Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
File: 0sAfMj0dJYn5qbRi_nDzawn6xjI.mft (raw, json)
Hash identifier: 5rS66RQ8ZnZh9a2/9pM00otvMwWyOYTnSwjOi5k1ZJA=
Subject key identifier: 14:FB:4D:CC:39:A3:4D:78:BE:A7:78:EE:74:AB:88:C3:B6:A4:9A:B6
Authority key identifier: D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
Certificate issuer: /CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Certificate serial: 0194BD179229BED91C863D864F36DB71A144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
Manifest number: 0457
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 0sAfMj0dJYn5qbRi_nDzawn6xjI.crl (hash: xlnMuQz0LoV56IakI1p80Ef5kfDnuayTw3HZQIpH3pY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:29:be:d9:1c:86:3d:86:4f:36:db:71:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=14fb4dcc39a34d78bea778ee74ab88c3b6a49ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:a9:d9:a3:d1:e4:a0:58:3f:a4:41:18:0e:
c3:2e:b7:f4:7f:93:dc:d5:f9:71:0b:5c:4c:56:6a:
e1:94:19:26:8d:92:9e:64:fb:c7:cf:12:2c:5f:05:
ee:67:22:c6:14:52:9a:42:97:27:47:a0:10:49:40:
52:79:72:60:b8:02:7e:9e:c7:5f:62:9e:4d:04:72:
16:12:4e:0d:4e:f6:3b:5f:b5:ef:a1:5e:3a:9b:07:
15:1d:17:af:ee:d0:82:f1:b2:2f:d8:80:2d:b4:d3:
fa:bc:d7:ee:22:b4:ad:d5:b1:35:7d:61:88:46:6c:
90:42:64:dd:54:3c:74:4c:92:2e:89:fd:72:d0:e9:
20:0c:0f:cd:52:48:b0:6d:59:67:59:b4:93:7e:09:
f0:9b:a1:22:de:66:81:50:e0:36:95:f1:49:e2:55:
a5:f6:e7:09:92:fc:2e:9d:eb:0a:15:4e:b7:63:6f:
30:46:e1:8e:f7:22:c7:53:c7:b6:7c:46:d4:2e:85:
0b:c0:e9:c3:82:c5:21:81:9d:e1:e9:49:a2:af:2f:
f7:d2:17:b9:d0:bc:db:80:76:59:fa:2a:50:78:02:
d4:89:c8:f2:52:03:a0:9b:a4:21:12:37:83:22:4e:
e9:46:43:cb:03:8b:8d:1e:07:3c:ba:eb:89:ac:96:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:4D:CC:39:A3:4D:78:BE:A7:78:EE:74:AB:88:C3:B6:A4:9A:B6
X509v3 Authority Key Identifier:
keyid:D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:39:4a:90:e8:70:1f:05:c2:dd:f7:31:0f:89:a5:6a:4e:2e:
12:86:29:cc:2e:cf:23:83:d1:cf:05:c4:c1:e7:90:7c:08:f7:
d7:f0:9a:c2:82:d2:97:f8:76:b8:1f:e4:52:41:9e:fe:92:c5:
eb:c1:39:c8:cb:08:5c:ee:7e:7d:37:a7:ec:50:0e:4f:cd:ab:
41:9b:01:59:90:a5:cf:d6:78:24:8c:6e:42:16:b3:71:b3:1f:
76:c2:58:71:75:f3:8b:91:26:bd:2f:4d:4f:e4:47:0a:2f:df:
f5:3d:7d:62:c5:26:54:01:17:a9:57:b6:4b:bf:fc:17:5c:ef:
5b:05:e4:85:3b:12:3c:dc:a0:42:6e:10:59:b7:ba:ac:5d:67:
86:18:ba:3f:93:d8:1f:6a:93:31:14:ad:5f:f4:05:34:e2:91:
1d:2b:72:77:59:82:c8:9b:90:58:3c:72:91:43:10:34:0b:30:
10:b8:0f:7c:7f:90:06:2e:9a:75:2e:87:f3:31:1d:9e:8a:5d:
a7:df:f9:72:65:71:dd:04:ce:ee:e8:1e:64:f0:51:8c:f7:b6:
51:f1:a5:56:e5:3b:a2:e6:6f:98:75:db:ea:b7:07:65:f5:0e:
21:c8:be:19:3d:a8:60:6e:37:7a:80:89:41:c9:bf:d0:ed:60:
52:b4:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:48 2025 by rpki-client