Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: AZXWpTh/IqOv+UMt+OTPo/8xYVxSm++A5lLMoZ3GoYg=
Subject key identifier: 17:54:10:B6:86:68:2E:8C:7C:37:5E:77:1A:94:42:E3:14:48:B6:CD
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 0195E0EB3E60BD6AB94501009E9406F90ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0C4F
Signing time: Sat 29 Mar 2025 08:01:07 +0000
Manifest this update: Sat 29 Mar 2025 08:01:07 +0000
Manifest next update: Sun 30 Mar 2025 08:01:07 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: mGIIrsfi6VsVpDHfV6yaAMXMAhIEU1SHzxU/UfEgzFY=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:3e:60:bd:6a:b9:45:01:00:9e:94:06:f9:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Mar 29 08:01:07 2025 GMT
Not After : Mar 30 08:01:07 2025 GMT
Subject: CN=175410b686682e8c7c375e771a9442e31448b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:8b:0e:ea:01:64:bc:4f:8e:54:79:7a:cf:
af:cc:50:67:cb:7c:9c:b7:39:98:5f:93:28:0a:fe:
64:c3:13:a7:68:60:42:7a:5d:b0:68:c6:4d:ea:4d:
9a:51:87:5b:97:99:9a:cd:a4:66:9a:95:d1:e0:11:
30:cb:fe:2e:f9:84:12:64:c2:74:fe:6c:f8:f4:2a:
8d:eb:e6:14:2d:cd:45:47:da:14:ff:e2:32:aa:a9:
c9:e3:b6:01:e4:8c:72:9b:4e:d7:b9:54:a3:40:89:
87:1c:08:f9:9a:a3:37:cc:89:ba:38:15:92:f2:9f:
ba:67:32:a1:1b:5b:bd:39:8d:f3:10:2e:88:70:63:
2a:91:c3:3c:74:f6:69:7a:d8:be:82:41:22:47:00:
73:5f:61:5f:41:b4:51:3a:d1:ae:da:a4:a2:26:46:
86:1e:e5:1d:5a:2d:e3:d8:4a:c8:ad:06:ad:a3:3a:
33:d1:be:1f:f7:75:1c:4f:35:56:d1:1a:15:54:ed:
1f:d8:25:9b:e8:6f:a2:6f:cf:3e:db:c3:1d:56:53:
01:cf:6a:b8:2d:13:8b:ca:66:82:7b:57:1b:8e:e7:
f7:50:d9:68:ea:6b:7d:21:e3:52:fa:96:35:41:28:
48:bf:d8:a0:20:0b:ff:61:65:23:5d:78:32:6d:19:
de:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:10:B6:86:68:2E:8C:7C:37:5E:77:1A:94:42:E3:14:48:B6:CD
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:15:8b:80:5a:14:74:5c:aa:f6:04:c6:3f:46:04:30:95:bb:
de:31:13:50:d2:32:b6:6d:88:87:12:5b:53:0d:81:40:61:b4:
f2:c0:60:bb:c2:94:c7:5b:8f:35:ff:2c:b1:46:c8:e5:2a:61:
7a:f2:2d:45:3e:a7:f5:d2:19:cf:cb:a3:5b:2b:bf:43:ac:ba:
85:40:16:3f:70:8f:30:e1:9a:68:0f:7a:cf:58:cb:b2:99:ab:
32:a0:98:e2:12:ed:69:f5:21:e9:b0:f5:ac:4a:96:99:b8:b3:
8e:4a:d3:45:fe:ef:23:47:1e:e2:ee:3d:98:cf:e1:92:9a:11:
22:8e:49:1f:84:10:90:06:cc:02:2f:bb:85:85:0d:98:4c:cb:
cb:e8:10:44:e3:0d:c7:62:a5:ec:2a:66:c7:cb:4c:cf:24:99:
3d:54:aa:69:e2:98:08:23:76:0f:e4:d2:e5:3d:24:5a:c2:52:
2d:2a:90:30:90:86:d8:01:0b:f6:20:53:a6:b6:9f:95:38:f4:
37:ea:69:39:cb:06:3a:93:ea:36:d3:82:f5:af:84:02:6e:b5:
93:5c:4a:95:37:04:7d:98:c7:2a:10:fb:b3:d9:ea:c1:4e:ba:
a8:cb:66:f6:00:ac:02:7f:12:80:cd:94:6d:c7:40:80:9d:a5:
dd:c2:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:49 2025 by rpki-client