Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: 0jjxCevQ9P8/ua6VVZNPysVu746tF6xcAcCb6DkLd8g=
Subject key identifier: 8A:14:61:C5:EA:28:18:4C:2C:DE:0C:19:67:9C:CF:80:96:4B:29:47
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 0194BC7284C88C0AEF699B4AB95CCAD8B29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 0882
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: IA5gkVnhWknn7Hqhs1ETsbFBLQkaKo5+0ByQEoHcwK8=)
2: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (hash: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:84:c8:8c:0a:ef:69:9b:4a:b9:5c:ca:d8:b2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=8a1461c5ea28184c2cde0c19679ccf80964b2947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:65:be:21:86:5d:cb:3e:be:b8:10:9f:3c:
a8:92:97:72:55:0d:44:a2:ba:66:14:fb:df:2b:34:
fa:96:a0:4a:bb:62:c3:b1:7a:35:79:7e:48:5a:e1:
77:ad:33:d7:12:91:69:97:d9:e7:f5:65:13:79:0f:
fc:a6:66:fc:54:a2:01:59:f0:37:14:ed:b7:72:32:
bb:45:69:bd:ac:9c:42:d0:ac:a2:e0:2f:1f:ac:da:
ee:cb:23:00:93:a8:bd:18:3d:27:0f:ca:3c:f9:d3:
27:b2:9f:15:d3:0e:78:e4:0e:51:1a:d6:14:3c:ab:
65:b4:c5:5d:68:61:19:7d:b9:a5:13:8b:96:e3:39:
e9:0f:03:0c:7e:ca:ed:a8:0d:01:6f:7e:7f:66:8a:
18:6b:96:02:62:ea:66:7f:1d:14:fc:65:37:df:88:
99:5a:ba:19:97:d4:36:b1:36:93:83:9a:8e:19:8c:
42:38:d1:e9:2f:4f:9f:38:2d:ed:99:6f:58:96:a9:
5f:72:aa:5e:be:eb:ec:0b:df:ea:1d:8b:2f:f3:a3:
22:0d:8b:3d:14:ab:2a:02:f2:93:73:8e:ac:80:2a:
d8:86:e0:ba:dc:ab:1b:3e:4f:b9:0a:68:60:70:29:
ee:6b:14:17:1d:e2:d2:39:f1:67:03:43:37:53:d3:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:61:C5:EA:28:18:4C:2C:DE:0C:19:67:9C:CF:80:96:4B:29:47
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:42:e4:4a:aa:0f:04:7f:49:ff:e4:74:53:b8:75:7a:1e:
11:da:66:84:91:21:c0:1e:14:aa:8e:fd:9b:c0:b2:57:e1:e1:
94:b7:e9:72:35:c3:72:25:ad:26:2e:c2:ac:aa:d4:b6:0b:ea:
16:00:2f:9d:d9:74:75:d6:33:fc:51:e0:6d:22:00:97:58:e1:
fc:83:ba:40:0f:45:0d:90:f4:34:4e:5a:95:fe:45:99:4a:3d:
88:84:97:ba:c3:81:2c:37:57:cf:ed:e2:2b:47:67:1d:04:08:
97:37:d3:69:88:02:90:88:2f:21:db:c8:c0:a3:43:7b:68:fb:
bb:7a:04:14:db:9f:60:db:b5:0e:3f:f4:60:35:fa:76:b2:0c:
b4:3b:0d:52:cb:bf:d8:5a:02:16:04:54:ca:58:2e:f0:ce:0b:
18:48:b8:1a:24:8f:68:2b:14:c5:ae:b4:11:6c:37:0f:a4:19:
e9:fe:b3:73:20:ed:6c:a9:84:19:64:af:bc:d9:0c:a8:e7:b6:
66:af:93:7a:66:6b:2b:3f:1f:d7:75:69:c2:1b:a3:c4:06:ed:
83:c9:a0:21:e9:26:7f:09:13:9e:a7:f6:37:e2:1a:3b:26:9b:
35:be:e0:d1:89:f4:8b:ee:0d:30:08:18:d3:e4:91:bc:d9:29:
39:ef:e4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:09:06 2025 by rpki-client