Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: FL16NwXdN38N3qjwQDWZLEfcZzNvdojjUcEwE3TxUDg=
Subject key identifier: E9:89:92:49:09:AD:1F:2B:AC:99:90:CF:C2:BB:72:07:47:77:C0:7F
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 0194BC73314864E8EC0B7C60CAAC304B5A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: IEAwV8RabskAZ9J/8H7imfSJJiKPLPVXkD2duHAPT7s=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:31:48:64:e8:ec:0b:7c:60:ca:ac:30:4b:5a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=e989924909ad1f2bac9990cfc2bb72074777c07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:79:7a:65:d4:4e:b2:cd:4e:1c:7a:ce:f7:
e2:f1:39:51:99:91:61:e1:c7:c7:ec:3d:57:4f:a6:
cc:2c:62:9f:f8:7d:2e:55:d3:2b:27:4d:19:a4:ae:
1d:4c:1e:ce:b9:b2:28:08:93:4d:ed:08:53:75:a5:
80:4a:60:29:11:6a:f6:65:2f:f6:3e:5b:7d:f9:27:
07:58:74:8e:ee:ea:3a:02:a7:3c:43:7d:14:4f:8a:
ef:cc:f2:be:68:08:f9:c5:ae:d0:41:50:5d:51:dc:
3f:23:4f:dc:34:4d:dc:f1:b5:64:8a:18:b6:01:e6:
ca:b4:e5:cc:a4:c2:7c:4a:8a:46:67:df:f7:08:f3:
54:fd:27:6e:8b:e3:ae:dc:2d:50:54:ef:c3:3f:7f:
8c:65:7f:5b:86:6d:81:f7:02:c6:16:ca:55:25:fc:
6e:1d:16:37:07:60:f3:4a:bb:b4:d1:12:0d:17:59:
7d:78:6c:2f:5a:a9:ee:1b:40:03:cd:73:fc:79:07:
3c:73:66:d1:b0:64:3e:39:9c:f6:1b:7f:12:cc:a0:
11:c1:b1:d7:bc:bf:d1:b1:82:b0:ec:a4:3a:58:76:
e2:7b:92:46:25:a2:2c:eb:8c:46:0c:3f:c5:52:d3:
90:4f:bb:9a:28:77:fa:d8:57:d5:18:8c:fa:45:b1:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:92:49:09:AD:1F:2B:AC:99:90:CF:C2:BB:72:07:47:77:C0:7F
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6b:6c:41:ab:22:ba:0e:5a:73:e8:15:b0:3c:cc:68:0e:20:
48:8d:47:0e:04:9e:62:26:37:80:c2:b4:81:90:6d:68:24:12:
56:f3:6c:55:70:7e:8b:db:39:2b:18:db:31:bd:fd:59:eb:9e:
b7:52:ce:84:87:70:db:e5:47:7e:1e:81:3c:5d:c9:16:d2:a2:
ca:7c:a7:ac:ed:36:a8:33:57:fa:40:56:6d:99:7e:ad:97:ee:
48:70:8a:df:93:1a:2c:c8:cb:b3:93:2e:71:ea:c0:e1:4f:66:
97:e6:a6:71:8e:78:2d:0a:ec:ac:e6:a1:0f:59:44:73:5e:96:
9f:18:b5:30:4b:e5:2a:8f:2b:b7:cd:e7:d8:ba:ee:37:06:b9:
c0:2d:1c:ad:0a:28:e9:0e:23:b6:0c:c2:19:31:c8:9d:fb:26:
56:4c:52:df:9b:0e:db:c0:81:e9:9b:0a:5a:88:4b:f5:89:50:
a5:bb:28:8a:b9:ba:62:8e:27:94:74:11:c2:a1:bf:8e:a7:09:
33:96:d0:4d:fb:4b:a7:70:fb:12:37:61:0b:5d:56:ef:76:d0:
78:b2:66:42:cc:37:4e:ad:c7:ba:cd:96:ee:f8:39:17:d3:50:
c1:d8:e6:89:3b:d4:4a:1a:2f:cd:a6:a4:30:7c:7a:cc:13:ad:
50:3c:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:32 2025 by rpki-client