Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: mWdwM7swrpNAV3h3aQwowZyIZ6GGijpi6VWrTPizflI=
Subject key identifier: BE:36:A1:1E:64:58:F6:CC:28:24:3E:B5:9C:C9:50:1C:1A:03:3A:A7
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 0194BCE0A02B554E7B0C0099A8755574DB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0BA6
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: UHYTJ3bz5aGdOZgbw5eFIQKsGd4IxbOWM29s7S3J6W8=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:2b:55:4e:7b:0c:00:99:a8:75:55:74:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=be36a11e6458f6cc28243eb59cc9501c1a033aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:25:1f:aa:b6:ca:c1:7c:66:39:8d:f2:2c:
44:e5:dd:d4:38:78:49:d0:03:13:37:ed:ce:9e:ea:
dd:6a:c5:2f:ea:0c:40:18:7b:cc:29:d5:d9:d6:a6:
07:38:58:b1:9c:99:29:bb:7e:69:61:47:f1:5a:7e:
b3:69:c3:1f:5d:a6:ca:b9:c5:b5:a4:40:b9:75:0b:
48:75:4d:83:f7:92:69:14:66:a9:a5:f3:9b:da:f1:
27:71:0b:a7:31:8d:f1:91:03:28:b1:a8:7e:84:83:
1d:3f:c0:a5:e2:58:d6:d8:97:8d:f0:c7:8c:6a:e5:
f4:e4:1a:e5:6b:1e:3b:d5:55:c9:19:57:79:da:90:
bf:ca:d9:6b:8c:25:49:31:9d:d4:8b:49:a6:d9:6b:
e4:5c:8c:da:de:c2:70:d6:1a:10:5f:76:fa:b3:da:
61:e8:ec:95:75:e9:c9:5c:12:26:b5:94:e1:ed:96:
e5:3a:b3:0a:bc:fb:69:01:72:4f:85:f1:ef:de:f3:
81:ec:95:45:19:02:df:e8:d8:db:50:09:d8:0f:f9:
74:96:3f:71:4c:b6:a7:03:97:15:ff:dd:79:b4:6a:
c9:15:1e:00:4d:3a:cb:9f:64:2a:f8:bc:97:c5:35:
39:d3:45:2a:50:01:59:a5:c1:c9:01:af:11:b5:cf:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:A1:1E:64:58:F6:CC:28:24:3E:B5:9C:C9:50:1C:1A:03:3A:A7
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:52:3e:e0:04:30:c2:24:5a:af:03:99:73:88:09:b9:13:4f:
1e:65:ca:2d:16:a9:1f:9f:89:e0:a2:e1:b6:39:9c:7f:1c:e7:
13:c8:94:75:a1:f0:b0:06:38:1b:6f:45:d0:27:08:18:23:4b:
24:2a:b1:8d:cc:27:d5:f9:88:9f:fb:b5:f1:81:af:b2:05:0f:
1d:3e:fa:44:72:f1:b7:db:0e:67:bc:df:eb:5b:a8:3c:c8:48:
68:3e:1c:07:53:74:3a:6c:18:da:37:d6:19:e7:01:11:71:53:
af:51:cb:7e:8b:c9:33:2f:a5:04:02:33:6d:52:2c:63:4d:f8:
ab:f6:c6:26:5e:70:5f:33:1c:e6:0c:55:66:99:8a:72:9e:07:
e5:42:3a:20:55:f4:91:df:c8:28:48:44:0f:a7:ff:8d:69:fd:
d5:a5:81:89:18:87:ca:4d:96:22:d9:9c:8a:ee:ab:33:bf:65:
74:c1:af:3c:c3:9f:c5:e5:0c:b6:dc:53:3e:a5:42:ff:7f:78:
59:9b:1a:5c:f2:33:c0:a7:92:3f:0f:91:f8:35:02:b7:17:aa:
82:e4:ae:e5:0f:16:d3:4d:78:03:ae:c6:f1:1a:ac:23:0c:52:
86:2a:ec:9d:ab:c3:07:4e:ab:d6:c4:38:a3:3d:59:1c:5f:28:
19:48:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:51 2025 by rpki-client