Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier: oQhEF2cwmjgx+igUeh5AXcKd1Jih7gbj4HkqIHALTv8=
Subject key identifier: 23:13:43:A8:29:E7:FF:0B:9E:A0:AF:07:06:D2:72:C5:12:F9:AB:4D
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer: /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial: 0194BD17E6F50D4D1492AC6CCFE35936318B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: vC/bcdkQ31zqQyhuwqxsd6sIfwfvJVKJIwyEVBWKFU8=)
2: aLQQDXXyyFCFCxYHC8_say5CLUI.roa (hash: zI2tGfqAmXq7ygJfVvFOBT2dePoqj3hccAoRf3t6VUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e6:f5:0d:4d:14:92:ac:6c:cf:e3:59:36:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=231343a829e7ff0b9ea0af0706d272c512f9ab4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:31:f7:70:0b:8e:cb:79:4b:15:7b:39:a7:
bd:35:b6:bb:61:72:63:85:17:69:36:9c:22:68:44:
fa:5d:0a:7b:7a:33:c9:de:11:a5:61:4d:e5:94:b9:
4d:c0:78:69:5e:bf:02:62:9f:9a:0b:01:67:17:65:
1d:2f:bc:51:95:fc:88:ca:db:71:be:34:f6:4e:30:
d0:59:41:85:aa:23:91:36:8d:49:c6:15:da:23:05:
fb:81:68:35:31:b7:60:5b:ed:34:01:c5:e8:23:c2:
ed:f4:be:71:2c:75:ef:47:7d:e9:2d:e5:d4:c4:db:
3d:1e:a3:aa:25:01:ba:1a:08:83:6d:67:fe:90:52:
e3:88:af:3e:e7:15:b9:2f:24:b2:35:ef:25:ac:7d:
db:0c:f3:bc:8b:fa:ab:5a:2c:09:f6:a2:78:bc:00:
da:0e:98:63:8e:cc:87:3c:07:cf:04:49:f2:0c:24:
ed:8e:b6:20:df:e4:2b:67:b5:c8:20:44:17:ba:43:
70:ee:d6:b6:53:ff:00:60:a1:5c:14:69:8d:5d:56:
1c:bf:38:47:4d:92:c6:f1:8c:79:22:0f:a7:40:ba:
9f:fd:ba:2b:76:8f:76:38:5b:2e:33:e5:53:86:f4:
78:20:b2:37:51:01:04:eb:ba:8e:ed:1c:78:62:97:
7e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:43:A8:29:E7:FF:0B:9E:A0:AF:07:06:D2:72:C5:12:F9:AB:4D
X509v3 Authority Key Identifier:
keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a0:90:1d:99:dd:a2:65:0e:c9:ba:a5:21:ff:91:0b:1a:9c:
7a:e9:bf:14:b0:f5:0f:79:17:23:dd:4e:ae:bb:27:61:6f:d5:
fc:ae:fa:68:99:05:4f:2d:85:2f:1b:9f:2b:ba:0a:71:6a:b6:
f8:37:d3:bb:48:1c:38:f1:76:f2:a7:a1:63:6f:9e:d4:ad:b6:
43:12:03:c9:20:cc:b4:04:0b:bb:4d:2a:2f:33:b8:3f:9f:d2:
c2:95:df:4d:bd:47:81:55:55:02:2f:79:6c:86:5d:84:1e:4e:
b6:01:0c:6f:36:02:b0:91:16:28:ba:91:8c:43:00:1d:d3:08:
44:61:1e:96:fe:a3:0b:57:5b:dd:e4:f0:30:7a:8d:96:9c:d3:
8e:8e:8e:9e:6c:15:07:a9:b1:4e:bf:73:aa:f9:fb:07:aa:41:
7a:39:22:d8:d7:7c:a5:3b:32:c0:f9:97:7d:68:b0:af:97:9f:
77:af:6a:5d:ca:a8:48:56:59:a7:73:09:2e:48:b8:3e:c5:e0:
a1:5e:82:58:5e:bc:6f:ff:8b:31:d7:40:12:81:83:9b:88:06:
a6:a4:78:cb:d7:a4:4b:c9:60:6a:fb:e7:84:f1:f2:bb:c8:f3:
c5:da:f9:dd:dd:7b:82:4a:87:22:e9:a7:34:d2:b6:96:8a:42:
d1:6b:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:29:30 2025 by rpki-client