Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: JrtzDtr+j/+ZDzBmDrtb9BVSU/FUpl7IYw7TCyOiqF0=
Subject key identifier: 24:72:9C:38:4C:4D:7E:3B:7E:84:70:D4:BF:D2:AC:A5:3C:08:A0:97
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 0194BD4EA4C51A128CA197189DA0E8D1F90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 0614
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: 5SGgqRYNqxdYWiyE5hfrWIT+6B13++q40pGJswnHLF0=)
2: 1Ae_yfQHDKRNnQDwOPRaMQCngyQ.roa (hash: +NTp7Q1pqxAx2whls9B3Uy3bHdVw5DZ30CWN9JliAkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a4:c5:1a:12:8c:a1:97:18:9d:a0:e8:d1:f9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=24729c384c4d7e3b7e8470d4bfd2aca53c08a097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:74:64:26:90:8f:53:54:92:d7:3d:00:32:
57:a8:8b:1f:51:a9:de:4a:2c:89:06:c9:ff:fb:6b:
b6:f2:6b:1f:90:bb:97:55:d2:ca:f9:27:ca:f5:bf:
65:ea:0d:20:21:ff:bf:f7:e1:bc:08:bb:fa:a3:83:
9d:c7:9f:8f:23:13:3b:f6:d8:2b:5c:0e:e2:d3:95:
cf:39:8f:ca:18:73:3f:dd:09:d8:70:8a:86:f1:2f:
38:8d:53:3b:b0:a6:d3:0e:14:78:41:4e:ac:d0:79:
e8:b5:f1:5c:a9:61:01:70:8a:44:80:36:17:4a:78:
b2:c8:2d:fa:1d:97:fc:5c:f8:ef:26:8f:4f:3e:58:
e9:12:8a:d9:49:f1:db:e6:7f:52:22:62:8c:89:5b:
0d:ba:77:fa:56:51:6a:a4:ed:f6:11:4d:8e:18:09:
41:29:d0:d7:8e:80:19:24:4b:68:e3:32:1c:26:98:
14:6c:fd:35:1e:b1:f7:00:42:06:39:04:a8:ce:08:
63:82:76:0f:ab:7c:30:0b:fe:bb:87:e3:3c:f8:e9:
0a:a5:d6:ee:50:c1:b0:2d:6a:a7:0e:1d:f9:66:8b:
e7:92:53:4a:d1:c6:2a:d7:e2:b8:76:ba:cd:32:32:
ab:83:43:92:43:07:fc:7c:64:76:f1:9d:a5:36:74:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:9C:38:4C:4D:7E:3B:7E:84:70:D4:BF:D2:AC:A5:3C:08:A0:97
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fb:aa:6c:07:26:b1:5a:56:81:ad:e6:19:e6:0e:36:bc:0e:
de:12:84:ef:e7:eb:5b:6a:ac:1c:57:e3:c9:d2:7a:bb:95:33:
28:cd:60:12:b0:c0:c4:68:16:5b:31:1b:54:0c:40:af:cf:31:
07:8d:14:cd:45:8f:0e:c3:93:63:aa:ad:ae:49:88:f2:b4:0c:
c0:53:66:be:e2:29:a3:8f:c6:55:8e:4c:ce:f1:50:bd:41:ef:
f6:58:f4:c2:3f:52:83:eb:64:18:c7:91:ca:67:08:66:f1:77:
64:82:77:76:83:19:88:a9:8f:30:79:eb:72:60:ab:4f:85:33:
66:9f:9e:52:60:cc:f6:a9:8b:05:50:de:f8:f3:b5:6c:84:ea:
d5:68:aa:d5:74:19:2c:e2:d1:35:99:39:78:21:62:7c:39:2f:
b6:f6:c3:a8:52:3e:5d:c7:34:3b:7e:ae:b1:5c:92:bd:c0:a7:
a8:c5:ba:c3:da:64:5f:e6:20:b6:64:a2:b6:81:32:81:b1:d1:
5b:cf:28:f4:47:ec:44:ab:16:62:d6:15:44:17:cd:4f:b6:5f:
ca:45:9f:f4:cf:95:32:61:e8:e6:c7:92:26:37:c5:12:4d:b5:
e9:b6:b1:d7:f6:af:88:d0:bc:93:1a:e9:d9:49:9c:d8:4c:4e:
1b:2f:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:46 2025 by rpki-client