Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
File: 0E45j3kEn2u7gzOBCoFhyXiWKiY.mft (raw, json)
Hash identifier: hyq7BJRkX0DjiKoyF4h9tuzM0QiidSM5G4Wb2Fet3rk=
Subject key identifier: 06:8E:A4:84:5C:B9:39:23:9A:B0:88:CD:51:94:ED:0E:14:35:A5:7C
Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
Certificate issuer: /CN=d04e398f79049f6bbb8333810a8161c978962a26
Certificate serial: 0194BC3C384F527E0F2591A6FBC5A367776C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
Manifest number: 0D26
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: 0E45j3kEn2u7gzOBCoFhyXiWKiY.crl (hash: YTYFcIGRgLMbNl2usxIPe151PDV7qWERJ2vZOP9iWbs=)
2: fmJrqNi3AK7xf-5ry-ZR1hvBtQQ.roa (hash: R/N1KJCx1ZG7TAbnbY1p8xT86HawFSAUgAukKuDa69o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:38:4f:52:7e:0f:25:91:a6:fb:c5:a3:67:77:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=068ea4845cb939239ab088cd5194ed0e1435a57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:0c:85:4f:ae:2c:73:2b:7b:4f:24:98:f9:
05:c5:bf:50:db:29:e0:5b:af:5c:de:8f:b5:29:fa:
6b:72:dc:e8:d4:76:b8:8d:fd:ac:89:f6:e0:76:1d:
78:26:ed:24:92:f1:f0:b2:26:49:b4:3e:02:50:f7:
e4:c4:96:46:ad:10:3d:57:8e:d0:73:02:b7:b1:72:
4f:6c:25:39:a4:84:63:d3:54:ef:85:9f:eb:11:39:
77:ab:ce:ab:25:49:41:31:be:0d:64:36:75:fc:3e:
00:ff:71:7b:35:8e:5e:02:1d:23:7b:cf:dd:b4:53:
dc:39:a2:a1:48:bb:58:14:be:44:f2:9a:25:1a:a0:
8f:5a:c7:d2:71:28:9a:8b:a3:79:09:1f:83:37:80:
69:eb:a8:ad:42:71:c4:3c:a6:a6:a6:3d:74:8b:ae:
00:d7:e5:f3:e6:b8:b8:37:9f:bb:f0:ba:bc:99:95:
81:f4:5b:a1:31:8d:c3:de:fd:3f:34:90:0b:b5:a9:
ea:42:e7:ce:96:76:76:b9:c7:78:a9:d2:69:34:6b:
af:ac:10:51:e0:ea:f9:d4:06:e7:33:5c:c9:d1:5a:
c0:c2:a0:52:e5:79:7c:02:69:d1:0b:08:a7:0a:31:
eb:42:2e:63:c0:23:47:a5:4a:d1:bc:d5:55:10:dc:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8E:A4:84:5C:B9:39:23:9A:B0:88:CD:51:94:ED:0E:14:35:A5:7C
X509v3 Authority Key Identifier:
keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b1:19:a4:57:48:a8:24:05:97:f9:a6:6c:23:a0:67:eb:46:
d9:87:83:ae:b7:53:9d:c7:e7:dc:76:1d:67:94:0e:69:31:3a:
75:95:09:0f:b6:5c:89:bb:b5:8f:7a:a9:07:37:b2:d4:53:0d:
99:68:e7:b5:86:82:57:e0:35:ee:64:e4:87:3a:97:a0:7f:58:
4f:3f:9c:d6:f4:94:86:23:e0:60:41:24:27:0f:1e:90:f6:af:
36:23:ef:76:62:d3:4d:09:98:42:b9:c0:78:aa:c9:82:4f:98:
82:a1:d1:db:62:e8:89:8b:0b:e8:7f:ec:84:55:84:9f:e5:4a:
f9:df:13:46:06:b7:e7:94:e7:03:d8:fc:88:da:ec:b2:a9:00:
2e:aa:5a:22:d3:98:00:2f:7e:30:8e:ee:5b:05:94:e3:15:c7:
20:8b:de:d6:97:de:17:b9:95:37:ab:16:4c:55:48:7d:22:bf:
c0:90:b7:97:e3:32:82:9c:b9:d0:cb:33:33:c1:01:2c:98:4b:
6d:3f:1b:7e:e7:b9:90:b4:d2:97:c8:69:7b:61:5e:f2:58:ae:
a6:da:3d:41:b0:0e:88:4d:ea:f0:08:36:f1:d2:2a:e1:63:e0:
fb:72:d6:f0:f8:66:63:72:48:00:10:b7:5c:30:0c:b9:a3:a7:
07:92:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:07 2025 by rpki-client