
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: b0ftEs6Z0dNY7kbVCfS+zEIi0/wOU6vGdne24Nats7M=
Subject key identifier: 6C:66:4D:AE:32:AF:4E:66:0A:1A:B7:16:5B:26:99:60:CD:8C:C7:F9
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 0194BD17A5F0DFB22C001DA0B12322CB8282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: kiJPw8uL4JMDNTCoRf3Da1edzEzi76pLgYe27e5U+aw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a5:f0:df:b2:2c:00:1d:a0:b1:23:22:cb:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=6c664dae32af4e660a1ab7165b269960cd8cc7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:c3:be:c2:d5:23:e1:22:8a:2b:b9:e7:95:
56:6c:68:5e:40:6f:15:6a:43:8f:a9:b2:01:a9:43:
ef:1d:4b:62:fd:00:42:51:08:cc:70:87:73:03:b8:
35:06:e2:22:c9:7d:16:78:73:d6:07:8a:db:5b:e4:
cd:07:0f:02:3d:e4:2b:3a:25:af:f7:77:b7:33:28:
76:0a:b8:dd:e9:d3:03:89:73:e4:6c:e9:50:af:fb:
84:44:3c:ec:fa:c4:a5:a7:73:21:ff:57:ee:b7:9c:
6a:ff:23:ea:c6:3f:33:ed:a4:54:58:c8:a5:77:07:
c5:0a:2b:dd:1f:de:98:d8:92:7b:1c:2c:73:7b:06:
7e:fb:33:b2:5a:8f:2d:8e:99:9a:57:83:19:10:22:
00:1d:49:ee:24:a4:54:24:7a:cd:b3:58:ff:50:b9:
2a:27:10:9a:a7:df:77:1f:9c:da:b9:90:06:8e:cc:
77:eb:81:cf:f0:d7:3e:c2:cd:f7:18:0e:90:d7:60:
d2:84:d4:30:57:b8:65:27:3d:55:b0:54:fd:7e:bb:
e3:3a:38:d2:d7:ea:5e:7e:69:78:1e:dc:be:ec:e0:
f4:8b:e9:08:f6:8e:db:10:d4:a1:03:21:7e:e2:8b:
af:b8:8e:fd:a6:33:8d:e5:59:04:f7:61:f7:94:37:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:4D:AE:32:AF:4E:66:0A:1A:B7:16:5B:26:99:60:CD:8C:C7:F9
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:ae:3f:04:30:4d:89:70:ca:9c:65:17:ee:91:e1:45:90:
9e:8c:b5:63:e2:42:e6:c1:de:eb:50:b3:97:63:02:d1:dd:41:
99:d4:fd:cd:ed:85:65:2d:b6:68:73:bf:1b:13:0b:fd:a3:47:
6f:43:46:fd:c1:62:76:99:6b:f2:9a:89:44:fd:b6:28:e2:1c:
d1:d8:6f:88:7d:4e:dd:ce:b4:ac:79:7b:af:4c:50:7d:aa:21:
15:88:2e:e9:c6:fd:23:b3:18:88:d2:70:07:c8:a5:02:25:7c:
4a:74:5f:d1:93:a6:ba:31:4f:cb:ba:bc:44:e4:4e:b4:0b:9f:
09:71:02:ea:ac:70:03:4a:fd:78:97:30:99:7c:c6:81:c2:ad:
21:50:27:f4:a9:07:66:3f:1c:fa:c4:b2:9c:d2:4d:b8:d7:46:
9e:99:e7:13:40:ab:fd:e5:51:ff:29:68:ff:a2:27:47:33:15:
2e:81:59:a3:a6:f7:00:b4:4b:8e:6c:72:16:67:14:6d:17:1e:
41:2a:ad:98:6a:92:fb:b6:9b:de:5a:87:4a:69:c8:29:80:0c:
b8:79:53:06:37:47:62:62:c4:17:ec:ca:31:9a:a5:f3:b3:12:
a9:54:ec:d0:ab:f8:a6:75:45:a2:12:6d:1d:62:a1:4b:60:db:
e0:c2:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:14 2025 by rpki-client