:16:2b:3f:1a:9e:d1:3e:3b:55:e8:f4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=26c2cc6b150327ca89e27c3fca9f2ac8b5c238fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:f1:65:8e:ab:db:39:7c:99:92:7c:12:d2:
e4:ce:c4:ec:9a:c4:cc:d2:b3:59:54:25:5f:33:e7:
8c:cb:df:05:cc:aa:ec:ec:23:fc:a3:07:af:02:5c:
df:9d:6d:89:2a:be:e7:94:de:ff:a4:d3:b7:47:06:
26:6d:d0:74:bd:98:28:b9:d3:f0:2f:b3:49:84:ad:
c2:cf:3f:92:6c:32:35:37:9c:c9:0c:2b:f8:65:d4:
3d:7b:7c:ed:6b:97:66:14:77:b1:51:7a:b3:87:43:
a4:c2:ba:93:50:5c:b8:32:2e:54:60:9b:c6:d9:4d:
3f:30:21:48:00:5c:04:75:be:aa:dd:f0:e8:55:76:
8f:9c:af:8d:d0:d9:a8:ef:a4:64:70:21:ba:30:fe:
25:6b:08:3c:86:fe:8e:5b:84:db:0f:da:52:79:bd:
9b:80:b9:88:95:91:c0:af:b6:1e:4b:82:40:b5:31:
57:c3:8c:98:e6:15:fb:bf:29:e6:ad:94:96:3e:27:
29:a5:5d:a2:af:55:6a:f1:f5:9a:34:07:11:48:aa:
c6:1c:83:3b:fe:67:b6:ee:ad:e7:ac:6f:71:de:85:
af:74:da:57:8a:8c:01:d0:06:cd:b2:83:84:5d:65:
d0:04:c6:4b:7e:c1:b4:18:d5:f8:9e:59:2f:14:94:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:CC:6B:15:03:27:CA:89:E2:7C:3F:CA:9F:2A:C8:B5:C2:38:FB
X509v3 Authority Key Identifier:
keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:f8:21:80:e3:77:6e:71:1a:b2:ba:d2:68:e2:06:c6:c9:
fc:07:75:44:ae:0e:b1:7f:16:12:54:7b:fa:6b:a8:64:9b:1f:
7a:4d:55:6b:01:14:43:85:a4:3a:48:44:60:5b:09:62:bb:56:
f7:36:e2:7f:38:e8:cb:e9:2b:e1:2a:48:e7:8d:bc:a6:16:47:
dd:81:ed:26:9d:a8:d3:44:72:73:70:25:b9:d7:44:c6:6e:50:
8c:c5:dc:1a:16:3a:ee:26:0f:1e:36:11:29:41:16:af:ad:2d:
57:b4:5e:43:6d:6d:83:90:76:09:4d:4c:c0:02:44:81:44:8c:
af:1b:69:f5:a3:3b:d0:5e:af:c2:5a:81:18:47:69:65:5c:97:
82:f4:95:ae:28:a1:ae:2d:53:ef:29:13:ff:72:2a:9c:d9:54:
2b:76:7e:48:2b:6b:96:a7:a9:17:4b:c8:48:11:f7:bd:14:3e:
0f:1d:6f:d1:d7:64:82:aa:0b:52:0b:6d:b0:4f:bb:52:b4:7b:
d2:41:08:63:43:2e:f3:cb:7a:a4:7c:d7:dc:e7:5e:50:45:83:
c1:76:48:4e:e8:c8:a2:32:88:2c:7b:e5:41:5a:53:37:ae:d9:
bd:f5:94:71:51:db:5c:dd:6e:cd:69:64:48:3a:af:f3:0b:66:
16:6e:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:46 2025 by rpki-client