Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: FaW3CjJWP1PVMIOxeU4LsY30FPVUZ3YirggErO7rEck=
Subject key identifier: 0E:72:09:15:F9:FE:9D:DC:0B:9F:27:7A:C3:82:D4:5D:0A:8D:46:35
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 0194BC72AFB948C3BF156B2060A2A9DEE400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 0FE0
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: XH/Jo6Mx2xfWnUN1sKqz78+5dpcccM8CDDPfARHaHRc=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:af:b9:48:c3:bf:15:6b:20:60:a2:a9:de:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=0e720915f9fe9ddc0b9f277ac382d45d0a8d4635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:00:da:00:d2:3b:2b:64:93:88:f0:f9:16:
f0:8a:58:c6:11:3a:ee:71:e1:ac:d9:51:2a:8b:18:
43:8c:9f:e8:68:7c:47:36:5f:0f:9e:91:51:1d:af:
30:72:f7:2a:e8:4c:b0:d6:b9:4a:c5:a0:2d:74:e9:
95:84:20:2a:cf:ba:e6:02:34:a0:57:5d:4f:1d:4c:
6d:57:54:7d:2e:86:44:54:d6:45:f6:01:21:2c:34:
99:fc:e2:bf:d8:99:1c:bb:ee:d3:b5:8e:23:c9:7c:
ee:89:96:6b:34:5f:52:5c:3d:39:ee:e6:15:f9:dd:
a7:15:4b:80:92:f5:e1:fa:03:d0:27:92:6d:8b:da:
4d:7b:be:6b:6a:e7:11:6c:7a:64:b8:28:a4:ca:9f:
87:24:83:88:80:b5:5f:41:36:dd:ba:c2:02:6f:81:
b3:88:56:8d:a2:b5:90:c8:4a:e1:5f:d2:26:8f:0b:
6f:be:98:90:96:29:9b:9d:53:10:5d:18:29:e0:94:
94:2a:b5:37:66:df:b7:e3:89:a1:a1:ad:04:a2:12:
dd:6a:17:d4:9a:29:4f:1b:ed:4c:3e:1f:e8:9f:49:
9a:69:f1:bd:2b:51:cf:ed:70:fa:0f:42:eb:34:68:
01:9e:9d:8c:cb:5a:3d:5e:14:92:6a:02:43:10:49:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:72:09:15:F9:FE:9D:DC:0B:9F:27:7A:C3:82:D4:5D:0A:8D:46:35
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:d6:a6:34:02:a0:75:2c:d8:18:27:63:5f:aa:bc:42:60:
04:8b:f0:dd:d5:60:2e:e8:16:c4:ac:dd:b6:cc:5f:d7:e8:10:
cb:cc:fb:b3:db:69:86:9f:99:28:79:72:d1:bb:67:8b:99:f7:
4e:2d:6e:73:49:ce:2c:0d:9c:fe:07:43:6e:63:4a:8f:f0:b7:
78:c8:f8:36:a1:3b:7d:1c:d5:40:f9:e3:5b:98:e1:b6:9f:2a:
d9:58:5e:91:ad:03:31:12:b9:5a:95:9e:dd:99:88:40:0f:e2:
84:10:cd:96:ab:06:c9:8c:bf:4a:15:bd:73:ed:1c:d5:81:ff:
7f:da:05:82:a1:2d:c9:00:7f:6e:05:70:4e:9e:55:27:1c:05:
50:87:75:45:f6:17:76:7a:67:37:79:d5:be:0b:9b:fa:6a:aa:
81:7d:1b:5f:fa:24:ed:58:ab:bc:68:1c:8e:3c:93:23:5f:27:
e7:a0:93:3a:50:83:79:1f:82:4d:b8:cc:cb:88:42:10:c5:14:
8a:4c:68:73:d5:2b:67:9f:f3:d1:17:ee:01:92:df:7e:0b:cf:
5a:57:71:8a:0a:86:d0:9b:3d:9b:f7:b7:22:44:3e:8b:7e:dc:
b3:56:96:af:f7:e0:fc:9f:9c:8c:ad:ee:a8:b1:71:ec:94:f9:
ce:90:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:11 2025 by rpki-client