Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: yzyE1CD+mMwZBwgsWpAfzsKLe3TqvBM3rZ1QFeq4cuU=
Subject key identifier: 64:E4:05:69:19:0B:7F:75:F7:61:4A:8D:5A:FC:4D:2A:38:9D:1B:5E
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 0194BC731D4DA1BD8CA79447162B6CA10135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 0E65
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: ZmW/IsGoHjQ3B75Ubwa6bjWHm5oZ6pA2LyCJb4SMfi8=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1d:4d:a1:bd:8c:a7:94:47:16:2b:6c:a1:01:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=64e40569190b7f75f7614a8d5afc4d2a389d1b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:23:6a:88:58:90:cf:bc:9a:6d:39:f5:4f:
18:0c:23:1d:7b:38:f7:d3:2b:c4:7a:23:c7:8a:e1:
1f:b3:7e:59:ca:0a:d7:d7:bd:82:43:65:bb:b7:eb:
55:5e:2e:09:27:98:64:9f:18:c7:3d:56:c3:dc:5a:
91:83:7f:6a:c0:9f:1b:c3:d8:4f:58:29:95:df:25:
bf:45:f6:7d:b3:09:69:7d:91:12:01:29:3d:0c:71:
e4:e6:ff:7c:3a:9a:2a:0e:fe:f9:9b:35:41:30:71:
fc:37:bf:21:60:cf:9f:f1:f8:88:17:d3:40:1d:70:
26:6e:e4:17:cd:bf:36:a9:c9:37:91:6e:be:54:44:
25:4e:d9:20:0b:06:3f:b7:23:e9:60:77:20:2b:72:
e9:a4:8a:48:1c:4f:71:8d:6e:d7:1e:45:81:9e:58:
c8:87:06:2a:83:ca:50:8c:d5:9b:1b:56:3b:af:c7:
bd:e3:01:e8:be:29:b2:27:f2:96:2f:1f:c5:7e:2c:
a6:53:a5:70:bf:ac:7e:38:81:53:33:64:79:f5:8b:
d3:12:9e:42:34:f9:da:33:99:4d:cc:f3:9c:a5:f9:
36:cd:03:a7:e4:be:6c:a5:0a:b6:16:de:e0:e1:a5:
95:00:24:0a:9d:36:ce:2f:dd:7f:58:36:bb:3e:bf:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:05:69:19:0B:7F:75:F7:61:4A:8D:5A:FC:4D:2A:38:9D:1B:5E
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cf:52:11:d7:bc:96:00:b5:58:25:9f:91:32:20:7a:ec:3f:
47:24:5c:e3:d4:b1:96:f9:ed:e0:40:d9:8c:35:bd:ee:1d:26:
00:c9:e8:fe:d3:a2:b6:bd:b3:89:6d:d4:e7:c8:6d:93:7d:a3:
23:52:c1:c8:c5:0d:1e:32:bd:63:cf:3b:6b:f9:3e:80:8d:08:
b4:8b:92:8c:bb:7b:05:4b:ec:12:d6:bc:9c:4a:d9:7f:63:d3:
ff:7e:ee:a7:b5:ff:23:6c:a1:2d:49:5d:96:03:06:9f:8d:6c:
a2:b1:e4:18:22:7f:5d:45:92:cf:a8:e8:3d:16:6a:c6:ff:4c:
07:3f:16:9b:d1:56:53:84:ce:c1:b7:2c:05:76:a0:ed:bf:b4:
59:7c:15:24:18:81:fe:46:39:56:10:35:64:4f:bb:99:0b:15:
88:cf:d6:5d:1e:16:09:7c:a4:9d:59:33:a0:49:fe:45:9d:07:
e7:d9:d2:f2:30:f7:5f:a6:31:db:84:d1:ad:55:35:d7:76:e8:
47:f3:c1:c5:6b:26:8b:88:8e:8f:40:c5:4e:15:76:59:f3:36:
66:99:1c:dc:36:5a:8a:75:61:70:f2:6a:7f:eb:94:94:40:77:
30:cb:45:48:fb:a8:de:22:b4:f3:89:73:49:89:58:1c:41:0f:
91:6c:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:36 2025 by rpki-client