Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier: Bun2N5ydi2Rz8aGm/S8ejcjX1eGwhQlUNCCHjVGDQuk=
Subject key identifier: C4:4E:5A:6E:3C:97:02:D4:9B:BC:F7:02:00:08:23:75:DD:55:F4:FC
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer: /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial: 0194BC3C55ADE93FE26F89DB5F4830175904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number: 12DE
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: iJnB9CP/gHB9hYXS4bClYrAz+N9Nm91eXrOfEqswgyY=)
2: 24F3NWEaUDo-ywzWotAmlAOE0aY.roa (hash: ERf1+Eo8kcPOcjF9iXtlxaEqblrqJRaC4jpu9Wj4DSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:ad:e9:3f:e2:6f:89:db:5f:48:30:17:59:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=c44e5a6e3c9702d49bbcf70200082375dd55f4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:f7:3c:31:54:3f:89:54:37:16:f3:2a:6d:
4b:71:8f:ba:c8:ab:7b:4d:c4:a6:3e:50:9f:c2:2d:
c5:c2:aa:c2:6b:79:3b:47:8e:ca:71:d5:cc:6c:4f:
cc:56:3b:0e:18:b3:dd:c1:53:df:ca:42:b2:1a:21:
25:32:0c:39:08:6f:ff:8b:bd:03:4d:c6:89:74:93:
c7:53:12:09:4a:37:0e:fc:c4:23:75:3f:f6:48:2a:
36:0d:5b:d4:6f:f1:01:db:22:61:1f:70:78:d3:ca:
a5:59:b3:e7:5b:f9:90:b7:b4:4a:b0:e7:1c:a7:75:
cc:d1:ec:0a:11:9c:66:31:04:f3:77:ae:c6:e4:0c:
24:0c:f6:93:1f:49:b1:24:b7:72:8c:95:7d:e9:66:
63:55:74:74:1c:39:80:40:6d:c9:f8:03:db:99:da:
2b:8e:f9:9b:bd:2a:f1:4b:c7:b1:7d:34:b5:0e:c1:
e7:d3:e0:f9:07:04:5e:15:f9:60:ce:45:4c:5c:62:
cd:ca:55:1a:3d:a3:59:6a:04:0a:ec:16:46:6c:1f:
18:92:46:2b:da:68:82:20:61:a4:04:ad:60:3b:07:
b2:71:e5:c7:5b:36:03:c4:dc:30:5c:3f:73:e3:ee:
03:8e:5e:f0:66:aa:ef:48:08:82:3b:3f:26:9e:c8:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:5A:6E:3C:97:02:D4:9B:BC:F7:02:00:08:23:75:DD:55:F4:FC
X509v3 Authority Key Identifier:
keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:53:53:90:20:92:00:29:51:0b:61:cb:51:c4:06:48:3d:17:
0b:e7:82:a4:25:a2:b5:ac:97:34:57:67:df:30:6d:55:07:7d:
84:5e:4e:05:a5:35:1c:38:e7:94:de:d7:fb:88:bb:63:3a:cf:
7d:95:bb:0c:13:e8:79:68:9d:17:40:17:86:dc:52:92:d4:56:
fc:c6:6f:d0:cf:0c:21:57:ef:fe:1d:02:8c:49:2d:9b:99:de:
f7:29:f2:9b:ad:2b:55:30:04:57:cc:33:7e:04:06:72:11:31:
a0:4e:a6:c2:47:3f:dc:d6:81:7a:15:79:d3:dc:47:1d:f9:7c:
58:ef:08:76:ac:5b:80:be:f5:47:da:ea:b9:b7:59:88:be:4a:
93:23:2b:c3:68:e9:c4:6a:cf:a9:e4:e1:a8:62:15:fc:55:43:
98:28:53:9d:85:21:3c:fe:b0:25:45:fb:16:d7:16:a8:a7:c8:
7e:b3:11:2b:23:f2:14:bc:73:26:95:cc:45:c7:73:ba:2f:69:
4c:e9:5c:70:12:bb:13:9d:d3:c9:e9:ff:3f:86:1a:14:77:19:
20:6b:13:31:51:c2:ee:6f:46:f3:28:26:e4:bf:2f:cf:fc:a6:
24:b2:27:99:7c:6f:0e:05:42:b6:36:60:f0:71:66:38:bd:1a:
d6:cf:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:05 2025 by rpki-client