Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
File: 0J8gULc6LOfoLIPUdPvWHl83I1k.mft (raw, json)
Hash identifier: yOdOBhkKs8hXUQNmaNyvXCC+ouoSIIyw9AB8YPTU3VU=
Subject key identifier: CC:2F:62:EC:37:8A:9F:83:C0:28:0C:B0:EA:B4:72:9C:47:ED:C3:6B
Authority key identifier: D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
Certificate issuer: /CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Certificate serial: 0195195C854C0A1364F10B20CCE4025CB9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
Manifest number: 0947
Signing time: Tue 18 Feb 2025 14:00:48 +0000
Manifest this update: Tue 18 Feb 2025 14:00:48 +0000
Manifest next update: Wed 19 Feb 2025 14:00:48 +0000
Files and hashes: 1: 0J8gULc6LOfoLIPUdPvWHl83I1k.crl (hash: EHT+50pn4BPIetgfuYrHSgiKoQ07zazKiohACn0Ppp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:5c:85:4c:0a:13:64:f1:0b:20:cc:e4:02:5c:b9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Validity
Not Before: Feb 18 14:00:48 2025 GMT
Not After : Feb 19 14:00:48 2025 GMT
Subject: CN=cc2f62ec378a9f83c0280cb0eab4729c47edc36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:16:40:35:ee:f0:f3:4e:2b:93:2b:ae:e7:
f0:5d:85:4a:c2:0d:76:7d:ea:29:0e:b3:a7:05:29:
b9:e6:fb:9d:1b:79:07:09:f6:e0:7d:31:bb:a1:55:
7b:32:a9:2b:bc:c2:d5:ef:fd:a1:51:32:4f:0c:8f:
81:56:39:50:a9:1a:ac:20:75:a4:f6:3b:b9:4e:89:
1e:23:2a:9a:05:c0:c0:72:9c:ea:9d:f2:7b:04:93:
01:0f:68:87:4e:16:57:1f:e3:f2:95:4d:15:f2:4e:
18:d1:ba:48:0e:bc:13:f5:fe:71:16:b6:be:fc:e4:
c4:69:dd:3a:53:0a:37:ee:06:c6:af:af:9c:a0:40:
4f:65:c5:71:8d:20:22:87:83:c7:36:4e:6a:52:ec:
ef:55:a9:37:5e:b0:a7:f9:8f:8a:71:3c:d2:2b:e6:
c9:eb:fd:94:2d:a5:f4:0b:f6:a3:fe:e6:d3:6a:cf:
0c:15:52:e6:07:74:ca:9a:c5:5c:d4:58:d4:fa:19:
70:06:49:fa:cb:f5:02:fe:1c:07:3c:f5:cd:3b:9b:
d8:23:f3:42:ee:b5:e8:68:27:09:0f:7d:ac:4d:c7:
7b:65:0e:71:9e:37:ee:7b:e5:8f:bf:6e:69:df:3e:
bd:3e:d1:04:06:5e:5a:66:72:ea:b3:64:a8:7d:97:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:62:EC:37:8A:9F:83:C0:28:0C:B0:EA:B4:72:9C:47:ED:C3:6B
X509v3 Authority Key Identifier:
keyid:D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8d:73:b3:90:28:3d:f4:63:b4:ec:7c:d9:0a:86:6d:e5:1f:
24:ff:f3:39:77:0a:ac:cb:63:eb:cc:e1:2a:ba:81:e3:5c:83:
02:56:83:e5:bd:8c:9c:3a:ff:34:b1:39:cc:1f:a0:ef:e2:de:
38:12:de:be:08:2c:d0:1e:22:29:df:db:16:f6:b4:33:4f:ea:
31:38:c7:22:3a:2d:80:75:3e:4b:ad:42:c6:cc:eb:bb:f6:73:
2d:ff:28:44:e4:b5:3a:9e:ad:d1:37:c3:c3:90:2d:33:86:71:
05:ab:54:7f:08:c0:2e:84:b0:95:43:98:b5:59:69:16:66:6c:
de:0b:20:d5:a7:e8:6e:02:be:7b:4f:40:34:81:58:fd:d8:c9:
92:97:1d:f6:ab:b0:91:e3:47:01:cc:36:53:74:f7:15:7e:4d:
0b:96:02:42:44:96:9b:5e:8b:55:9e:84:06:63:5a:82:18:f4:
e5:c7:6f:74:ec:01:d8:07:79:79:0f:20:38:06:73:80:cf:4a:
32:c5:f3:1b:cd:ad:ac:31:68:ec:c9:78:58:90:a2:f0:f0:66:
f7:a3:cb:c5:ea:3d:1d:bb:5e:cf:28:19:8b:e8:c7:0f:b8:e3:
11:3d:06:68:b0:dd:98:e8:86:0a:f8:52:72:21:13:f4:6c:b1:
0b:2c:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:27:46 2025 by rpki-client