Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: OPqFuCzyLI8aecxmYbhDemLU/20j9Vr67mJIPGvRz6c=
Subject key identifier: F2:5E:AD:4D:9A:E2:78:D8:FE:B2:85:9D:C4:D4:DD:3C:16:81:0C:D6
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 0194BD856F161E5274047AA12843E33EA210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 114B
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: tE3eBGvP4yUHLl83zuYZXXYR53+qxgLM5i7+aBimgZA=)
2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:16:1e:52:74:04:7a:a1:28:43:e3:3e:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=f25ead4d9ae278d8feb2859dc4d4dd3c16810cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:41:8c:a4:60:79:c4:c7:76:da:72:84:12:
12:72:03:65:69:51:99:24:89:1f:44:9c:2f:62:45:
6f:43:1b:5a:c2:66:8c:d5:56:fa:13:35:ca:cc:2f:
71:50:fa:33:cb:72:36:d3:24:b6:f7:21:54:b7:14:
63:56:4b:24:fd:99:f3:5f:62:b2:1f:6e:e8:61:9a:
07:7d:a1:28:1a:28:58:0a:43:3a:a0:9a:f1:b9:aa:
4b:7d:cb:5b:3d:84:7f:52:45:b0:23:d7:aa:35:6d:
74:80:e6:d5:6a:f8:67:28:5b:ef:94:8a:f9:00:a1:
81:55:f1:76:24:c6:89:c8:27:6b:9d:5d:16:0b:86:
de:c4:5e:ff:fd:0d:e3:2b:c6:9d:9c:de:e6:14:c0:
d5:8f:c6:d7:4b:f1:ff:11:d1:c6:7e:c0:60:43:be:
ec:57:4c:e3:d9:70:4a:79:8f:91:f8:52:0d:b7:8b:
e5:fa:8c:2f:d0:50:2b:86:7e:0c:ef:98:ea:0d:8c:
b2:b1:e5:05:b6:8e:47:87:f9:27:29:bf:16:b4:03:
dd:69:08:03:0e:c0:3f:e6:54:87:ba:ff:ed:94:88:
70:dd:dc:4f:33:ff:10:fd:1f:40:d7:3f:90:3a:b9:
36:14:4d:3d:43:46:90:2a:ce:d6:3f:b8:35:3c:05:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:AD:4D:9A:E2:78:D8:FE:B2:85:9D:C4:D4:DD:3C:16:81:0C:D6
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:92:1a:cb:85:0a:cc:fb:fa:5e:c9:d0:98:59:01:c0:b9:ae:
97:8d:0a:d5:23:a6:1f:f5:d7:44:47:4e:eb:1b:a3:c8:29:63:
47:fd:fd:58:3b:8f:ab:a7:fa:53:f1:85:25:23:a4:e4:f2:4d:
f1:91:c2:3d:83:13:9b:ef:2b:4b:49:33:51:80:d5:29:31:76:
bc:4a:09:09:f5:c9:e6:0e:cd:8e:11:65:d0:a0:b9:bb:aa:81:
76:68:14:c3:78:ca:09:18:b0:fe:b7:89:36:13:9c:44:8a:a5:
01:f0:78:c4:a3:c7:f0:b4:71:2d:7b:a4:1a:84:10:29:fe:ea:
ec:bb:37:b2:cb:f6:ca:c3:b8:fd:6a:83:21:3d:08:f5:51:cd:
b7:89:83:87:20:cf:00:99:50:2d:ad:8f:1c:66:63:87:3c:4b:
96:90:cf:50:73:a4:58:65:4a:59:cd:5b:89:96:d2:74:62:3a:
c5:29:55:b1:79:52:f6:fc:1e:fd:ab:73:57:e3:f8:43:14:10:
da:d7:8d:b2:5e:55:ef:db:71:c9:e0:23:35:c8:a4:e2:4a:4c:
fd:5a:9d:06:c4:0a:e2:49:de:2c:3d:33:95:1b:43:51:80:1f:
b8:bf:59:5e:97:8b:8b:84:d1:15:3e:50:ad:f7:43:8c:84:6d:
91:ca:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:11 2025 by rpki-client