Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: eyNPRYnunkVeWTLxC3LEnRrRvDEquniIoM36hunFJTc=
Subject key identifier: 39:F5:E5:D9:AA:4D:46:68:E4:E8:3D:A2:D0:45:DC:CE:F2:64:47:28
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 0194BC3BDB4011E2AF60832314F96BB1DE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 11AD
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: 7sOop+a4lJE8xmuhSEj4AqzrYt1JI67uA3+tIZ8Nswk=)
2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:40:11:e2:af:60:83:23:14:f9:6b:b1:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=39f5e5d9aa4d4668e4e83da2d045dccef2644728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:0c:a6:4a:7e:65:01:55:89:83:04:8d:c3:
be:41:f4:8f:a1:10:4f:b5:fb:db:5b:dc:f2:63:fc:
83:af:2d:8a:d3:69:81:3e:48:66:21:2c:38:32:85:
0a:e0:61:56:d9:8d:7d:a2:da:1e:d3:92:86:9c:42:
70:f0:c3:18:d1:3a:53:87:a0:c0:b9:27:94:2d:06:
ce:94:32:2f:e3:2c:07:27:f9:59:6d:3f:bd:6c:53:
90:49:69:26:a5:c2:7a:f4:af:88:9e:f8:16:76:64:
51:74:c0:33:56:01:f6:7b:bf:83:35:5f:4c:5f:24:
9d:ca:e6:f8:f1:7d:e2:e8:6a:a8:fa:0e:6c:b5:b8:
2a:f4:4e:33:ef:27:ec:54:6b:78:44:58:9f:ae:fe:
2f:f6:da:1c:4b:3d:85:0e:ea:be:7f:65:d1:55:e8:
e2:bc:44:c0:15:cd:e7:18:4d:c0:fd:fc:c8:ee:5a:
6e:4a:27:0f:5a:69:01:c8:db:38:29:99:9e:af:c3:
47:11:9f:99:4f:ba:26:51:02:9d:37:97:db:eb:92:
72:77:df:68:9e:6e:6e:eb:5c:d3:97:64:f7:fa:c4:
0a:43:57:97:74:4a:4d:a8:97:03:5c:7b:91:5b:88:
9f:60:a7:03:fa:bc:f7:77:38:1f:b9:a7:73:f5:52:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:E5:D9:AA:4D:46:68:E4:E8:3D:A2:D0:45:DC:CE:F2:64:47:28
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b3:ca:d7:60:b4:16:65:21:ad:40:b0:21:05:ce:43:0b:c9:
a1:ef:cb:81:0f:81:b8:e5:05:3b:01:05:8b:5a:1e:d7:00:ad:
1d:cc:d0:a3:64:ea:f1:bd:33:fb:f8:cb:53:77:96:48:9d:d2:
69:08:53:7f:8b:97:cb:b3:52:4e:c9:c5:b4:a1:f2:61:44:eb:
48:c5:1f:c0:39:4f:f4:1b:90:60:7a:52:3d:d1:90:03:07:e1:
58:29:68:3e:21:14:9e:b1:0c:5b:7c:03:ef:2b:ee:64:e9:c3:
c0:26:55:99:98:5f:8c:a7:d5:ee:fe:4a:8d:40:86:24:85:fd:
b5:5a:c9:af:19:71:10:e3:6e:c1:78:ef:61:39:49:ca:65:bd:
27:5c:f2:e0:af:bf:ec:68:c8:6a:a6:08:ce:75:e8:f1:6b:0f:
cd:17:5f:ac:68:51:aa:7f:aa:89:3b:a3:80:78:03:b6:72:c6:
3a:21:4d:fe:d7:eb:a1:14:85:c6:e9:e2:64:fa:4c:dd:92:95:
8c:c6:2b:72:b3:cf:a6:8a:e0:82:60:f0:19:80:6d:46:4c:0f:
ed:99:6e:7e:9a:88:cb:c1:0a:fa:8c:0d:b8:ac:b5:6e:6a:79:
b0:ed:c7:44:ff:9e:74:ab:23:47:e8:f3:e1:a6:c5:5b:15:3e:
97:26:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:03 2025 by rpki-client