Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: sFlWKW0aUZ2MPG3n+wiXQy3/MDuRw1v+W9yMfA0tlmA=
Subject key identifier: B7:10:55:12:60:E3:E1:CA:37:2E:59:15:0B:2F:36:5A:97:A5:43:CD
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 0194BC3C5352922DB6554A94A0F98B156926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 0A17
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: lvnlZ/mVktKnvSy2V8IRKEtRMeN5eO41xRrpCitPAjg=)
2: dQBlElXfO8pSdNwEKXjKZ-O9USg.roa (hash: S1t1SaIMwKXjVRHsk1Cwo0eWHwRLwztBGFQg3vgYpOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:52:92:2d:b6:55:4a:94:a0:f9:8b:15:69:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=b710551260e3e1ca372e59150b2f365a97a543cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:f1:5b:43:78:f5:64:e7:44:e8:ae:af:da:
f2:c0:a9:47:f3:49:12:4e:9e:87:74:6f:30:ea:e7:
3d:bd:7a:40:94:dc:d5:ad:47:77:82:97:bb:e2:53:
90:bf:c9:2a:4a:9f:72:b7:39:63:1f:f9:b8:04:23:
10:e5:6e:6b:5b:99:83:f0:b3:d6:f6:3b:69:35:62:
4e:50:5b:eb:c4:a3:53:4c:45:25:25:67:22:9b:78:
96:91:d1:78:c6:29:e0:e8:45:da:bb:98:9e:75:60:
74:ed:af:fd:4f:64:7b:d3:43:c5:bf:af:b7:9f:f0:
53:91:fd:e1:08:4b:83:84:7a:ab:6a:d7:0a:51:24:
b1:26:34:88:8f:40:26:b9:8f:48:36:06:5e:94:2d:
26:ab:6e:4c:ee:84:82:dc:d8:34:31:16:61:35:c6:
a0:dc:42:83:40:41:61:99:e7:d4:47:26:60:c3:49:
15:7f:ac:17:29:42:2e:e1:a5:a0:8d:58:d8:63:57:
b9:2d:be:2e:d7:34:33:f0:12:1e:8e:a9:97:b1:7b:
b5:1a:c7:ba:8d:75:47:f3:b1:c5:cf:e9:f7:90:1c:
c4:24:20:89:d0:a0:3a:39:fb:bc:ef:ca:e2:54:b7:
a7:42:60:cc:f8:b5:ef:8e:35:52:e0:39:17:bf:10:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:55:12:60:E3:E1:CA:37:2E:59:15:0B:2F:36:5A:97:A5:43:CD
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:1a:2e:8f:2c:c7:17:7d:50:2d:b1:65:4c:05:11:bf:de:
db:2d:0d:46:6b:09:8f:48:32:d4:06:d9:d0:18:6e:ab:1d:03:
65:18:28:4b:52:44:23:bb:39:dc:6a:1a:4c:41:53:66:ce:3b:
c8:d9:5c:ec:60:3e:67:71:31:27:78:5d:1d:37:69:73:5a:d9:
79:0d:bc:7e:8f:43:32:ee:4b:94:f4:a1:64:85:91:10:d2:34:
ff:40:d6:59:2c:a5:8b:d6:b0:77:46:11:9d:a1:c0:b2:dd:f0:
ed:8f:a1:b8:75:e9:2e:b3:88:2d:9d:4b:a7:c9:dc:b4:44:34:
5a:64:ef:0b:d6:b0:a7:a5:a5:2b:ef:11:f6:2a:37:24:cb:90:
73:cd:da:92:fd:20:40:17:9d:6e:0a:8a:57:9c:17:15:e0:68:
1b:73:f6:6d:44:0b:bc:b4:5b:41:cf:46:60:df:cc:0d:28:5b:
df:da:0c:c7:ef:f9:cc:c2:c1:53:ab:13:8a:8a:c4:66:bf:3f:
ef:a9:aa:ea:7a:dd:ae:fa:0e:8c:0c:8b:56:2c:a5:5f:64:e4:
11:b2:3c:2c:a7:e8:51:75:e2:92:cc:ef:e4:58:be:04:92:a8:
85:e4:5e:e3:d1:a5:17:96:5a:3c:92:fc:a3:29:cf:15:cd:12:
9f:a4:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:26 2025 by rpki-client