Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier: I5om3BBroZb/NOCqJRgqgUALmOcNOqlprLpxamWXohk=
Subject key identifier: F6:B3:D7:0F:23:14:4E:C0:07:E3:75:74:8B:4E:12:2A:D3:98:E8:8A
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 0195E0B45079487E97C074D1E6051A47B05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number: 0921
Signing time: Sat 29 Mar 2025 07:01:08 +0000
Manifest this update: Sat 29 Mar 2025 07:01:08 +0000
Manifest next update: Sun 30 Mar 2025 07:01:08 +0000
Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: 3igQkP56a7GisT/U0MtqGLxuBHWks+Y7O/kC8mGkyFc=)
2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:50:79:48:7e:97:c0:74:d1:e6:05:1a:47:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Mar 29 07:01:08 2025 GMT
Not After : Mar 30 07:01:08 2025 GMT
Subject: CN=f6b3d70f23144ec007e375748b4e122ad398e88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:b8:d8:dd:e1:ca:93:df:e4:ff:c3:f2:4e:
98:0d:f3:1a:ad:bc:55:b0:65:a0:51:7b:51:5b:ff:
6a:0e:95:31:e3:2a:9a:87:54:eb:82:4f:ee:53:0a:
8d:48:72:2b:ea:d8:34:91:95:c0:ac:f6:87:e3:9a:
49:62:3b:9f:4c:54:79:31:2a:22:80:40:0d:cd:ec:
fd:23:e1:c6:38:a4:02:a8:c2:73:f4:7a:1b:9e:d8:
37:cc:c7:7b:18:e0:e9:8b:b0:12:ac:d8:3b:22:7b:
f7:21:bc:d9:09:0f:0a:24:b9:d4:a0:2d:6f:e8:39:
c9:2f:34:d8:ff:a5:a3:91:85:81:55:ae:89:39:7f:
b8:d0:a1:b0:c6:bd:a3:c9:7e:3e:d6:b1:3b:e1:2d:
fc:c8:62:42:51:a7:f6:3c:bc:18:b3:ae:90:c2:32:
c6:15:21:52:97:d6:81:90:8a:5b:0a:81:31:63:46:
64:a3:33:47:6e:cb:2c:59:02:e2:29:84:04:0d:e5:
a3:53:4f:30:f1:ea:00:1c:f6:e2:b8:ec:ba:07:ef:
03:ff:18:a7:f3:98:2f:ff:5b:aa:f0:29:ac:4f:b1:
8b:6a:88:2e:aa:08:d8:1b:db:1c:22:2c:95:ce:c2:
db:b1:1e:4a:6d:d6:aa:34:9f:61:a0:ec:70:44:b2:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B3:D7:0F:23:14:4E:C0:07:E3:75:74:8B:4E:12:2A:D3:98:E8:8A
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f0:fb:5d:64:2f:5b:33:61:12:3b:da:f0:87:99:a2:9e:b5:
2a:6a:a3:d0:da:91:a8:e7:1c:ec:6e:e8:02:ed:ee:59:ee:e5:
2e:81:25:e2:df:1a:98:f5:2a:54:3b:2d:1b:7d:83:ef:b0:5f:
45:91:b5:1a:60:87:6b:81:06:05:4c:cc:19:00:f0:dc:22:02:
b3:51:00:35:59:1c:ec:89:23:82:e0:80:79:a2:7c:f9:5d:6b:
05:1b:64:60:9a:32:a9:b3:f7:6b:b9:5f:12:81:da:87:6e:ac:
f9:f8:d5:4a:07:be:05:33:24:e7:92:67:7b:1b:ff:36:5c:f5:
18:a8:f7:19:37:38:0e:bf:96:54:df:e2:4b:f2:e7:cf:2e:5c:
ed:51:ec:72:9c:92:d3:ea:7e:b1:08:6a:56:e3:69:b3:f5:4d:
66:31:32:82:db:16:f0:7d:26:9e:b8:bd:31:20:28:ac:cd:f1:
89:e6:36:80:19:ad:84:c9:77:4c:29:f2:da:ff:4f:6c:ae:91:
49:7a:f6:5b:9b:ba:0d:09:37:e2:09:58:8e:fe:24:d6:5c:0b:
d7:f8:af:6c:ab:ce:fd:77:31:17:ac:5c:5b:9d:09:54:ae:a6:
63:4a:9f:5f:ff:c2:cd:df:b3:6d:cd:9b:01:fd:6f:29:1c:02:
2c:41:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:13:01 2025 by rpki-client