Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier: Omq4891IX0XLhAp/4sKt/B8fMY8URC2UWCrDoeCuNiY=
Subject key identifier: 5B:E9:E8:17:89:10:D8:50:EB:1F:C5:6C:04:92:46:68:5C:02:C2:05
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 0194BD4E5A672CEDCED6C5C268DBAD3B39A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number: 0AA4
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: kJZOjTZE4lMzrkf4ksixQpQQPLLlXpGTc+KPHgYktRA=)
2: TLgddA3CgmtAKo-fV94OuzSavi4.roa (hash: tQo/EK/pm7RsFTI12Ej+RxeB7S+rUphRTa4aWGCPu7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:67:2c:ed:ce:d6:c5:c2:68:db:ad:3b:39:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=5be9e8178910d850eb1fc56c049246685c02c205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:17:2a:b7:69:9c:1a:2c:31:44:a4:fd:24:
cf:48:24:a1:ef:fe:2a:9b:9b:00:65:31:20:e0:1a:
0e:ed:7b:0b:ce:e3:c4:96:49:54:47:e2:b9:d9:e4:
9e:2c:cc:4d:e0:c0:9f:88:e6:d7:d9:dd:66:49:2c:
10:7e:94:68:91:5f:4e:a3:ae:ea:93:84:f3:33:ce:
87:44:6a:c8:d4:94:c1:7b:21:ae:c8:e8:3d:b8:53:
b8:ad:39:6f:ec:a2:f7:0d:fd:3d:9d:6f:a2:be:5e:
c8:a1:eb:c8:a8:30:11:8a:f9:01:c2:5b:2f:18:a7:
bc:5a:13:53:ac:11:86:e5:4b:87:3a:59:c9:9e:f6:
dd:a7:af:50:49:e3:51:2c:26:67:7d:34:f8:fc:4c:
a0:46:cb:fb:ef:8e:7c:2f:0c:40:52:0d:3c:0c:d1:
25:1a:29:30:ba:e8:e9:29:47:2b:14:22:e3:2f:f0:
c6:28:df:88:86:0f:90:7c:57:a8:98:54:96:de:f5:
0a:ae:23:49:c3:0e:65:0e:89:8e:1e:55:70:ac:13:
06:4e:22:96:18:5e:e3:55:6b:e1:7b:47:ba:1d:14:
2d:43:24:a0:89:15:a4:7d:8a:88:7d:45:80:7d:17:
d6:80:c7:71:5e:96:4e:72:d5:37:7f:cd:67:b5:20:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E9:E8:17:89:10:D8:50:EB:1F:C5:6C:04:92:46:68:5C:02:C2:05
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:38:1c:08:f6:2b:e1:5e:11:41:a9:bb:17:91:f2:50:0f:c2:
f8:96:91:4d:b5:86:39:99:88:8b:16:84:bb:bc:6e:97:22:a9:
a3:2d:ae:5f:21:e0:f3:00:8b:10:2b:75:12:c8:33:a0:f3:0a:
73:ff:a4:1a:39:bb:d8:c2:ff:d1:7a:2f:58:38:d7:65:3b:b7:
8e:b5:da:2c:ac:bb:9d:34:dd:c1:aa:e1:57:67:d2:ef:33:26:
9b:e9:bc:67:05:4d:37:66:5d:b9:2a:31:84:fc:11:b2:0d:bf:
fb:dd:5d:bb:81:88:f3:de:62:f3:6d:39:90:15:d1:b6:7c:0f:
43:5d:94:cb:a4:f7:a8:52:47:1f:31:f7:44:f3:eb:87:b2:0c:
1d:0e:c8:94:58:30:97:2f:99:77:06:1c:7f:df:fa:22:7b:89:
82:05:00:c7:ea:0d:ec:a7:8d:d3:41:03:62:f5:ec:b8:37:b7:
9c:b9:c8:13:74:11:94:f8:36:aa:e8:07:08:4d:57:f0:9e:f3:
e2:54:27:be:31:87:f1:65:40:69:24:b8:e8:c9:f1:2c:25:62:
95:47:70:dc:53:f3:9f:17:7c:9b:b7:15:2f:e3:ce:2f:09:05:
73:ac:75:53:a9:89:64:6c:1e:64:a7:e4:41:db:f4:b0:01:d8:
b0:a5:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:17 2025 by rpki-client