Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: PB5f7U9+WFNHZYEYhlOuBxNssxnXno/Hsf3b1CMOvgY=
Subject key identifier: DC:EE:E3:F1:F5:15:DA:52:89:BD:53:80:3D:69:7C:69:DE:9A:E8:B2
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0194BBCE9EA474221C738FDF835DEC6F51CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 01AB
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: zJoJZ38MEsNj8I7TLIHQeOFPZs/fhPYgN61bwpXzfDY=)
2: JbFTKsYCdYTemXtCMaoCGPCb_ts.roa (hash: 9MukSppM7ZP0dLRuUTCzbpAchMnqJZvzbwM4s+EOfAk=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9e:a4:74:22:1c:73:8f:df:83:5d:ec:6f:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=dceee3f1f515da5289bd53803d697c69de9ae8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:19:2a:1a:60:2b:c2:78:10:7c:d4:d8:51:
e2:5b:eb:08:28:2d:18:0f:3f:be:93:65:c0:34:6c:
c9:eb:fe:3b:5a:3b:1d:b1:b4:04:ad:92:e8:b7:ba:
29:d4:a6:cb:ab:44:54:d0:79:ca:dc:9e:d7:5c:8f:
a2:d7:b3:f8:9e:f6:53:01:ac:76:38:ce:61:aa:be:
d1:6e:02:03:9f:6d:01:01:f7:ac:62:67:4a:eb:2b:
59:16:ba:da:7a:e6:f9:7c:7b:19:1b:b6:98:7a:a3:
a2:17:8b:34:db:51:12:da:ff:46:45:2b:eb:18:ea:
ef:5f:36:c1:7a:72:5f:5e:80:4f:f6:f1:c5:73:f9:
c1:da:5e:78:ff:80:32:18:6f:97:c0:8b:d3:b0:4e:
56:d4:73:82:65:a9:be:a4:4e:73:77:97:68:4b:ba:
1e:52:19:d6:55:a9:ae:d6:45:56:89:ee:df:68:1c:
6c:89:92:82:84:81:a9:8e:96:56:1b:c0:42:a9:5f:
b2:b0:e3:66:12:90:f7:2f:bc:ec:04:f8:7a:8d:9a:
5a:e0:ee:e4:34:2c:3e:a9:6a:81:0e:8f:c3:00:cd:
f2:42:8c:64:b4:b4:f0:79:9d:09:96:40:44:91:fb:
d1:90:4f:ef:37:9e:0b:f3:79:74:b2:73:94:24:33:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:E3:F1:F5:15:DA:52:89:BD:53:80:3D:69:7C:69:DE:9A:E8:B2
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8d:51:7c:54:f0:33:54:69:35:c6:3d:33:e4:6f:1b:7f:ea:
cc:ac:54:38:67:4b:4c:1d:da:ed:cf:4a:20:88:66:91:6b:a3:
ad:d6:eb:8d:eb:18:fa:f5:18:4a:18:44:20:f1:be:03:03:e6:
07:21:35:3c:d8:03:71:71:33:e7:dd:07:79:d6:f3:ea:49:64:
36:bb:e7:97:5c:90:f0:25:93:4a:5e:ef:d2:0b:6d:2d:b3:c2:
38:3d:ca:ee:4e:60:7f:6f:63:19:ea:17:1b:33:1d:15:ed:f7:
86:98:1b:d9:bf:f2:46:f9:e9:48:77:b9:58:cf:e8:81:81:ad:
5d:1c:be:70:a8:df:4c:0b:e9:d2:34:c6:ed:cc:6c:95:6a:87:
7f:72:21:3b:2a:60:3d:18:32:82:c3:ac:b7:4f:85:a8:1a:2c:
62:1d:e1:ae:c7:2b:3a:3d:2a:d9:ad:c1:f8:5a:8f:a9:9e:b5:
9d:b1:3f:2a:54:e7:9b:83:09:d2:d7:d3:35:8d:6c:04:cb:02:
a7:f6:2a:e9:88:a0:5d:42:66:8a:cd:90:e3:52:6b:75:0e:b5:
8f:5f:90:fa:04:c1:99:dd:aa:fa:12:6c:87:ce:c2:ed:fe:34:
29:3e:e7:e4:ba:d2:08:30:00:fa:b4:af:97:a5:0a:d5:1a:96:
04:92:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:54 2025 by rpki-client