Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: fky9ieIZbYuClVSbhRRp7Gl337Rjw60q2Od6WhnueDU=
Subject key identifier: A5:8F:FC:FD:DD:F8:0E:67:D5:2D:C7:1C:26:EA:01:0D:89:68:4E:0D
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 0194BCA980E4C8027269C16FA678142CC9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 0DF2
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: EJBkVNm0snm2+m9oI4ZGbEy6Hu6cbbPtR6LzTRcCitg=)
2: Ut4z4tImR83ncGrwpXNPaCBz4dc.roa (hash: x3Tb8uXmHgRhBdCjWUywrl5EoWV8hOlCverEGcV2UXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:e4:c8:02:72:69:c1:6f:a6:78:14:2c:c9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=a58ffcfdddf80e67d52dc71c26ea010d89684e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:3e:fb:77:50:95:11:d4:f2:d6:f1:fc:6b:
b4:b1:16:9b:e7:a1:1f:fb:c1:45:22:fd:91:a0:dd:
46:97:52:7f:bd:64:98:f4:03:61:a0:27:ae:6e:a9:
3b:6b:b5:a7:fe:b3:0b:13:3e:b7:c4:b4:54:ea:54:
8a:cd:ce:c3:63:28:c5:3f:26:79:7a:0c:87:83:25:
05:b0:0d:af:b6:cb:5e:c8:70:47:ca:38:59:de:84:
7b:0c:bb:1c:14:0f:db:96:b1:7b:7c:9b:46:94:68:
cd:4a:68:7a:79:91:43:ad:6c:72:fc:da:31:9a:c8:
3a:6a:cd:06:b0:a5:dc:f8:49:88:5f:44:be:37:b7:
1d:2e:dc:56:31:a9:27:37:70:6b:06:4e:8f:07:d1:
52:32:ba:30:59:33:aa:cf:c3:2d:be:57:02:8f:50:
12:44:e9:86:3b:7e:01:60:3a:c2:5e:cc:c7:88:1a:
31:68:b0:63:5d:e7:a4:94:85:b8:73:4f:23:ac:9c:
f5:3e:d0:c4:b3:bd:3c:28:5a:59:e1:fa:ba:ef:02:
fd:5f:4d:95:7c:6c:ca:2a:22:f8:e9:ab:52:b5:9d:
d3:d7:d2:9d:ee:29:b6:7f:2b:b6:5b:57:31:f7:97:
5b:4b:e7:fe:10:8b:1e:10:ea:9e:05:d2:cc:cf:6a:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:FC:FD:DD:F8:0E:67:D5:2D:C7:1C:26:EA:01:0D:89:68:4E:0D
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d8:a3:fd:66:0f:d3:c7:14:1a:8d:e6:28:2c:d1:5f:8f:ec:
8d:8a:62:28:db:04:5b:37:a1:76:9d:d6:db:86:c5:ac:7b:de:
77:f7:31:2b:7c:c6:4d:89:37:dd:0e:c1:f1:52:0e:54:ee:56:
4e:28:dd:b3:29:29:10:71:d7:2c:c4:ea:89:5f:08:1f:28:35:
f1:01:66:f2:5f:0a:7c:5d:94:3a:91:0a:f5:bc:00:79:2d:c9:
00:c4:8c:3a:08:74:28:bf:fc:52:9e:38:17:e4:ef:4d:66:b4:
df:aa:3e:1a:d2:29:0c:7a:7c:18:e7:11:6d:7f:c7:b3:c5:be:
2f:98:f7:00:78:a6:42:ee:3c:52:db:18:7b:5d:2d:3a:65:79:
e4:16:47:62:23:46:86:3f:62:fa:c5:b9:c4:95:7f:ba:81:ca:
ea:b9:b2:74:e1:a6:83:14:29:c8:d0:d5:01:c3:e8:8b:61:d1:
fa:f1:27:03:f7:bb:8e:15:32:b5:f3:71:cc:08:a4:44:04:48:
d8:d6:ec:33:a4:3e:f3:e6:4e:8d:a4:36:90:dc:6a:56:e9:06:
91:e4:64:7c:d5:5d:d7:a7:8a:b4:cc:96:6a:8b:33:2a:60:ab:
96:4b:dc:a6:54:43:cd:cf:af:59:9b:bb:9e:21:30:5e:b2:0d:
42:2e:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:09 2025 by rpki-client