Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: Zu128ovSHjqi0JatBzOm0l0LDZNt59JRdWHdQ4qTcWo=
Subject key identifier: 8C:F6:DB:9D:51:FF:10:09:D0:B5:24:F9:5F:A0:97:3E:00:0B:EB:C0
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 0194BCE07FF0003C2AE43DCEE22955FD8464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0239
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: 7GNOBaXtr/5K5iipqTBgkHi9DpEpot9MsONVRiq9pTc=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7f:f0:00:3c:2a:e4:3d:ce:e2:29:55:fd:84:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=8cf6db9d51ff1009d0b524f95fa0973e000bebc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:d9:c3:5b:1d:69:16:8b:0e:62:cc:37:af:
5c:b0:85:ed:27:4a:91:76:8b:27:92:8b:fd:67:95:
90:a1:1d:6c:c5:aa:5d:46:f2:e3:87:a9:56:60:de:
99:7c:de:b8:04:d0:6b:f8:4e:6d:8e:2a:2c:8f:d6:
d7:36:20:cf:e9:76:a6:cd:18:ec:1b:67:93:47:1b:
d0:aa:52:fe:6a:68:75:20:20:7d:88:66:a8:0c:0f:
dd:ce:c7:43:ac:3f:92:be:3c:8a:93:54:4a:ce:a9:
b0:24:f9:35:0a:e4:72:e3:c5:71:ac:07:d8:63:92:
ee:09:c0:f0:a9:c3:31:50:2b:90:02:26:ec:8e:88:
7b:3f:5c:7c:83:09:d9:20:2a:59:dc:de:ed:b8:12:
f7:58:59:e5:50:ed:e7:78:f2:7a:64:44:b3:af:72:
5d:62:ad:b7:ba:bb:5a:f8:25:3c:aa:ae:9d:1c:7b:
09:2d:27:fd:38:16:d4:bf:b6:b3:11:75:ee:bf:ff:
2f:f2:b1:29:90:12:12:82:5f:36:0d:d7:ff:57:ab:
45:a5:96:31:e6:c8:82:5c:c2:64:15:37:51:4b:65:
ea:40:08:f4:7b:a7:b0:c1:74:77:2a:be:16:ef:90:
fe:9f:f3:18:2c:94:3f:78:2e:1d:de:86:c6:48:f1:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:DB:9D:51:FF:10:09:D0:B5:24:F9:5F:A0:97:3E:00:0B:EB:C0
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:46:be:7f:f6:ae:9c:8e:91:49:27:02:79:bf:8a:b3:cd:
a1:c1:71:0d:ec:39:d6:50:f4:df:9d:09:d4:3d:9a:d5:14:ad:
5c:3f:ca:84:81:d4:f8:d3:23:8f:12:31:fb:52:da:d4:73:7b:
c4:20:02:eb:7e:58:cb:42:c2:2a:9c:37:d0:00:a7:fe:5d:e1:
00:8e:af:2e:b0:3b:7e:0e:a4:80:52:a9:a7:c5:e8:dc:b9:53:
fc:43:58:d2:da:65:cf:a8:51:e8:64:ef:f7:f7:83:85:de:e0:
0e:18:09:37:06:fd:20:2c:2a:ed:0f:0f:07:46:c4:80:0d:f0:
67:c5:2a:e6:69:7a:fb:ba:32:ff:64:35:cf:e0:47:75:3d:c1:
d5:75:cc:73:2f:ac:6d:28:2d:31:8f:4e:c7:a8:3c:bc:bf:b5:
7f:d8:c4:48:6e:52:26:30:ce:71:05:7a:8f:55:79:39:4b:e8:
73:44:79:22:9c:d3:08:aa:1a:96:71:41:17:de:08:cc:d9:69:
d0:4e:bd:f7:ad:69:02:4b:70:ac:44:8d:b3:ea:85:1f:31:ac:
10:ad:0e:0c:99:dd:2b:57:ec:ef:89:11:86:c1:60:d7:86:54:
be:eb:a5:69:ae:af:48:8e:f2:d7:ab:ba:1e:92:c5:d1:ad:b7:
74:0a:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:53 2025 by rpki-client