Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: Gce4yp0az8/FhF+fFMiJwhCarLdLeXxCxL2kfHMWGmI=
Subject key identifier: 44:AB:DC:8E:7E:F9:D0:68:65:FB:81:A9:21:27:BE:1F:64:04:E2:6C
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 0194BC3BDBDEB2E254DC2961476B827BA2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0912
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: qVlxfZUHkdl7f09NVtbqi7AQ2KesYLxEbE84pCrHCxE=)
2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:de:b2:e2:54:dc:29:61:47:6b:82:7b:a2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=44abdc8e7ef9d06865fb81a92127be1f6404e26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:fe:f4:84:d0:f6:01:9d:c6:af:b6:2f:9f:
6c:ff:cd:a7:db:ad:03:88:ca:88:98:75:2c:9e:93:
b8:e1:20:48:6e:6d:e0:71:f4:91:61:c7:bb:ab:fb:
6a:b5:5e:90:77:0c:77:21:de:2b:79:7e:33:06:f6:
1d:3f:84:26:5c:7f:b2:ac:58:3c:c4:18:af:00:f1:
c9:4e:d3:d4:f8:e0:2d:11:e4:18:e1:0f:7b:c2:89:
0c:cc:65:23:23:c4:7a:d0:9f:a2:d8:85:eb:7a:78:
ef:74:1e:62:2d:b7:96:2c:f4:d0:83:01:5e:67:0c:
1f:30:1b:cc:13:cd:8b:11:13:7a:84:23:e4:88:6c:
64:f0:25:3c:dc:4f:96:2c:3e:e8:f1:02:51:07:42:
0d:2f:19:2d:ef:7f:2b:f6:91:0b:31:49:8d:ab:2a:
36:97:74:95:cf:54:84:f3:2f:13:6b:8b:a2:3e:24:
3f:8e:7c:fa:c0:f2:24:90:95:6b:f6:3f:eb:00:67:
b0:ac:41:e0:93:fc:68:51:07:51:46:8f:59:5d:a3:
c1:12:93:cb:2b:67:b1:2c:5e:bd:dd:f6:95:52:f0:
73:2d:d9:23:7a:41:3b:67:99:07:24:1c:a7:42:0b:
61:6c:16:70:12:24:7c:9d:dd:6e:2a:82:17:64:ba:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AB:DC:8E:7E:F9:D0:68:65:FB:81:A9:21:27:BE:1F:64:04:E2:6C
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:06:f3:d0:e1:b5:d7:aa:1f:0d:fd:f5:3e:fe:73:4e:b6:eb:
5a:ee:bf:ef:72:14:ee:40:d6:d8:e1:d9:22:0c:86:e3:1d:28:
a3:61:74:d1:35:8c:a6:3d:e3:af:b4:aa:8f:3a:fe:b6:30:f8:
10:82:54:94:70:d4:49:b1:22:45:28:89:8a:81:1e:ce:48:e1:
47:59:00:fd:6c:94:c9:7f:a6:72:31:6d:f7:5a:f9:35:c3:b3:
e9:e0:02:70:4d:aa:1d:65:6c:11:de:b2:0c:8b:89:07:8b:a2:
19:83:a3:2a:cb:6b:95:09:37:c0:6a:1b:cc:22:3a:c1:6f:d5:
7e:99:60:3d:9c:39:9b:2f:b7:e1:de:4e:18:6b:d1:71:35:7c:
b9:b0:c0:5e:05:64:c5:87:63:15:7a:10:e5:f5:e0:63:0f:15:
25:1a:9d:48:d7:2c:34:47:4b:49:97:4d:0f:0d:61:bf:1b:ae:
92:1f:67:49:07:9a:8f:e9:66:01:be:09:41:52:5d:f0:50:39:
a5:0e:42:ec:1a:36:ab:1f:cb:32:42:36:13:63:bb:32:0a:7c:
17:6e:ea:ef:f2:1a:6a:38:44:73:d1:2e:96:f5:45:91:cb:70:
20:3c:53:74:38:22:61:c3:54:70:65:57:79:a2:63:3d:b8:7a:
ca:72:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:04 2025 by rpki-client