Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: 0Fov2eOhtdZ9WoOLyxeIEIa+bNcJk4r0TAVKDQ1V6Fs=
Subject key identifier: F1:EF:81:AD:84:B1:D5:BB:69:F3:1B:E1:A3:9E:B6:31:F5:C2:DF:DC
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 0194BCAA4B2BBBE8FE3DDA4883F66ADBCF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 6B
Signing time: Fri 31 Jan 2025 14:01:04 +0000
Manifest this update: Fri 31 Jan 2025 14:01:04 +0000
Manifest next update: Sat 01 Feb 2025 14:01:04 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: hnEQciMCN+CgnO/wj4kK35I350BhcMAvJNvX7hXnT88=)
2: 1-242YNLxFtHiZKrZjOTCTUI_hX4.roa (hash: Zl/0hNDNG1rQGa8HsGyytZ4/ZO9Krs9kfipHSTu8iZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:4b:2b:bb:e8:fe:3d:da:48:83:f6:6a:db:cf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Jan 31 14:01:04 2025 GMT
Not After : Feb 1 14:01:04 2025 GMT
Subject: CN=f1ef81ad84b1d5bb69f31be1a39eb631f5c2dfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:d8:a9:7f:08:bc:85:a7:21:c8:dc:8c:dc:
b0:87:e5:01:9c:6f:ce:da:21:52:03:87:13:ea:23:
91:0d:93:fa:7c:0f:24:fd:74:91:6b:40:d8:93:75:
ad:02:2f:c8:08:ab:a6:bd:4f:2a:1d:16:9e:cb:9d:
6c:d5:49:5b:b1:a9:e2:01:ac:8d:e0:b8:82:08:22:
11:84:f5:f9:5c:81:c2:45:98:76:bf:d9:20:01:10:
e0:a1:5d:ce:1a:71:a8:59:22:8e:0f:21:58:55:51:
27:5c:84:b0:76:1a:f2:5f:7d:74:54:eb:12:63:ee:
ee:de:55:35:9b:01:7c:b0:6f:77:ae:f9:73:91:5a:
21:60:b7:77:d2:8e:1d:a8:df:a4:ed:09:39:0b:2e:
57:72:01:85:1e:64:f5:e8:a6:a3:98:ca:43:5d:f9:
a1:c2:fb:e6:d0:c6:70:65:41:a4:b0:ac:92:24:96:
25:d4:6a:61:ef:7f:0a:6f:86:53:b8:ee:cf:e5:39:
d1:a4:9c:d0:93:74:f3:2b:d3:f9:11:37:0f:db:ff:
5f:9a:95:7f:63:ab:c3:57:fd:92:62:c1:2b:f0:78:
94:3b:ae:60:c2:86:9d:60:3b:b6:8a:6a:d8:b3:27:
5d:40:3e:e4:89:f8:80:6c:8b:3d:70:f8:07:7a:dd:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EF:81:AD:84:B1:D5:BB:69:F3:1B:E1:A3:9E:B6:31:F5:C2:DF:DC
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1c:76:16:53:01:fc:53:68:f0:49:69:19:7a:01:b3:fb:71:
4b:6b:35:1f:9f:2a:27:7c:3a:5d:88:d4:69:57:e5:8b:e7:f2:
44:22:87:e6:1a:8a:7d:59:69:8a:3f:0f:51:9a:0b:4d:34:11:
2f:52:a6:2d:c2:8e:86:dc:66:38:d6:c2:7c:74:93:8d:4f:86:
07:4d:fd:b7:a5:83:63:b2:d9:45:fc:6b:6f:63:48:82:f0:7a:
ee:20:00:1b:c6:4a:75:7a:5c:ec:c2:68:21:e2:a2:08:87:d7:
54:5f:35:81:d5:ba:ef:5a:e6:62:23:b4:39:4a:02:2b:ee:d5:
a0:6b:73:e7:8c:2e:70:f8:3c:f2:31:ca:8a:65:e4:83:c2:40:
a8:0a:ed:9f:b9:30:d4:ed:d6:68:68:3c:6b:8f:9d:a3:a2:27:
ce:2a:d0:e2:5e:ef:29:07:5d:9c:d9:eb:d3:99:55:e2:bd:64:
c4:73:dc:6c:ee:5c:a5:e1:3d:bf:ff:c6:e3:b8:2a:20:27:ca:
da:e3:ad:0b:af:20:4b:21:20:11:8e:6c:27:fe:a2:95:05:40:
ec:8c:c4:a1:a4:d4:e5:13:3e:da:65:ca:c0:09:25:c0:8b:ec:
d7:60:04:42:af:da:db:db:8c:64:d1:44:96:bc:1e:fe:57:4d:
f2:ac:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:21 2025 by rpki-client