Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: 8EMN11a+HfMmkWq4y/8+Y4KWjw1fOpWcWEhYERJ8eGQ=
Subject key identifier: D8:CB:F9:8C:EA:10:4C:DA:7F:56:48:5D:A5:68:4C:5D:D3:66:F4:87
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 0194BC04A1F332CFE8F567E2758CACBA5074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0AC0
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: IQUwl3ZaUHnUaJKptFzzJHhEYDpC3LPJdNtBH5KjbNE=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a1:f3:32:cf:e8:f5:67:e2:75:8c:ac:ba:50:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=d8cbf98cea104cda7f56485da5684c5dd366f487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:dc:6d:8e:ed:e1:c9:f8:5c:cb:9b:d3:55:
4f:d5:fa:a4:f9:e6:1f:30:28:c6:97:37:d9:ed:6e:
1b:cb:47:43:bb:3b:cd:9a:a4:97:6b:51:88:9c:a9:
40:4f:f7:19:46:f4:80:c0:44:04:70:29:80:84:14:
05:2d:08:14:74:3d:27:2b:8b:ab:5c:68:a5:33:2e:
d2:0e:f0:1c:01:f3:ef:c9:5e:5d:b5:ce:93:50:cd:
cd:8a:ab:cd:1e:08:91:27:71:c3:29:52:26:f9:53:
95:d8:1d:3c:27:9b:0c:6e:9c:42:82:34:c9:40:e7:
d4:91:ac:e6:a7:04:70:bd:d9:e0:7f:f0:d1:ac:a2:
90:7c:85:6e:05:0c:d9:93:b2:f7:c8:c4:b7:4b:0c:
18:7b:6b:b7:6b:ab:89:57:d7:61:bf:85:4f:40:93:
eb:78:72:50:dd:25:c3:fb:06:72:20:2c:1e:58:36:
42:8f:de:ba:d6:64:84:97:f3:42:99:63:9b:a9:05:
56:1d:c4:2f:f8:43:ec:86:bb:a2:92:6d:5d:1b:3d:
b6:12:40:3c:f3:65:73:a3:a3:e3:90:09:ca:44:7a:
94:14:0a:71:cc:78:07:34:1a:ec:7d:80:2f:64:70:
d4:00:db:51:5b:b6:9b:fc:c9:c0:c1:65:eb:d8:cf:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CB:F9:8C:EA:10:4C:DA:7F:56:48:5D:A5:68:4C:5D:D3:66:F4:87
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:66:a7:91:9f:94:9b:0c:c2:7e:f5:22:df:c2:09:c2:c4:
11:d3:23:a6:20:bb:36:16:09:21:6a:c4:15:30:f1:66:92:8e:
bd:63:47:84:e1:46:d1:0d:4c:6a:24:17:93:18:37:77:2f:82:
e9:54:0f:84:ff:6c:a4:d1:6b:85:40:c3:a6:3c:e4:0b:09:0d:
fe:0e:5f:ef:88:56:92:a0:9a:d5:8b:e4:9e:f3:bd:ce:c0:56:
94:74:c1:f2:f5:c0:09:c1:df:e8:ce:f1:b5:23:22:b6:ef:45:
78:10:c3:78:bc:53:13:73:60:88:49:82:6e:a8:e8:94:0f:0d:
27:5b:e1:e2:b2:84:73:ab:0c:1b:f1:76:f1:fb:26:0b:dc:93:
6f:cd:1c:83:a6:ae:5c:0f:01:ad:95:1e:c2:af:49:bb:31:09:
fa:1e:f5:8f:f2:f1:a1:d4:d9:75:0a:5c:f0:dc:b1:af:77:0b:
dc:e3:ca:8d:8d:1b:f7:4b:2e:15:95:69:6a:cf:fb:a2:7a:1b:
44:48:8e:0b:8f:09:c3:8e:ac:63:09:86:a7:69:de:9c:a6:ce:
cb:2a:77:3d:7c:27:cc:8e:6d:ea:f6:b6:ac:5f:89:9b:81:63:
74:2c:44:50:a2:1d:79:34:9f:42:27:8e:89:e6:d2:12:cc:d5:
90:95:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:27 2025 by rpki-client