Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: PGvmANoyv6+q4MP7iNhRQNyr0NOCtE4XY0H5kmSQVds=
Subject key identifier: F5:C1:AB:2B:D8:B3:59:93:42:3C:B3:32:DD:64:14:B0:8E:8B:B3:AD
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 0194BD4EBB709B738AFCEAAC1465BD692073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 0179
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: uDQPtOMwWcsjclMq8zcG9qmtB4QLpJOpa2+fn+RJEcg=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bb:70:9b:73:8a:fc:ea:ac:14:65:bd:69:20:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=f5c1ab2bd8b35993423cb332dd6414b08e8bb3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:c8:d6:3d:24:54:7f:88:56:38:ef:a1:45:
e2:bb:b6:5c:75:a5:6a:96:a3:08:79:5e:21:78:e6:
17:22:6d:6f:13:f4:f3:70:a0:9e:07:78:45:e3:68:
5f:c4:47:c0:66:d3:0f:c6:97:83:6f:9f:79:7b:5f:
ef:ad:9a:c0:54:35:ad:3c:d7:71:83:99:fd:6b:4c:
65:d6:ad:36:3d:38:73:1b:93:fb:4b:f9:61:0f:e6:
45:d1:ff:76:a6:95:8e:d9:4c:62:76:5d:f0:53:ab:
9b:35:e1:24:0c:e4:51:e9:f6:c2:21:5c:e9:74:1c:
27:30:af:7b:e4:32:f1:55:84:24:3d:b3:c7:bf:d9:
d2:32:b8:19:b9:9b:b5:85:21:88:cf:03:69:33:9d:
e3:3f:85:95:9b:1e:2e:71:46:ae:66:3a:aa:44:9e:
4d:4e:9f:55:5a:4f:38:7b:91:f9:e5:b7:82:2c:07:
56:9d:c9:0a:23:4b:ce:66:c9:bc:db:fe:91:9f:76:
8e:0c:6a:5a:19:98:6f:b4:4c:8a:f6:ce:2b:5f:b3:
87:37:70:0e:a6:e0:ac:7d:0a:69:b6:4f:e9:e7:8d:
c5:e5:fc:de:25:f3:44:f3:66:5b:8b:41:47:56:bf:
36:43:48:bc:b2:6d:8a:81:39:a0:09:2a:d2:b1:3d:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:AB:2B:D8:B3:59:93:42:3C:B3:32:DD:64:14:B0:8E:8B:B3:AD
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:12:2e:0b:69:88:b3:82:95:24:8e:5c:98:18:1a:20:3f:1a:
bd:eb:dc:e8:c2:c9:2f:f5:8b:f4:37:9c:a1:2f:99:d4:de:b9:
e0:07:c0:6f:d8:01:79:2c:31:47:c0:37:19:41:67:df:7b:7e:
c1:e9:d7:24:f6:f8:49:21:58:64:9d:80:0a:dd:ee:f2:e2:f4:
e5:04:b4:a0:d0:03:78:dc:aa:9e:0c:d3:a0:d2:b9:f7:9d:1a:
53:8c:e1:fe:df:36:97:8a:d6:3e:c9:09:8e:a2:a3:f8:45:04:
76:63:20:ae:3f:2c:5a:38:0e:ae:5d:bf:10:a1:6e:15:da:d9:
f5:b7:48:9d:6f:70:e8:1e:0b:e0:08:ac:b5:1f:a8:95:91:0c:
7d:c6:f4:78:5d:9f:c9:1d:f4:67:57:a6:6b:5b:d1:dc:86:59:
fe:39:27:fd:5d:14:b0:36:da:d7:8b:35:c5:92:f3:87:0d:7c:
6e:62:81:a0:71:d9:7c:91:f0:c1:f4:7e:49:be:50:ac:a3:27:
e4:18:85:fb:fe:a1:a1:57:7c:3d:ae:f4:8e:80:56:e3:cd:9d:
80:9a:1c:d2:76:5d:ba:98:17:88:c9:3f:a1:da:1b:b1:2a:d8:
2c:5a:5a:b8:89:12:68:c9:8c:fd:bd:8f:54:69:eb:9c:f6:e9:
85:85:5c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:38 2025 by rpki-client