Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: mq+7DdFbd6x2fWxOC7yn6rlAquI/aQSDODsEQEr6DTI=
Subject key identifier: 23:4E:56:2E:ED:1C:7C:CD:6F:E2:C1:9C:7D:7B:9E:B7:6A:A3:15:62
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 0194BC050F9096B87E366FFFB7D9CC4DF5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 0D6B
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: QLLf2IBtwLuSjtwwiJbXmu7RrOBdcqyWvKodRiiAarE=)
2: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (hash: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0f:90:96:b8:7e:36:6f:ff:b7:d9:cc:4d:f5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=234e562eed1c7ccd6fe2c19c7d7b9eb76aa31562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:29:17:3e:8c:f0:e4:c3:7f:a9:58:65:e8:
0c:44:21:02:66:97:60:2b:bd:30:29:96:47:ec:11:
9e:de:8c:60:9b:f8:ab:35:fb:ae:b4:e9:11:c2:c6:
4d:ac:fc:75:55:13:1b:ad:a0:07:9c:26:51:3b:09:
ef:64:2f:7d:f3:aa:2a:83:e4:e6:62:c9:8f:40:26:
75:76:62:ef:c7:18:22:62:b9:d5:b7:af:e7:b2:ba:
89:ab:2f:14:06:d1:91:2c:ba:6f:37:46:be:ea:75:
30:3e:5d:dc:b9:8d:db:aa:42:75:4a:b4:94:f0:2a:
e7:b3:98:6e:6a:99:a3:53:69:02:da:65:66:95:ff:
98:36:7a:da:cc:79:e9:8c:7f:96:b4:a7:47:00:a3:
65:71:49:2a:5a:ca:dc:84:af:96:e8:22:f2:f5:24:
b2:cf:20:c9:1a:f4:c9:44:4d:4e:8f:cb:1c:78:ec:
cc:fa:9a:59:d4:e4:4e:f4:0a:d0:0b:a6:74:7a:cf:
4c:bb:33:9b:93:dd:5f:31:37:0a:df:55:c6:53:94:
49:4a:70:42:45:1f:63:b9:22:2e:1f:b9:e2:b7:db:
2a:b5:2c:c2:fe:cf:ca:01:66:ed:9d:a1:ac:87:48:
27:04:d3:fd:59:6c:4b:94:d1:f1:af:8c:7b:f2:52:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4E:56:2E:ED:1C:7C:CD:6F:E2:C1:9C:7D:7B:9E:B7:6A:A3:15:62
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7c:bb:25:60:d4:63:ec:7c:55:f1:e8:e5:80:70:dc:76:c3:
39:39:47:6d:42:90:ea:3e:73:05:a6:43:d5:54:9b:61:5f:b5:
44:ba:52:8a:94:40:67:9e:a7:6a:f2:06:3d:9d:ef:5d:1c:bf:
da:22:9e:de:85:84:18:29:ee:c2:eb:72:96:43:1b:56:f7:91:
6d:85:00:fb:00:e2:92:fa:3a:83:1b:a3:f6:42:44:68:06:d6:
e1:37:9a:b4:ac:93:96:f1:ec:c9:76:a2:ac:b3:b4:91:f1:bf:
24:fb:9f:e0:15:0f:57:37:ac:10:a3:ad:cf:1e:d3:17:cc:6b:
7b:84:59:36:7f:24:25:88:c7:03:c3:5f:76:83:61:1a:cd:aa:
40:94:72:dc:a5:c1:eb:11:bc:4d:be:be:03:63:47:02:87:c9:
6b:52:26:80:f0:b3:32:f9:ee:f0:5d:c1:97:52:d2:03:25:6c:
cf:a8:83:0b:5b:d3:9a:a4:53:2c:db:e1:70:a9:ed:e9:cd:ae:
7a:46:03:1d:01:67:22:71:dc:18:4c:8c:d3:1d:6a:ba:a6:92:
e6:c1:3f:5f:53:f7:7e:ab:cc:0c:82:80:e2:34:5e:e5:ec:e3:
a8:e2:94:a1:2c:cf:39:85:0e:b9:be:d4:fa:f8:1f:bd:27:65:
16:08:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:03 2025 by rpki-client