Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: lKhSaMZgkfwe9N+82k3biCTOlllUc3pKtW5cScnhihs=
Subject key identifier: F6:00:C4:16:C1:1A:EA:E7:F9:2B:5C:9C:F9:F3:BA:28:4F:A2:87:4F
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 0194BBCDB230C78A56EC3BA3B7BD652E986A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 10E5
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: 73j604cz7q11jG78CaB1qiX8G90/tfmVzHQq4GW+F40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b2:30:c7:8a:56:ec:3b:a3:b7:bd:65:2e:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=f600c416c11aeae7f92b5c9cf9f3ba284fa2874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:c7:53:43:02:d3:81:43:9f:01:26:eb:10:
a6:74:b6:2d:6e:6a:69:b6:cf:ff:d1:c9:38:95:84:
19:4d:8d:48:13:06:4f:f7:f4:70:ac:fa:35:0d:ae:
a4:45:f6:85:a1:18:b9:3f:1e:8d:06:5c:95:49:76:
24:3a:d4:b1:d4:d6:f8:ef:21:96:b1:8c:97:43:3d:
5f:9a:b8:8e:43:13:3a:bb:6e:45:a7:e5:68:23:ba:
c5:ab:04:67:8a:c2:70:05:e1:2d:64:3f:47:13:83:
4f:ce:d5:9d:0e:b7:58:4b:1e:25:6f:51:0a:f7:c4:
59:90:be:e9:62:92:50:ff:70:00:b2:28:7f:05:76:
5f:ae:d0:16:d6:4c:99:10:f1:1d:d9:02:bc:81:a1:
b7:0c:c9:8d:be:94:1a:e1:18:dd:d9:46:a9:8e:07:
dc:bb:64:85:df:c4:9d:99:b9:c7:c2:eb:1d:98:26:
42:8d:64:3a:84:b8:d2:d7:b5:56:3a:9d:99:4c:42:
85:71:3b:d0:ee:2d:f3:04:02:b0:6c:89:7b:1f:a1:
1c:96:93:52:f2:fb:8a:7c:ac:4e:fc:73:ee:15:a5:
ad:e9:88:ec:f0:3b:93:53:b3:8e:68:5b:c4:33:a0:
fa:b5:56:da:a7:8f:18:ff:4e:8a:d7:57:c7:41:3f:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:00:C4:16:C1:1A:EA:E7:F9:2B:5C:9C:F9:F3:BA:28:4F:A2:87:4F
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a1:da:24:61:fe:91:aa:a9:48:73:8b:86:45:7c:ea:f9:0d:
7a:0c:a0:2e:5b:52:91:e3:a9:17:56:20:92:5a:77:23:10:94:
ad:e9:e1:05:59:d0:38:44:1d:e5:02:be:92:74:83:44:5e:45:
ff:6c:96:9a:ce:8d:3b:e2:28:8b:f1:5f:1d:41:c4:f6:6f:ef:
e3:bf:f8:06:7b:f1:4a:40:d8:30:1c:93:c3:28:f1:00:08:27:
ba:8d:a2:52:fd:f8:b8:c0:74:6d:a5:c6:e1:19:fe:ed:27:ee:
a4:dc:76:9d:06:4b:d7:90:33:95:72:32:af:c8:52:83:2f:b2:
59:af:aa:99:3a:16:61:f0:9c:40:99:d3:26:27:15:b3:e8:99:
5d:fa:1f:e1:9a:a7:e7:ec:ef:74:ea:9e:f8:46:5c:25:6d:39:
e8:ee:84:e2:07:3d:d7:88:8b:13:50:87:d2:e6:d0:f4:c4:ae:
73:83:17:b6:f1:ae:b0:bb:eb:b8:ab:59:7d:df:a9:b9:5c:e5:
d4:cb:b1:71:ea:19:41:d6:52:05:5c:70:5c:13:43:ca:06:94:
de:01:5b:4a:00:dc:d0:ab:44:30:71:db:c3:64:ef:df:78:7b:
37:3d:ea:b7:f3:31:22:81:35:0d:74:43:c7:43:b2:d3:ac:e3:
93:0b:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:31 2025 by rpki-client