Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: dRa9EIdfo0lwJcOSg/V9sBNAJTRjnGYflPh2dbhpTPE=
Subject key identifier: FD:FD:D4:A1:7F:53:6B:F1:5D:C2:DA:D7:9A:B4:B9:04:7F:7B:A8:07
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 0194BC7293CA5A18A32DA45BD59561786F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 099F
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: FpDdZrXQdQ/yp3MayUwaOtxg51igAQwpKIME2keim4M=)
2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:ca:5a:18:a3:2d:a4:5b:d5:95:61:78:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=fdfdd4a17f536bf15dc2dad79ab4b9047f7ba807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:26:f8:02:2c:dd:29:b9:0b:dd:7b:2e:43:
2f:b0:66:0c:d6:92:e3:30:bc:8e:7c:e2:37:b4:7a:
89:f8:84:6b:69:b2:9b:74:de:d0:cf:9f:f9:92:70:
89:66:25:0f:42:77:40:a6:19:2a:1a:3e:54:54:5d:
55:70:6f:5d:a0:28:36:d5:38:26:b2:8d:5a:45:1e:
75:3b:ad:f0:37:52:f9:0f:c8:59:66:31:7c:ab:27:
1d:a4:fd:df:5b:c1:47:bb:7e:67:52:f4:73:13:0a:
eb:8f:c5:24:0c:6b:1a:4a:5b:25:da:09:c0:89:ff:
31:79:c0:95:6f:fd:65:88:01:bd:20:0f:83:18:2a:
08:a6:5e:5b:98:21:63:99:1b:35:95:9d:70:b7:4c:
89:33:c2:4d:21:10:75:50:83:65:54:b4:52:55:e3:
89:68:ef:0f:c0:e0:4d:fa:0e:1a:2e:c9:8a:fa:44:
80:24:df:7a:1e:e4:44:1d:1f:31:d8:5c:79:6b:28:
d0:8f:ed:67:0e:47:c9:7b:83:0d:f8:6f:51:5e:4a:
75:2f:04:6d:8c:fa:49:d5:9f:9c:6e:6a:ec:87:6e:
cd:94:3c:97:d6:3a:8c:75:23:65:a0:f6:b6:5b:a6:
f1:25:b6:0e:e7:11:7a:54:b4:a6:63:80:44:7f:6c:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FD:D4:A1:7F:53:6B:F1:5D:C2:DA:D7:9A:B4:B9:04:7F:7B:A8:07
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:66:a7:b6:6f:55:85:11:9c:41:c6:42:ed:32:e5:2c:a4:
ee:5a:6b:ad:05:fa:1d:df:c8:84:c9:47:c4:af:a9:44:c4:34:
e1:9f:bf:86:53:cb:c0:6c:84:6e:23:ad:9f:6c:4d:60:84:50:
95:70:7d:1f:d8:d4:c9:de:1d:72:fd:8f:84:3e:94:0c:dd:81:
d6:27:a0:1e:0a:83:46:68:0e:8c:42:86:8c:1e:11:e6:33:78:
2c:85:6f:fc:f4:f3:f5:47:ca:27:35:c5:79:40:4d:c6:5e:3e:
9f:b4:a1:c0:4b:2e:8b:9a:4f:81:9e:ad:dc:2b:49:3f:32:28:
96:b2:8a:4d:26:60:b7:e2:cd:23:07:97:86:6f:95:1a:07:f2:
f4:b0:cb:45:3f:75:9d:bf:f5:b1:cb:74:bf:a1:bb:b9:35:33:
a8:f2:43:03:25:ab:8b:3d:ec:ad:32:0a:42:7d:69:a4:80:c4:
8d:c9:db:24:d2:e4:55:d4:85:91:88:85:fc:3b:62:35:ca:f8:
4e:d9:50:f3:43:1f:7d:79:7e:67:fd:1d:5e:29:e2:0b:03:83:
b7:35:d4:cb:cc:2e:2c:a9:9c:7a:52:18:8e:89:98:78:b6:14:
b6:ab:10:05:f0:68:d2:5d:52:fb:ca:2a:1f:2e:e7:c1:3a:3e:
8f:dc:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:21 2025 by rpki-client