Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: WrHvb8MwZudyjBdc9PmhCIOgQzKndJyccEUHtLYgkWc=
Subject key identifier: 6B:E7:60:20:B8:56:F9:F7:A7:6B:2C:FE:25:97:E7:26:A4:A4:8C:F0
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 0194BC729D9F28D31E2590FED97F5F365DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 0FC6
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: 7Hj9R+Bg6UDDuLQWyjDDuU5xtVyzQgpeJ10mBhvsyrk=)
2: zLripgfgA2h1PROmUFrV2xnn3qg.roa (hash: RFD7P9+ANXyKn760nUDc4MZf68DTdcPjH9V+Py4Xd04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9d:9f:28:d3:1e:25:90:fe:d9:7f:5f:36:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=6be76020b856f9f7a76b2cfe2597e726a4a48cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:82:bf:76:64:2b:a8:66:54:3f:d0:98:70:
1e:a2:fd:6b:8b:00:58:e4:d6:8d:c7:1b:dd:58:11:
fc:61:e2:ad:8f:87:62:1b:a9:16:84:da:ea:78:7b:
e1:be:bd:12:19:87:9e:22:b4:4b:0d:bc:7f:d3:11:
13:65:34:25:c2:30:74:1f:21:c0:45:97:c5:b8:51:
87:7d:46:10:a7:4c:7f:40:6e:d4:a5:5a:45:ae:0d:
ba:a5:2d:57:dd:41:be:3c:e7:79:36:b8:9f:a8:de:
54:68:ef:f7:7e:43:ca:11:d4:56:11:91:ca:77:eb:
c1:26:b4:d0:85:0c:b7:83:61:2d:17:37:95:04:fc:
8d:f2:cd:92:56:bd:d3:6d:dc:c0:f5:e9:f8:5b:bc:
5f:34:ea:56:d1:2b:9d:98:32:a7:fc:37:5c:e5:b8:
28:57:28:c5:3e:ea:cb:db:54:a2:f0:1b:18:9f:c7:
32:44:a7:42:4a:45:85:d6:12:3a:99:c2:c8:00:6b:
15:f8:19:3a:ea:65:0d:9a:ad:06:9a:ee:fa:f8:e1:
6f:76:e1:4c:ab:e0:c0:2e:98:2f:f6:2f:d7:d3:59:
f2:a5:cf:90:c7:06:4a:53:37:68:a0:f5:d8:1c:79:
94:c1:4d:a9:0c:8e:96:8d:a5:b1:f5:40:af:06:66:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:60:20:B8:56:F9:F7:A7:6B:2C:FE:25:97:E7:26:A4:A4:8C:F0
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1e:dc:48:eb:97:60:38:73:97:8b:cf:2e:ef:da:33:72:95:
13:44:59:12:f8:06:0e:74:79:81:cd:7b:b4:ab:a3:34:06:d8:
12:8e:c4:d0:38:f8:7e:0b:4b:19:fe:63:ab:a4:a0:39:cb:fc:
06:b3:f8:0f:2e:f4:7f:ef:7e:03:2c:93:5f:78:1c:c0:46:da:
cb:f6:da:52:3d:76:35:3d:00:ab:3e:21:00:a9:35:c5:03:38:
ff:43:5a:de:b8:04:30:3d:e4:39:3e:8e:03:15:ea:71:b7:20:
99:fd:fa:d9:1d:d3:d2:dc:5d:af:22:4e:bb:00:df:16:35:07:
b1:9d:96:40:7f:97:c9:58:7e:90:fd:ac:02:aa:8f:e0:bb:f7:
fb:59:a6:98:9b:67:2f:9a:ad:56:39:b0:53:62:54:0c:af:bd:
07:56:cb:c7:46:1a:3a:01:29:3a:68:55:c5:cc:7a:90:2d:2e:
38:a8:80:20:93:92:8b:2f:38:c6:f8:5b:1d:82:21:fb:e4:ea:
33:54:a1:b5:03:6d:e3:d9:a7:66:6d:9d:73:36:7a:25:1b:b1:
72:6f:5c:54:a6:ec:97:7c:04:0b:d9:ce:06:40:30:0d:00:65:
2e:b4:33:92:b0:f2:db:31:90:ee:76:df:e2:29:5d:eb:7a:62:
78:2c:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:36 2025 by rpki-client