Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier: oZ9Zl2STXrXqb+97KFjF9KMvOKyrkRt3sLz+CKUKlo4=
Subject key identifier: C8:B4:80:87:8E:05:1A:6A:AA:FF:B6:8D:C1:65:E7:36:6D:30:E5:64
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial: 0194BD4E7E47DAA089F4EBDF23B5B7CEE740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number: 0219
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: Q1hBtrsZo8aBnaLDzcGS+9P4rOh9OdhVFNdynptEDoA=)
2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
3: vGKjbeI63RzXbx2moMgZ88gkL0o.roa (hash: 78K41RNch9PgQsEO5vrAtY0Bw9PWHwlD6lBB0OVTon8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7e:47:da:a0:89:f4:eb:df:23:b5:b7:ce:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=c8b480878e051a6aaaffb68dc165e7366d30e564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:74:18:59:e6:03:5e:a6:72:ed:82:c3:26:
df:2f:fe:54:4f:ba:c1:8c:a6:b6:52:76:db:2c:da:
ea:b3:b6:5d:1b:62:bc:7d:83:aa:ed:93:9c:8d:2e:
74:bc:b0:b8:80:2c:45:df:85:b4:49:93:b2:bd:fd:
f5:5b:3d:83:44:06:6d:eb:95:c6:e4:82:f4:fa:88:
4b:b3:d3:7c:fc:ac:2e:45:13:1b:eb:48:ce:fe:9c:
40:81:d0:30:f9:f0:8e:0e:58:9b:1c:f0:ff:80:3f:
4d:80:28:1f:f3:85:16:81:84:a5:e6:bc:50:ff:94:
f9:9a:99:dd:cf:0a:db:e4:e3:48:ab:0b:d4:76:6b:
d7:0a:90:1d:24:19:09:0b:18:03:04:05:37:94:a7:
79:95:93:69:a5:5d:88:2e:82:11:de:5d:b2:28:7d:
0b:5f:5a:65:b2:cc:6f:8e:e8:6e:c9:82:a9:86:80:
a3:d9:e6:17:56:25:d2:1e:6d:4b:7a:32:5b:cd:97:
40:8b:95:69:43:d4:a9:77:12:82:95:66:18:b1:f0:
b2:1c:f6:40:17:58:e3:7b:a5:27:8d:3a:b8:ff:4f:
10:13:ea:bd:4b:b7:ca:e6:82:64:f0:0f:1a:ae:97:
aa:f9:ab:03:bc:84:eb:ae:d9:77:43:cb:42:21:13:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:80:87:8E:05:1A:6A:AA:FF:B6:8D:C1:65:E7:36:6D:30:E5:64
X509v3 Authority Key Identifier:
keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c5:5e:01:94:b9:11:5f:9c:ff:1e:1f:4d:72:50:0f:ed:8f:
6a:c3:47:f0:cd:51:b4:d6:9d:f8:33:8c:9a:92:59:75:b0:87:
cd:64:59:ee:f7:f3:68:db:de:d2:7a:89:8b:e5:3a:d1:fd:12:
02:13:8f:bd:3a:33:16:26:8c:a1:2b:4e:5b:84:10:40:1a:78:
3e:47:e4:a1:96:ef:96:7b:56:6b:52:26:37:33:a3:87:a2:42:
75:0a:45:d0:97:68:46:5e:04:24:a8:55:d4:7c:16:cf:1a:34:
24:cc:27:09:02:6f:ef:14:aa:51:c6:78:36:26:33:18:d2:01:
5e:80:fe:89:d0:ce:89:33:d3:98:dd:89:88:98:24:04:6e:db:
e2:0c:80:3c:2f:92:bf:0d:54:7f:de:bc:40:c1:29:f6:df:d3:
54:45:4b:a6:d1:f3:ee:17:0f:47:55:02:86:a5:dd:10:fd:6e:
88:79:4e:38:d8:1d:43:d1:5c:01:9b:26:45:0c:10:40:c6:e4:
92:5b:31:7e:58:5a:ce:51:a9:08:05:05:0d:da:dd:39:3b:06:
bd:b6:3c:c5:b2:64:9c:13:a7:4e:6b:42:87:3f:98:1b:24:a7:
d7:aa:4a:76:f2:d4:3b:da:fd:1b:21:89:94:d4:e5:5c:ef:fb:
ce:f6:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:45 2025 by rpki-client