Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: qed4bRef4Xl7lfftp9xdaSaVyuGIWKmgJ0+bcBFSxK8=
Subject key identifier: A0:1D:DB:0E:AF:8E:94:70:B8:C8:37:04:8D:3A:3D:FF:F0:D5:F4:32
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 0194BBCE7FE5A72E9183B33B5998D46BEF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 0794
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: lbPkZQelwqh0kZYnGQY1b5YTJHSl2cOmYN2AbWO/h/4=)
2: FAudlpGk_kDfTVYbbohSs3--fwY.roa (hash: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7f:e5:a7:2e:91:83:b3:3b:59:98:d4:6b:ef:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=a01ddb0eaf8e9470b8c837048d3a3dfff0d5f432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:c8:b8:1c:b2:40:6d:7f:a2:27:6a:ae:87:
c9:dc:53:41:55:6a:30:21:4c:4e:81:b5:0a:57:ce:
5b:cf:2f:e6:dd:4e:c6:fe:f5:0e:55:94:8d:93:b6:
5b:54:13:f8:7a:52:6c:95:02:75:54:a8:e4:77:55:
e5:9a:e8:08:0a:0b:3e:8f:d4:7e:43:48:f2:4d:66:
e9:92:9d:12:f3:76:dc:26:64:fd:20:64:2b:a6:8d:
f6:4b:07:5a:3e:58:9e:68:c8:ba:3e:21:5c:bd:ff:
57:16:e9:fd:4d:20:a7:fc:22:e1:be:42:3a:1b:56:
83:6d:83:01:f9:24:bd:aa:9b:b4:65:63:af:93:62:
64:cd:1a:e3:38:1e:1f:97:ff:4f:31:54:c1:e9:50:
4b:a8:52:02:2b:79:9a:1a:ee:b5:9e:b2:08:0e:05:
c2:17:d9:3c:ff:c8:00:cc:36:ed:7d:5e:f7:df:ba:
f8:74:5c:de:a2:da:de:72:ea:90:17:93:51:d6:ca:
5b:c6:54:d9:97:46:d5:32:01:a5:c4:92:ba:09:89:
11:0f:22:bb:eb:fc:b8:7f:a6:2e:1a:5e:51:a4:8f:
e6:29:3d:ef:6b:e7:fd:e6:9b:7e:75:d3:e2:07:88:
07:07:fd:19:6c:2f:c3:9a:2c:80:7c:2a:31:5f:16:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1D:DB:0E:AF:8E:94:70:B8:C8:37:04:8D:3A:3D:FF:F0:D5:F4:32
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:02:61:ce:67:be:e8:7e:a0:22:eb:ab:b2:dc:69:75:25:
d1:7b:3d:a4:38:0d:99:3f:b0:96:d9:be:f1:ee:cc:a2:50:f9:
82:7a:5e:8e:75:7a:68:d6:5e:7b:7d:3b:ff:43:f7:99:bc:97:
e9:2c:eb:73:91:c4:64:4b:ec:a2:07:29:0d:7c:78:2a:27:18:
42:0e:84:d3:8f:54:51:40:d3:6a:ea:0d:8e:f8:91:1d:72:0a:
f5:56:ed:fa:3c:b4:13:c3:41:ae:ce:f3:34:25:6d:d4:e8:f1:
be:b5:6b:0d:4f:b5:49:c9:74:63:f0:2f:ed:11:d0:6d:d2:d6:
c1:ac:a9:37:ef:8a:85:2f:5b:1f:37:7a:ef:73:d6:5f:37:c1:
a7:2c:bb:3a:f2:42:0b:8f:a7:75:86:97:dc:1f:db:05:9f:46:
f6:34:df:de:5a:96:88:e9:c9:7b:28:b0:c1:cc:08:fc:ad:f8:
b1:15:05:0e:42:bc:13:39:bc:5c:92:1b:f1:95:56:c8:a4:f6:
be:11:6d:9e:b3:fd:cd:15:db:c4:80:f0:a3:99:51:28:cc:4f:
17:15:4b:2b:60:17:ba:02:2c:bc:4e:51:1c:ea:98:1a:64:a6:
be:83:a2:03:dc:61:3e:ce:16:9a:8f:bc:d6:46:2b:7a:b1:26:
01:1f:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:26 2025 by rpki-client