Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: c8g35CM/SUk4/nFF7gehl1aRsEbOflBoPEMzGtTBJ1Y=
Subject key identifier: F0:BC:44:3D:9C:41:CE:1D:54:66:5E:D3:C6:F3:C3:F4:02:2C:05:E1
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 0194BCA96E6E5F6CD8DBB3F45723EA575925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: Of9CTbtTNqJEBK6KwuksdchvP02d3ktHHIDOKb0v2do=)
2: cl3GADBIa5-t9wHD_fNk8JDv5PM.roa (hash: H9R6zlOL/gViduYKRIYyM+avR4L6nr/tioY61On5qcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6e:6e:5f:6c:d8:db:b3:f4:57:23:ea:57:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=f0bc443d9c41ce1d54665ed3c6f3c3f4022c05e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:12:6c:45:13:aa:3e:79:16:09:44:b4:4a:
4c:3e:ad:46:55:4b:11:98:da:b3:dd:5a:e1:e9:f6:
d9:53:fb:50:67:85:4a:70:db:a6:bb:77:4b:f8:37:
81:13:65:22:24:95:8b:f8:e1:a0:b1:46:ab:e9:46:
a3:c7:05:34:a8:a6:30:f8:07:7f:e3:fe:a8:1a:63:
71:a5:c9:a4:6f:f2:f6:72:72:e5:95:fe:e1:e0:71:
89:b0:c4:bf:86:f1:de:b6:ee:14:7e:38:6f:15:af:
27:30:98:39:99:2c:bb:94:7b:b7:f5:12:a3:20:07:
3c:6d:fb:15:3e:a2:cd:39:ae:b1:8e:c2:a0:89:47:
d7:8d:1e:5b:5e:02:48:4a:fd:79:96:77:1e:4a:e4:
42:1e:89:43:a0:37:a6:b9:c6:ba:cb:98:b2:6e:6f:
f2:ef:cc:02:75:56:48:b4:cd:02:f3:3c:66:01:c5:
b2:31:57:cf:86:09:74:83:f1:64:6b:8b:3f:d9:3a:
d9:10:51:40:79:08:3f:e0:49:e3:16:9d:26:97:44:
51:a9:bc:1a:b9:f0:e5:b8:86:0f:12:6c:29:90:33:
41:42:59:c0:34:f6:48:ff:d1:2d:6e:6e:0f:b5:28:
93:e4:3e:c4:fc:1d:52:30:c5:16:4c:b9:1a:9d:3c:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:44:3D:9C:41:CE:1D:54:66:5E:D3:C6:F3:C3:F4:02:2C:05:E1
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:c5:0a:12:12:5e:fa:3c:1c:fd:e0:40:7a:ce:48:cd:e8:
00:8c:1f:78:2d:9b:1a:b5:f1:7b:9d:c1:2c:30:bb:cb:9e:63:
67:b5:51:70:05:f1:07:ff:4f:51:d8:aa:6b:d0:fd:85:2f:81:
cb:5b:5c:13:1f:fb:7d:de:35:35:19:7c:04:19:2e:7d:83:a0:
65:b6:31:ba:5d:62:39:f4:38:1c:1a:b7:9d:8c:61:9f:b9:58:
09:3a:f6:2e:92:42:58:af:2c:68:b6:ec:ca:a4:3b:fc:9a:60:
15:05:6c:6a:1c:3f:49:e5:13:98:b7:11:ea:a5:2d:1c:b9:ff:
8d:2a:9e:5e:34:a7:d1:1a:02:58:4c:05:78:ee:ac:5a:1f:fb:
65:1c:2d:45:7e:54:91:46:56:53:36:71:ff:14:84:9f:a3:8a:
99:cd:1c:11:d5:b7:26:9e:64:6e:cf:c2:0a:10:c9:01:23:71:
70:a4:c6:ff:a3:35:91:29:fb:03:2f:44:3d:62:73:8d:bf:b6:
4e:70:65:28:e0:59:ce:a2:af:80:98:75:eb:bb:a1:1e:f5:19:
b0:6e:1e:40:29:f5:78:0f:12:fd:95:1b:5c:da:bb:29:93:cf:
3a:a3:0e:b3:e4:62:5e:ec:f4:dc:82:89:da:ff:7d:0b:53:84:
27:5d:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:04 2025 by rpki-client