Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
File: 0J8gULc6LOfoLIPUdPvWHl83I1k.mft (raw, json)
Hash identifier: TzZWuUAT6RiO2gM8G1lYFwuGU3MoP6J9E5hzt0uSOqo=
Subject key identifier: 43:3C:1D:A8:AC:34:93:6F:D3:8F:80:F8:1C:15:38:6A:4D:F3:E0:8A
Authority key identifier: D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
Certificate issuer: /CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Certificate serial: 0195157F48AE9776EAB980456F408C0E66BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
Manifest number: 0945
Signing time: Mon 17 Feb 2025 20:00:17 +0000
Manifest this update: Mon 17 Feb 2025 20:00:17 +0000
Manifest next update: Tue 18 Feb 2025 20:00:17 +0000
Files and hashes: 1: 0J8gULc6LOfoLIPUdPvWHl83I1k.crl (hash: NhpQLGMe4T2O8QbN+CvrvGr7vvjAW/RtB0Y6sr+fHtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:7f:48:ae:97:76:ea:b9:80:45:6f:40:8c:0e:66:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Validity
Not Before: Feb 17 20:00:17 2025 GMT
Not After : Feb 18 20:00:17 2025 GMT
Subject: CN=433c1da8ac34936fd38f80f81c15386a4df3e08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:59:d8:3d:b4:ac:87:45:25:fd:17:ac:99:
4f:95:64:1a:58:9c:b0:39:9b:ca:5f:e1:89:5f:14:
47:f6:44:c1:3d:0e:fc:db:e4:e8:d3:78:5a:4f:46:
4b:b5:81:27:6a:1c:d3:a7:1a:68:fb:41:3d:82:6d:
23:30:e3:05:bf:dd:3c:3e:23:95:67:40:e4:aa:1c:
0d:bc:4e:16:98:85:1d:2d:f0:55:d9:9f:77:78:2a:
fa:9e:07:03:77:62:6a:24:9a:ce:f1:30:42:fc:07:
50:a8:a5:24:c7:93:f3:99:5c:b4:91:74:a7:a7:fb:
6c:6c:d1:ac:d6:1e:01:0b:a3:a5:54:66:b7:84:74:
0f:4a:cc:dd:d5:99:3b:8d:c6:4d:43:c1:e2:07:f0:
42:fd:3a:4d:de:85:fc:94:08:2e:fc:c8:a9:87:fa:
1c:5e:5c:1f:3f:26:57:f0:08:52:50:a0:cd:25:7d:
10:5b:62:db:12:e1:c6:76:66:c1:2e:d3:42:aa:15:
23:2d:ed:40:f7:f0:f0:e4:80:43:36:b0:eb:76:8d:
ed:01:2f:b2:63:e9:cc:37:4f:a8:d6:36:ed:63:0a:
a8:88:dc:9f:d0:2a:03:09:f9:68:22:e4:6e:ea:cd:
58:03:a4:5a:ea:2b:91:90:1b:16:a2:4b:fe:ea:b1:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:1D:A8:AC:34:93:6F:D3:8F:80:F8:1C:15:38:6A:4D:F3:E0:8A
X509v3 Authority Key Identifier:
keyid:D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:28:49:9f:52:80:ea:f8:70:89:5e:9d:71:e4:9a:a8:d9:41:
d7:40:91:93:bc:1c:6b:01:b0:a4:d2:73:38:f2:1a:62:1c:0d:
ac:04:77:a4:13:44:8c:17:6f:02:fa:fe:0f:02:9c:aa:41:ff:
fe:5c:d3:60:c5:05:aa:c4:0b:25:60:77:ff:23:55:f0:24:ae:
71:37:f7:c0:a3:a3:68:36:14:8c:3a:fa:3b:86:af:9a:e9:93:
d7:36:22:52:49:64:19:0a:81:db:ac:ee:37:c7:58:44:6b:86:
76:49:b8:69:aa:42:e9:56:60:93:2f:75:e0:8b:b7:d8:f5:2d:
2e:68:a0:60:d5:ac:f4:f4:2e:c9:71:99:5e:ac:c6:6a:0e:92:
44:23:55:50:68:da:c5:21:de:f3:da:79:1d:c1:63:ca:79:bb:
07:2e:22:f9:17:31:f1:e3:c2:46:42:38:c4:26:5c:e1:26:ec:
73:42:63:a7:c7:17:ff:e4:63:00:72:6b:39:84:1f:f5:99:dc:
49:bb:2d:32:35:27:b8:7c:ea:df:9a:37:e1:d6:72:7d:b7:3a:
d9:e7:44:6a:9b:19:ef:93:2b:0c:a0:6a:5c:0d:60:9d:2e:cd:
53:e5:b1:ee:38:b9:35:5c:a9:45:6c:08:0a:26:7c:a9:cc:0d:
35:52:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:16:54 2025 by rpki-client