Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: HryAvVwb1sqLbGKU8eLEn+SdAsIOhrJpcXXsXgYh1Ug=
Subject key identifier: 03:E8:F7:2C:32:E7:AD:95:01:07:EF:07:8A:20:53:E8:3D:DC:84:2E
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 0194BBCEC43F41A8C33BC59BB28B7B972B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 10C2
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: 2NE+YfdKzA9eiAhobdPwBhIAYN6Rx8BJ93qjMXmKCWg=)
2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c4:3f:41:a8:c3:3b:c5:9b:b2:8b:7b:97:2b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=03e8f72c32e7ad950107ef078a2053e83ddc842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:6d:ae:ad:60:f5:5d:63:b4:ea:c7:93:e2:
85:37:8d:b8:66:98:c0:73:65:2b:c1:57:78:26:91:
ef:7e:81:f2:7d:04:d5:15:60:62:38:af:b2:70:f4:
e0:56:bd:69:58:f2:d2:41:2b:00:9b:3b:7f:ce:84:
75:9b:4b:a3:78:28:c5:d4:07:3d:01:7d:74:0c:29:
ee:8b:36:dd:bf:ba:bc:bb:4f:41:7d:12:96:30:b4:
85:c5:9d:bf:2f:6b:65:6d:f0:a7:e9:84:df:af:b4:
89:ef:61:24:c0:d5:65:7c:4a:1f:56:b0:4a:e3:de:
db:5e:63:a0:b6:e8:33:6d:77:e5:ba:87:e7:e8:cf:
26:33:1c:0a:6a:07:1f:4e:73:ef:66:9d:18:8b:17:
97:70:32:ce:e3:88:2a:60:91:4e:26:8f:e1:e0:9d:
e8:6c:cb:21:9b:2b:ab:05:61:1d:55:17:d3:e3:e8:
bf:0e:4a:20:c3:e3:b7:3c:e8:9f:d5:14:be:b1:fa:
2f:7a:04:66:f0:99:63:f2:ee:aa:9f:0e:df:0e:50:
39:c8:91:77:51:a3:8d:b7:92:04:26:c1:03:b3:5b:
e9:22:03:34:8b:07:02:e9:b2:86:b0:0f:aa:40:2a:
4a:3f:00:dd:29:38:08:0c:54:77:18:0c:6e:f4:d6:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E8:F7:2C:32:E7:AD:95:01:07:EF:07:8A:20:53:E8:3D:DC:84:2E
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:60:e7:6d:38:48:c8:2e:42:91:a7:91:b4:b3:19:11:46:d5:
36:97:73:3e:ea:7d:34:3a:61:fb:17:03:72:4c:57:85:ab:03:
12:7c:ef:52:d0:24:a8:d9:1c:81:f7:f5:4c:44:fc:28:d3:0c:
30:33:15:c7:66:fe:67:b3:ee:80:9f:16:ae:43:e2:29:16:28:
12:bc:89:52:b3:ff:1e:e8:c2:00:f5:b5:0d:a7:d1:08:b0:ca:
a0:9a:d1:69:45:df:d5:db:e1:50:91:26:75:41:9f:3c:4b:0f:
de:65:2d:a9:2a:ad:a5:1a:69:c3:e9:9d:73:c6:89:2c:d7:49:
17:e4:21:56:6e:2b:ff:ea:57:44:ea:15:17:1e:99:b6:27:68:
0a:9c:8e:be:90:c0:09:a5:c4:d1:73:19:91:a7:a1:cf:f0:cc:
da:f0:fc:45:64:e6:15:39:4b:8e:56:9e:3a:a9:8f:65:9c:78:
ec:6d:16:34:e9:d7:0d:68:68:73:ea:c3:00:ac:f8:1c:39:70:
e6:69:e5:77:97:48:d3:35:a8:74:df:84:62:9c:9a:73:7a:58:
95:61:eb:69:5a:e7:24:a7:49:d6:08:eb:ac:53:73:9a:97:63:
2c:0c:f1:6f:79:64:06:84:72:79:de:81:f8:0b:44:b7:a8:9b:
ea:3f:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:46 2025 by rpki-client