Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File: C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier: 81R3/4TpJTFqPXs8u0Rus0CoAAWMtwBo1pdPlrQ53qU=
Subject key identifier: 5B:05:9D:FA:1A:1D:90:E5:5E:40:4F:DC:8A:DE:75:76:36:30:64:85
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 0194BC3C456DA70EDD809891A7FB646E66A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number: 0FC5
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: MLS+j9ndMZO58sH3QoOrNgMsWHZKuvFCkBlnjeeSs60=)
2: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (hash: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:45:6d:a7:0e:dd:80:98:91:a7:fb:64:6e:66:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=5b059dfa1a1d90e55e404fdc8ade757636306485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:24:8a:2e:ba:c3:93:f1:de:46:a1:b1:e8:
7c:9a:c2:63:d4:a6:72:50:88:3d:d8:b3:e8:ae:87:
ce:91:80:e5:fc:35:b8:f1:6c:82:89:bd:05:7c:7a:
71:ea:9b:a7:1f:86:e2:87:bb:ef:69:b5:eb:65:ea:
1b:99:5b:a5:e7:5c:f3:6f:1d:63:78:bb:0b:8b:1a:
ba:b8:bd:c8:5b:81:27:36:d2:c7:84:48:15:48:1a:
7d:6a:03:1f:55:8a:a6:20:ca:3d:70:bd:58:50:37:
7e:4d:56:b8:0b:49:5e:69:bb:b4:92:7c:0a:0a:6f:
8d:96:74:55:85:6e:45:9b:b9:d0:81:30:53:ff:ed:
44:e9:15:ae:47:d7:39:1f:e1:72:7d:de:79:4d:e9:
0e:fc:a8:e5:f1:fb:f5:ca:50:10:67:cc:95:49:01:
66:40:9f:47:7b:bd:b6:87:6d:41:e8:82:e3:7d:d3:
a3:62:6d:34:3c:1d:78:07:48:a9:7d:20:f5:01:a1:
f0:e5:39:a7:18:0a:78:57:59:91:6f:79:3f:2e:16:
3e:8c:66:54:0f:e5:45:83:cf:5b:d6:fe:98:89:80:
a8:ab:a3:72:fb:e4:00:8f:ec:e9:41:ab:32:dd:76:
de:d1:8c:bd:a4:c3:f2:94:67:6d:42:6a:ef:16:7b:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:9D:FA:1A:1D:90:E5:5E:40:4F:DC:8A:DE:75:76:36:30:64:85
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ee:c9:73:b8:8d:84:2d:e9:31:75:d9:7e:e9:6b:41:a8:03:
56:b2:54:83:37:48:e8:93:2b:a7:24:11:c9:ec:d2:0f:3a:72:
4d:8c:02:92:32:3b:b4:7d:4c:22:91:e8:22:0b:8a:93:0c:7e:
03:f3:be:60:08:7d:e3:a8:3f:cc:d5:ee:f3:85:e3:3c:45:04:
34:69:ea:02:7b:82:b9:4a:00:a9:50:80:4a:1a:81:bd:f6:90:
dc:1a:25:bc:66:85:9f:e1:b2:77:a2:8a:40:78:bf:87:4c:78:
bd:3e:29:60:ae:56:9f:20:bd:18:1e:80:0f:4b:e8:4d:2c:cc:
e5:ed:92:c4:22:3d:4f:97:54:4a:67:c6:0a:fb:49:df:3c:80:
34:ea:25:9c:21:cc:06:b9:fc:9d:ed:87:c5:ab:27:2f:bc:01:
7d:5f:fe:c8:9a:75:a9:a6:a7:0d:ef:0c:b9:f7:6b:ac:6a:12:
ee:b7:5c:dc:f3:6b:e7:84:4e:be:ef:40:2e:e8:2f:e9:1a:0b:
da:9e:e7:af:33:b9:c9:e3:d8:c3:81:09:d6:98:57:f4:bb:ee:
67:c4:6f:2a:42:0c:dc:2c:fa:92:a8:bf:20:33:11:d5:1b:8e:
0e:9e:af:74:3f:49:f3:c2:c5:65:47:b7:5e:07:04:77:46:65:
88:83:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:53 2025 by rpki-client