Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File: rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier: 0kqAG9MFIvm53bpV6t5hJF3ayJ8o5fq/ArswdKABefY=
Subject key identifier: 04:C7:F2:09:48:08:F3:42:65:D4:5E:C0:21:0F:42:EA:0A:36:23:15
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer: /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial: 0194BCE06513F3445107A63D63F7BD7025AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number: 0AFC
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: uzjZK6ljnWNCORAubIT7JSkOj0LMA7AVG3DhmeDQ8tI=)
2: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (hash: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:65:13:f3:44:51:07:a6:3d:63:f7:bd:70:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=04c7f2094808f34265d45ec0210f42ea0a362315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b4:6d:3b:80:61:20:c0:a7:2a:c4:37:43:ff:
5c:aa:79:31:e5:e4:05:ca:d1:df:09:21:82:00:20:
45:6a:fc:4d:cc:76:39:bb:1c:a2:4f:1a:95:a0:3f:
39:e3:2c:d4:43:07:b2:8b:8c:6f:49:a0:0b:d9:7d:
c9:17:95:42:01:66:66:ab:58:1d:7e:9f:a1:38:86:
bf:b9:e9:2f:26:5a:8f:79:5e:22:fc:25:04:2d:de:
c8:78:e7:b5:b1:c4:1a:3f:d3:29:35:f4:60:5b:09:
cd:eb:48:f4:cb:8c:c9:27:a3:02:0a:b7:f2:05:32:
d6:df:15:5e:11:4b:44:3e:2f:e3:0d:02:17:dd:6c:
ff:ad:42:39:2a:22:e9:e7:cd:29:92:f1:d5:a0:8d:
66:ca:d0:39:aa:0a:f6:d7:b0:76:43:64:9a:a6:bf:
ab:38:b1:e1:f8:ed:61:8d:04:ef:17:d1:0a:89:b1:
fb:a7:7a:93:a1:0e:f8:5d:34:bc:9c:1f:f1:d6:92:
9b:54:fb:dc:a9:0d:b5:50:a5:3a:0b:6f:cc:2f:71:
27:23:1f:75:72:5e:5c:59:06:e7:ef:9a:26:7c:a0:
41:f4:93:1b:31:90:b9:71:25:e3:7a:73:5c:8b:e3:
62:45:58:15:b6:ea:d3:08:59:01:f0:8d:42:a3:94:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:F2:09:48:08:F3:42:65:D4:5E:C0:21:0F:42:EA:0A:36:23:15
X509v3 Authority Key Identifier:
keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b1:ee:59:90:9a:1a:58:c2:f3:b0:a6:f8:5d:9e:4f:9a:fc:
ec:fe:35:fe:fb:e8:94:ae:4d:7a:2e:24:ba:95:50:94:ee:f7:
d6:04:03:10:63:04:29:9a:d0:fd:91:d3:cd:19:76:5c:38:9b:
71:ef:4c:56:69:7d:91:04:73:55:19:d3:b1:f7:60:37:6b:73:
ab:e4:3c:c8:55:71:d4:a8:8f:b5:37:30:28:cb:ea:4e:d0:0e:
fc:bd:12:77:e1:7c:d2:01:63:1a:72:90:c4:ee:aa:29:a7:96:
14:60:1b:70:cc:e3:e5:d7:85:d8:c5:50:dc:4b:18:32:b5:d7:
f4:dd:c6:85:f7:20:f2:6a:98:98:f8:09:78:e4:65:8a:8d:12:
aa:28:56:1b:35:ac:22:45:b5:75:46:4f:bc:a8:6c:52:d6:ce:
df:b6:cd:50:2d:b9:38:98:54:02:e3:7f:79:2a:5d:25:11:fe:
8a:53:89:8b:4c:2a:9b:9b:fd:31:4a:f6:0c:eb:f1:6c:4d:13:
8f:6a:0c:9e:f0:ee:92:a9:c5:20:9c:d9:64:e7:07:f1:bd:0e:
c8:5d:45:7e:f7:3e:5c:00:27:06:e5:53:ea:44:7d:bb:bd:89:
c8:c8:97:ba:5b:a6:9a:7d:60:30:ad:33:89:0e:39:b4:66:5a:
e3:0c:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:55 2025 by rpki-client