Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: 8vXAtKVqvaJNB59uwEvNj/mBggo4L9JZdQELQleRSPw=
Subject key identifier: 50:4C:CA:B1:ED:09:22:0A:AB:0D:E6:29:14:3F:1A:FD:09:0B:CD:D5
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 0194BC72EEF7574FEEE27F8AF5B3D8C2FAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: AF
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: nVGonCVOBkp9hWtIKj1uZxHTKkjHZOQ8El33Sc8b4cE=)
2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ee:f7:57:4f:ee:e2:7f:8a:f5:b3:d8:c2:fa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=504ccab1ed09220aab0de629143f1afd090bcdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:00:b1:0a:ff:30:d6:4c:ac:ec:dc:68:1f:
98:7e:f0:0a:2a:36:ad:a1:7f:09:06:9d:e6:16:c9:
de:c7:64:dc:ae:a3:19:c9:d0:49:e5:e5:8f:85:11:
f5:0e:5c:46:3d:56:e4:1d:c5:9d:3f:0c:ac:9b:33:
6b:f6:27:c9:67:83:ad:d2:a4:55:a5:d0:2c:fc:a7:
74:71:65:17:a8:f5:d6:7b:65:0c:f5:9d:6d:32:43:
f6:77:a5:30:73:c5:6f:74:c9:93:22:b7:74:09:53:
25:bc:5e:1c:ec:14:6e:48:41:3c:03:bb:57:cb:8a:
90:c6:ae:24:45:66:89:32:54:21:76:f0:c6:eb:95:
53:60:b3:9a:b7:b3:d0:d3:86:06:26:d0:c5:04:c9:
e6:64:54:a4:13:6a:2d:5e:61:2f:69:70:fa:3b:0b:
e5:6d:e9:60:fd:a7:8c:b6:80:d1:cd:57:2a:ce:db:
2d:b8:97:8d:3c:12:8d:c6:9b:39:6c:72:5a:10:92:
1f:a9:c9:45:12:32:95:f8:80:92:a8:43:3a:71:e3:
4c:03:92:b3:bf:0e:16:a6:91:8e:fd:55:b3:f8:fa:
58:5a:d7:98:de:55:99:92:6a:63:2e:2b:c3:b8:5c:
f7:a3:be:42:b7:66:b1:dc:ed:11:17:aa:f6:8a:24:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4C:CA:B1:ED:09:22:0A:AB:0D:E6:29:14:3F:1A:FD:09:0B:CD:D5
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:67:16:96:82:6a:b7:ba:4c:6d:ec:65:e0:ef:20:fd:0e:
8a:e2:fc:bd:b2:1d:3b:37:b3:e8:fe:de:3d:bb:52:f5:80:24:
78:22:ec:01:2d:74:d2:1c:de:c2:61:1d:05:45:c2:30:48:39:
fc:8a:a1:27:67:47:c1:1d:62:be:2d:51:47:f5:3a:c3:a0:5c:
7a:b7:36:2f:8f:28:a5:1a:19:c3:28:28:a0:3a:aa:74:ab:90:
55:80:f6:db:cf:e4:17:36:57:ac:56:95:c6:ef:de:62:ed:46:
3f:56:f9:bf:15:e9:ee:c4:0f:22:ef:cd:a6:e0:e7:76:14:fc:
29:64:5d:30:66:1b:f8:b6:1a:24:9f:12:26:2c:5d:1e:0d:c1:
f4:39:b2:db:5f:d6:66:66:b8:51:5a:6d:05:1f:88:43:9a:3f:
4e:d4:53:b8:4e:51:1d:dd:8d:56:40:e8:c4:66:16:5b:e4:d5:
5f:30:c4:8e:a9:0e:22:26:74:4a:17:7b:12:4c:0e:5e:1a:8f:
64:d4:2d:80:e8:67:11:01:49:aa:f3:5b:e5:1f:56:83:54:96:
94:e9:d6:46:e1:3e:61:7f:61:ce:c6:da:65:a2:d0:ec:27:a6:
4f:0f:10:ca:5d:d0:ce:a4:5a:ee:66:0d:84:04:88:ae:00:04:
da:ec:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:46 2025 by rpki-client