Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: t4Ps9BPT9LkV39VWtXMwQI3pJXAkmvZel66tSE14Gjk=
Subject key identifier: 9E:75:3D:33:5D:A6:8A:AE:89:C1:7F:87:EF:94:1D:69:C5:BD:6A:34
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0194BCAA087A0AADD7CDF5812D52BC0A87C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 076D
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa (hash: /MpCkrj9yQfDhYflTljevFhsZA0Mv2nTgQM1DqiGD3A=)
2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: bhekAl7a4+Fv/XeDlWabQjAk4d68Y/8lzuvMv87fGtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:08:7a:0a:ad:d7:cd:f5:81:2d:52:bc:0a:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=9e753d335da68aae89c17f87ef941d69c5bd6a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:5b:c6:5e:01:87:a8:ee:a1:21:f1:f7:e1:
f9:0b:c7:10:85:b5:d4:3f:53:e0:41:5a:17:7d:33:
5d:37:37:fd:80:4c:8c:e8:2a:c0:10:a9:de:d0:97:
65:6b:de:ab:62:69:b1:57:c6:52:ec:61:15:04:69:
84:ee:cc:fc:db:51:ec:f3:17:6c:b1:6b:5f:96:4d:
80:05:a2:16:a8:53:8d:60:89:81:48:c4:a2:39:6d:
9d:1a:ae:7d:0a:77:fc:e1:c1:0c:91:c6:51:bc:60:
e1:e0:b9:b1:e3:e1:d5:5a:da:48:d5:2e:cb:45:45:
79:76:b9:d2:00:27:d5:15:07:08:af:84:af:4f:42:
39:e4:c2:97:20:31:26:1d:66:69:8c:01:d2:69:af:
37:53:6e:ab:8d:33:68:30:91:78:eb:9e:12:4a:de:
a6:d5:8b:0b:59:b8:60:7d:e2:b5:66:78:9e:69:72:
f8:b7:ab:8b:62:5d:0e:b7:d4:c7:5d:9d:28:01:57:
40:09:4c:c5:4d:b9:46:d7:c8:8e:5b:2c:3b:8c:a8:
2e:86:4d:ba:3e:db:fa:08:cc:55:98:9c:89:77:e2:
e9:e8:df:00:40:7c:df:17:ac:bf:25:10:de:35:59:
e8:f8:de:c1:9f:b5:5d:82:67:e5:fe:1a:d5:ff:e4:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:75:3D:33:5D:A6:8A:AE:89:C1:7F:87:EF:94:1D:69:C5:BD:6A:34
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:44:bb:6a:f6:81:ca:dc:16:ed:a6:04:77:e1:c0:84:79:34:
00:ff:56:4d:db:3e:d4:38:80:25:c2:d5:fb:88:52:75:eb:1b:
f1:3f:f6:43:0e:08:1c:ee:9e:68:e5:f8:cb:ea:d9:47:7a:b0:
99:67:b2:d8:d9:80:ed:ad:a3:f1:3a:b5:21:c7:9f:22:8a:b4:
ba:b5:47:a5:25:ed:59:8d:bb:ec:35:ce:f1:11:16:be:95:b8:
7d:72:3b:30:64:f7:a5:63:90:a0:3e:2e:00:6a:e2:60:7f:0d:
1d:c1:32:20:7b:c5:c6:89:2e:dd:ba:79:10:53:30:33:92:1f:
0c:db:1d:b1:2f:2d:f0:79:c6:ee:61:17:a0:43:b0:5d:d0:69:
70:f5:0e:2d:8f:19:59:12:5f:0a:76:02:68:e5:5a:e0:2a:2d:
87:fb:25:96:04:d5:10:ba:59:d8:51:05:fb:60:be:08:92:74:
36:89:93:0e:40:dc:3b:57:90:fd:b8:13:45:af:93:d1:a4:db:
dd:bf:b1:a9:95:1f:25:03:9e:f3:17:1a:0d:07:a5:9d:c3:cc:
c0:2b:c7:07:98:85:95:68:f8:06:67:61:68:da:09:d7:66:db:
45:18:f0:0b:5e:97:67:dc:8c:3c:86:97:bb:8b:d6:55:5a:06:
9b:06:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:20 2025 by rpki-client