Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: B8cR3llsSMzqUVPpvzF4jpYM/IMM19VdG6gGB8d9GyY=
Subject key identifier: C5:96:06:E3:50:43:F0:0F:D0:3D:D4:C1:39:09:E4:A4:A3:D6:04:01
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 0194BC3CAC2FF27672CA5CEA19801072F68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: OhWDeWwYD/daYo0hlq1h0FSWGknVUJFjglPfGYD68Cs=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ac:2f:f2:76:72:ca:5c:ea:19:80:10:72:f6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=c59606e35043f00fd03dd4c13909e4a4a3d60401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:dd:16:e3:12:d5:30:ec:42:14:38:eb:74:
24:c2:20:e9:bb:41:fb:77:73:16:17:d8:ae:5b:66:
82:fd:3e:95:42:f2:50:a6:55:3a:46:07:79:7d:97:
3e:b7:ed:b8:bd:c2:e8:d5:16:62:0e:51:a8:a4:1a:
44:ae:9d:15:87:99:2c:b5:6a:e2:95:03:9f:49:67:
b9:9f:87:c0:60:d8:ed:f6:c5:18:c9:cf:f4:c9:22:
3f:f2:f7:be:11:e0:58:70:a6:b3:1d:57:a6:0e:91:
b8:5c:26:14:4c:79:a9:90:e1:d3:d7:db:5d:35:fa:
0d:98:2d:ce:07:83:e1:c4:7e:29:74:58:31:89:b2:
2d:e3:da:04:1f:78:6e:11:3f:e4:30:e6:1a:10:9c:
8a:5c:6e:b4:e4:29:2c:f3:12:94:c1:cb:43:99:9f:
c6:9d:d7:ac:09:11:c1:37:0d:83:12:91:4d:45:27:
be:f9:26:dc:1e:43:d3:c8:3d:f8:d7:f8:7b:cb:e3:
57:5a:db:02:77:d8:4c:5c:ae:6a:03:c2:98:22:ce:
85:7b:bd:21:3d:f6:ed:41:a7:c5:82:83:74:16:d6:
8b:15:fc:14:ca:e5:c0:bc:f6:8e:aa:64:1f:5c:21:
e8:ec:63:b3:25:e3:65:d5:c6:f2:ed:7c:64:06:ef:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:06:E3:50:43:F0:0F:D0:3D:D4:C1:39:09:E4:A4:A3:D6:04:01
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:13:59:c0:ea:b9:32:a7:23:c0:f4:80:4a:04:d7:a1:2a:51:
d4:30:a3:ab:57:39:d8:37:b3:01:21:45:21:e2:97:14:79:6a:
03:26:11:24:9b:c9:68:12:d5:52:83:25:51:7b:8a:c3:9c:6b:
2f:f0:d5:1b:b9:bf:59:3a:44:fd:25:3b:2b:c0:84:70:7e:26:
b7:90:05:71:e6:79:96:cd:e9:8e:16:4e:46:c7:32:2e:aa:b5:
cd:e3:d4:9d:e1:9a:19:21:14:2c:41:0b:31:fc:aa:45:c2:d7:
8f:61:2f:fe:fe:d5:71:5a:f1:8f:60:7c:6c:54:6a:98:dc:63:
7f:8a:a2:13:24:fe:57:df:1d:f6:ae:6a:a1:ce:21:2a:01:0f:
23:0c:53:aa:80:ff:0b:cd:28:0d:64:af:c9:79:55:31:2e:57:
b3:02:d7:31:41:49:1e:c4:1a:9f:ad:94:21:f3:6b:bf:8e:6b:
f2:3d:99:7e:54:d0:a3:ca:b4:37:0e:23:b1:14:41:fa:c6:e0:
aa:be:24:f9:cb:ce:60:10:65:2c:22:90:e1:df:32:eb:4d:89:
c1:43:76:80:e3:17:50:07:a9:f5:ca:10:24:69:58:fd:d0:57:
a8:97:43:5d:be:b5:0a:59:42:ae:77:f2:1d:16:bd:ea:9c:43:
46:11:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:55 2025 by rpki-client