Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: OKha99zdXVDxJLCSVXT/9WuguNN9K1i9SttFVQzpPBs=
Subject key identifier: 38:C7:4D:66:75:DE:E3:A8:6C:A3:33:55:F7:A3:C4:B2:0D:15:20:DF
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 0194BBCE501047E5639E3A369FB35905B2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 0FC0
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: BgV0cVdbNakfa5QfK/ivdGxxJUEPQ7o/TCoslbXMIAE=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:50:10:47:e5:63:9e:3a:36:9f:b3:59:05:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=38c74d6675dee3a86ca33355f7a3c4b20d1520df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:5a:0f:2e:03:7d:4c:75:3a:72:5a:6f:9e:
c5:7d:04:1c:5c:3c:3e:3d:da:f4:3e:75:db:7a:51:
c0:c8:33:2f:25:b5:8b:02:f3:73:9d:b2:38:82:9a:
a0:79:aa:14:e5:1c:a2:1c:40:a5:4d:ef:5d:19:fb:
6b:84:f8:93:94:26:51:13:5a:ca:8e:6e:16:d3:b6:
0e:d3:f9:84:7d:01:f5:55:22:54:3a:3c:21:bc:0e:
dc:53:5c:d2:2c:70:e6:14:62:92:03:9e:84:50:7a:
e4:c8:e7:3f:42:ff:94:29:54:37:73:ba:a1:fc:22:
ca:f1:71:4a:c9:b0:fd:1d:82:2b:c9:28:2d:f2:d3:
b2:85:fc:9c:48:7f:0a:c5:1d:ca:fb:bf:ae:af:c2:
f7:54:bc:0f:f0:d2:d3:83:35:34:75:f4:22:8d:b3:
a1:ae:8b:9e:62:48:86:d8:cd:c4:06:b1:a3:a8:5b:
b3:e8:de:31:1b:b2:7c:1a:a0:de:24:6e:8f:d0:01:
f5:c1:30:2a:66:8e:23:7a:fb:28:a3:0e:4b:df:ff:
d5:ac:3a:c8:8a:6e:86:e7:11:76:58:9a:3c:69:3b:
e8:55:c1:d0:2f:54:41:4b:11:e6:55:21:8e:3b:a9:
20:c0:bd:aa:f7:88:74:b5:c2:df:bb:10:a0:85:01:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:4D:66:75:DE:E3:A8:6C:A3:33:55:F7:A3:C4:B2:0D:15:20:DF
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:6a:ed:37:15:af:f0:7c:d9:5f:ba:72:31:55:74:29:82:
ab:27:51:bf:8b:0e:c7:c8:49:47:8f:66:0a:1c:be:a2:7f:a1:
9c:19:0f:19:ef:09:43:b6:1f:73:cc:69:b9:08:ab:61:c9:60:
d5:4f:7e:b7:f6:b8:93:1e:5f:33:30:fe:85:37:78:01:08:96:
c5:cd:b6:32:3d:5f:05:9a:f7:7e:72:5d:e1:f9:d7:ac:eb:86:
33:9b:37:20:a2:82:b9:5d:f1:b6:7a:6b:d7:ca:a5:ef:16:83:
1a:58:12:67:55:94:82:e6:bd:1c:37:f8:0f:2b:4e:22:64:c2:
fb:26:43:68:f6:5e:5a:af:2e:63:6c:91:97:27:37:c3:f6:ab:
85:dd:b1:ce:b7:10:e8:f9:0d:62:51:79:d8:84:fa:60:d4:d4:
dc:b5:a4:7c:fc:29:ab:70:32:03:44:69:22:cf:f6:52:d8:23:
96:35:37:7f:ab:be:7a:17:32:52:c1:20:84:75:59:79:37:0d:
be:82:e1:22:b5:f9:0b:ee:bf:ac:7d:aa:8d:f5:d9:9b:17:b4:
3c:64:07:97:15:9f:08:0c:04:15:2b:ca:68:16:94:37:b7:c7:
73:df:c0:fb:97:85:4b:ae:9e:4f:3c:17:2e:80:e6:0f:56:8c:
4c:9f:0c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:31 2025 by rpki-client