Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: L0upLGtXq5I3mvVx+N9Ozk3XxUJqxrtqdd5Gh0SQPCI=
Subject key identifier: 0D:84:00:B7:62:51:79:03:DD:42:35:3F:D2:35:D0:C5:59:AA:36:86
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 0194BC3C4098D950F6B7C608EF568C7B4599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: R3zcjvzScWwNw8xzr2PXTy8EHRNZab9cASJZ1rLl/iY=)
2: TWeGvhRSmnN9ba3aLN_PX9mER2s.roa (hash: 6BkkLF5ZMW9w4BTie7IiuTOLhKMimv1AW7aDs2REbaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:98:d9:50:f6:b7:c6:08:ef:56:8c:7b:45:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=0d8400b762517903dd42353fd235d0c559aa3686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:47:e6:e7:64:09:d1:04:72:4f:b8:48:a8:
24:fc:88:c3:f3:99:97:44:01:41:6e:22:91:d2:64:
a9:eb:6d:76:d4:c2:97:1d:18:84:df:4a:a2:9f:c6:
75:0e:20:f0:57:36:f4:b2:5f:57:af:37:2d:c1:96:
70:d7:e6:12:36:2a:f4:e7:a0:42:49:20:8c:9e:eb:
1f:8b:6f:ce:83:a1:40:7c:3e:9f:54:5f:6c:e0:93:
bc:8b:35:72:9c:fa:f3:0f:d6:f3:d0:1d:90:83:57:
54:62:fc:0d:27:b8:dc:12:9f:ea:4d:24:da:4a:5e:
ae:e6:b4:16:26:b4:df:06:31:4d:55:5d:8f:f2:ef:
0d:30:0c:5a:bb:cd:26:3c:99:7f:9b:c7:2b:c1:f4:
a4:85:e4:29:38:fb:7f:4a:f1:97:0b:87:0e:2b:6e:
7b:6f:24:91:da:e4:d0:29:8d:31:a8:59:30:aa:ed:
67:6e:6c:38:7b:d6:44:2f:eb:86:97:fa:ab:34:3f:
cd:08:6b:b7:19:0f:45:af:84:c9:2f:19:9f:e0:d0:
0b:d2:5f:bd:4e:52:65:29:35:19:99:c4:8f:94:74:
0e:14:29:ad:22:fd:ab:72:59:8b:67:89:c6:0e:92:
aa:48:af:4a:9d:49:4c:ef:47:45:60:22:d3:66:05:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:00:B7:62:51:79:03:DD:42:35:3F:D2:35:D0:C5:59:AA:36:86
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:67:14:d6:09:81:fb:dd:3d:c2:92:aa:e3:38:bd:80:b1:
8c:a1:82:ff:ac:36:0c:12:f4:76:a5:75:f9:92:28:67:d1:85:
24:c4:71:07:e3:3f:ea:0b:94:42:74:26:49:3f:f6:f7:e9:ad:
ae:e8:69:57:ab:9d:23:40:58:69:c2:96:8f:11:89:23:3f:57:
24:74:37:ca:81:80:7b:12:cf:16:de:e8:94:ea:80:54:66:60:
c9:07:15:96:56:c2:79:d3:38:bc:78:d5:30:b8:fb:de:2c:5e:
65:f3:41:aa:26:74:a4:e3:73:98:9b:0e:9b:10:9e:04:88:23:
84:03:76:7b:4d:94:49:fe:33:3a:0f:af:8b:c6:88:e9:24:47:
40:89:88:56:89:b3:fb:28:e1:02:9e:8d:bc:99:ea:4d:49:78:
1f:1f:27:78:33:b3:db:f7:3f:77:6e:84:c0:46:b8:b0:5d:40:
db:85:1d:b3:7c:4d:c0:23:43:b3:95:f9:79:d6:a9:c9:de:75:
23:fc:23:11:c6:b4:2c:46:8b:55:9d:80:72:dd:2a:0e:04:44:
f5:37:83:d9:7a:bb:5e:11:03:c3:b6:88:ba:a9:f9:47:56:28:
d0:35:72:c5:15:fc:9c:ff:3c:5c:f4:7b:9f:4a:20:e1:19:6f:
94:26:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:49 2025 by rpki-client