Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
File: 0Q44sLejPvOhbhVDNAKYfW1njaE.mft (raw, json)
Hash identifier: Cf6nw5KAPLg7dyxfD8ezMupArCoSiBeOLpoaGajp/vA=
Subject key identifier: F8:82:6C:10:DA:AF:30:FD:AE:59:DF:1F:9D:27:A7:A0:66:77:23:32
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Certificate issuer: /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial: 0194BCE08F59F3F1BEAC673390DF54EE2C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
Manifest number: 10D5
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 0Q44sLejPvOhbhVDNAKYfW1njaE.crl (hash: jbBXfAjL7yv9FyYqnnmO7lmmFrdyrBdFABN1MT1I9HI=)
2: pTXcU1-027t2C2Vu9gFY335XMJc.roa (hash: VazQFR0+HiS2IaElmJ/i9QSFb0To3uFvpZ1ELlNt0rw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8f:59:f3:f1:be:ac:67:33:90:df:54:ee:2c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=f8826c10daaf30fdae59df1f9d27a7a066772332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:a3:e3:c0:d5:aa:90:f6:6c:c6:6c:56:10:
a7:23:f6:4a:c6:6c:ee:a6:37:69:65:96:e5:3f:c2:
f9:7e:c3:19:7f:22:f0:b2:8f:5e:c3:8e:d3:8c:cd:
35:91:58:f6:2e:4b:35:9e:34:56:81:bc:69:63:d5:
64:c3:14:b0:e1:17:ca:b5:cd:1b:bf:46:c0:f4:f5:
c3:a9:59:37:0d:c3:ac:79:78:d2:14:eb:f5:1e:f3:
7c:70:d9:ab:d4:1a:a0:75:86:94:99:e5:cf:23:a0:
74:7e:8c:2e:62:cb:6d:e6:79:62:55:08:94:ed:dd:
b0:fd:d9:0c:57:c7:9c:9a:3f:4c:65:2a:38:80:9f:
7d:ef:f1:49:62:ef:dd:a1:25:7a:b9:14:36:c7:53:
b0:47:26:09:46:f6:15:7a:29:48:1b:a7:93:be:f6:
04:04:d8:e6:6b:10:63:5b:5b:41:11:41:89:71:f8:
1b:b5:18:df:f7:9a:d3:22:e3:0d:f3:1c:57:20:bb:
48:fd:4b:fe:f7:b6:ad:61:a7:f1:6d:3f:42:73:95:
c3:bb:17:87:ef:a9:d3:9b:f7:2f:2f:d9:e5:c9:e7:
37:58:3d:6f:81:74:10:e5:cb:de:41:cb:ad:57:af:
23:5b:75:26:7c:8b:1e:78:60:47:c2:16:d8:9e:76:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:6C:10:DA:AF:30:FD:AE:59:DF:1F:9D:27:A7:A0:66:77:23:32
X509v3 Authority Key Identifier:
keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bf:03:71:c8:43:0a:b9:25:68:08:cf:6a:e4:98:8b:2d:71:
9c:25:35:30:e7:19:25:70:83:8a:6d:cd:68:ff:e0:21:19:75:
41:14:d2:b2:66:35:04:2d:7e:35:e6:dd:a7:5d:57:ce:9a:d8:
a4:46:51:c3:31:72:70:2b:77:3c:c6:37:da:aa:e8:b4:e5:97:
99:3d:cf:1c:9c:06:ed:34:7e:c3:84:39:ca:4b:eb:75:4d:c5:
99:c0:a1:93:70:23:2d:b0:3b:2a:31:74:fd:25:1c:c8:ef:d4:
22:b5:0e:0f:b7:42:9f:22:fc:15:ca:45:75:f6:b7:7d:82:62:
a8:fe:c8:b8:c5:2e:f2:f5:73:9f:bb:ec:d4:06:6e:5c:bd:bf:
5d:61:f6:f0:8c:17:f3:84:8f:1a:d1:65:e9:17:a1:1e:7b:bf:
9d:73:c1:25:5e:cf:7d:7d:a1:15:dc:bc:d3:ba:1f:41:27:c0:
82:a8:72:cb:42:39:be:7c:0a:ca:d3:1b:d8:23:21:2b:90:fb:
e5:e6:c7:18:0f:6f:a9:64:f4:1b:2a:ab:c9:65:d1:c8:49:20:
a6:69:e3:b0:d4:43:38:70:a6:3a:cb:d4:54:70:63:5c:85:0e:
10:d5:2f:fb:2c:99:91:65:ee:47:75:9f:4c:87:2c:43:59:6d:
a0:98:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:01 2025 by rpki-client