Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: hpwZ2iV5WZc1/sgOL3oTy07Eo6tc5Ify6Awuk99B3ic=
Subject key identifier: 2A:31:DB:5C:26:AC:C6:F5:2B:1D:5E:61:26:B5:03:37:1F:96:EA:BA
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 0194BBCF05B394FB9001B28B041C5B8AFACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0817
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=)
2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: lBza5oZfQg0PeAEXex3jW4aAAWdaA4CCG6ykoFDJoC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:05:b3:94:fb:90:01:b2:8b:04:1c:5b:8a:fa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=2a31db5c26acc6f52b1d5e6126b503371f96eaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:bd:25:88:18:61:07:6d:70:c2:9f:8f:dc:
d0:ee:2d:e0:c8:45:ac:7e:27:5c:b6:4f:81:33:e4:
43:f8:82:a4:36:48:9b:ec:c8:94:17:8e:e0:0d:07:
14:70:24:e3:df:ba:fb:23:89:24:fc:39:37:c8:9b:
71:48:54:e6:28:77:7e:44:d8:a2:8f:09:7b:3e:7f:
d5:54:a7:ee:02:ac:31:cd:1b:11:da:6a:82:c2:f3:
65:90:bd:ad:8a:ac:40:86:9d:58:a2:ea:fd:37:7d:
8a:3a:70:de:f5:24:a9:42:1f:11:b4:b6:82:e7:a3:
31:06:ca:a7:f4:84:fc:8c:7a:60:3b:ff:39:91:16:
67:b9:d3:4f:8b:25:35:96:0b:bf:45:d4:e8:85:f2:
39:38:bf:11:8a:57:bf:4e:0f:c3:35:97:de:cf:ce:
ad:3e:aa:c4:f6:b8:d8:1c:83:05:67:0a:c1:89:d0:
29:10:41:ca:d4:01:50:d7:70:cb:83:aa:d5:b5:86:
67:22:2c:a7:c6:46:7a:f5:9b:84:11:a9:5a:ff:49:
3b:4c:77:19:96:eb:ed:8d:b6:ef:eb:75:fa:b9:bb:
03:cf:df:b3:9b:6e:65:53:0b:53:2e:02:77:89:56:
2c:34:d2:86:c5:ce:0b:59:a5:17:f9:d3:35:61:47:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:DB:5C:26:AC:C6:F5:2B:1D:5E:61:26:B5:03:37:1F:96:EA:BA
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:92:eb:10:d1:ad:df:43:a2:38:a9:d4:2f:d6:9f:d5:f4:0e:
f7:2a:19:a6:c5:a7:bc:86:5d:e7:77:76:be:b4:d4:e8:12:3d:
c6:54:11:0e:5a:a7:95:c1:48:67:09:c1:c0:8b:1c:a7:6b:82:
a1:c6:5c:b8:ab:68:e6:f6:37:6e:6e:cb:98:5b:ac:34:c9:83:
19:85:90:7c:1d:a8:33:02:c6:2e:c1:fa:5a:b7:54:b4:d1:80:
1f:59:98:46:8e:5d:2b:ca:1b:76:59:f4:2f:40:59:a5:68:25:
96:57:30:72:d8:8e:3e:df:9b:07:7b:7e:16:47:3e:a6:06:6c:
2d:e9:5e:30:19:d9:9b:2c:b0:7c:c5:6e:02:50:2d:86:3f:95:
e1:ad:44:82:00:38:06:28:fd:0b:ab:42:34:63:01:9f:b4:ef:
1e:98:c4:ad:3f:5e:64:76:e8:1b:5e:be:76:d7:5f:ba:f9:33:
8a:81:16:97:85:eb:f3:6a:c3:8b:9d:c7:2a:2e:fe:98:9e:63:
f4:1b:d0:05:29:b4:e7:f5:9d:57:a3:dd:6a:0d:4c:bd:c5:fa:
02:cf:88:b2:3e:06:15:08:79:a2:94:f5:4a:98:75:06:68:2e:
e4:1d:d1:e5:aa:99:52:7f:bd:4b:75:9e:58:ed:57:67:14:b2:
a2:80:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:23 2025 by rpki-client