Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: CArfKWABfBO4aDJGgeBftH/dSS4InalkVg5DpwmLYU8=
Subject key identifier: 05:9D:64:72:0F:B7:B4:CC:BE:B6:F1:38:87:C3:B2:53:C7:34:5D:45
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 0194BC051585F3C0558893468E2C85FE9C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1308
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: qLQrffCs11NOHzxJoyz6x3RB8k9wDdG5CaErr6POiyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:85:f3:c0:55:88:93:46:8e:2c:85:fe:9c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=059d64720fb7b4ccbeb6f13887c3b253c7345d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:41:61:e2:fc:bb:47:93:87:84:be:a7:43:
37:19:a5:77:0e:db:e8:5d:13:0f:97:40:7d:94:34:
3d:39:1b:81:87:69:ec:93:c3:9c:e1:5d:0d:1b:f9:
83:c5:14:0d:12:6c:d0:4a:8d:57:3a:c4:77:cf:73:
c0:b9:49:6f:54:0a:8d:f4:a4:ab:62:e1:49:f4:93:
b7:ad:2c:e7:27:e3:88:99:5f:64:3c:3d:83:67:f6:
c8:85:f2:2e:0d:3e:31:19:e0:50:ca:6c:80:74:df:
3a:f4:7f:74:7b:2e:c8:ab:90:5a:29:11:70:dd:0f:
f7:69:07:24:3c:cb:dd:b1:6c:13:47:ef:07:56:34:
73:fc:a4:e2:4a:12:7c:ef:1c:75:15:02:e5:68:b2:
03:2c:70:85:d8:ad:c5:f9:80:25:f8:4c:c9:df:97:
74:96:4a:59:91:3a:26:84:c7:a0:d3:da:03:23:10:
ef:ae:d2:12:d2:c8:4b:a8:d8:59:88:72:48:fa:4a:
10:c9:31:8a:fe:3e:46:4d:95:45:98:13:a7:fc:65:
35:97:bf:4b:db:8b:f8:0a:ff:c4:28:cc:7b:38:0a:
34:51:c2:eb:78:d3:b3:7e:1c:8e:9e:06:f4:1d:24:
62:df:8a:dd:98:20:17:bb:c4:11:ab:4d:1c:0a:77:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:64:72:0F:B7:B4:CC:BE:B6:F1:38:87:C3:B2:53:C7:34:5D:45
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c3:f7:c8:f3:ac:41:3b:2e:02:71:c5:a6:e3:f8:13:f4:60:
42:7d:cd:9d:63:d4:77:cc:4c:b8:0c:e4:16:07:57:04:f0:b9:
96:13:1c:0e:23:7a:88:c7:1a:6a:32:1c:12:fb:49:f3:36:9b:
34:f0:c5:f5:fe:a7:f6:2c:49:59:d5:f1:33:56:6b:5d:99:2e:
ee:ad:e3:6b:77:40:09:2b:52:e4:5f:3d:54:00:b8:0d:00:44:
fe:26:28:4f:b8:12:41:d9:8f:27:fe:45:4d:28:19:3e:8b:64:
62:67:d4:22:6d:08:37:35:28:d5:5f:31:ea:0b:b8:f5:c1:55:
c6:82:16:65:ce:92:b5:c5:2f:be:23:07:37:56:ac:11:53:e2:
45:26:d8:20:dd:11:3a:eb:22:df:b4:ab:d8:dc:c7:9e:82:87:
90:e2:63:dd:4e:4a:f8:f6:29:75:05:40:9c:6c:f7:28:e2:e9:
86:69:a3:d9:81:be:c1:81:3f:ba:11:b8:e0:0e:16:63:11:dd:
85:52:62:56:61:8d:5a:39:5b:eb:06:43:2c:6f:d8:f4:74:9c:
29:aa:ac:73:2f:f1:1b:53:9a:91:48:2a:ba:2c:54:36:c4:88:
0a:09:0c:d4:5b:d6:9f:8b:9b:4b:a4:77:f7:2f:92:cb:31:c0:
d2:3c:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:42 2025 by rpki-client