Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.mft
File: 0t4F08p1DdXCfuv6VTnCC30oKc8.mft (raw, json)
Hash identifier: Hg3mEVpATebUCE45JrN06z8xvW8+Qagi+tdv/QeGCok=
Subject key identifier: 0B:14:27:85:22:B8:C0:9E:F9:70:66:83:CD:AC:4D:B7:91:FD:60:27
Authority key identifier: D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
Certificate issuer: /CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Certificate serial: 0193F709D44A95240768F4596634375F2DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.mft
Manifest number: 0CD5
Signing time: Tue 24 Dec 2024 05:00:36 +0000
Manifest this update: Tue 24 Dec 2024 05:00:36 +0000
Manifest next update: Wed 25 Dec 2024 05:00:36 +0000
Files and hashes: 1: 0t4F08p1DdXCfuv6VTnCC30oKc8.crl (hash: 8OBoLnt/9aKrrU15jzkljNQBiig/k5de9XY/kDjt6VU=)
2: YB7ue_BCyqpGwU2JA2Asj_44NjY.roa (hash: Q9TuJ2ywhn6QpmgagotpSS09bcX6fm24UjcF7fWIqhs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:09:d4:4a:95:24:07:68:f4:59:66:34:37:5f:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Validity
Not Before: Dec 24 05:00:36 2024 GMT
Not After : Dec 25 05:00:36 2024 GMT
Subject: CN=0b14278522b8c09ef9706683cdac4db791fd6027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:af:04:da:6a:ce:e2:57:dc:8b:e2:10:15:
83:db:c4:f6:80:e3:9a:25:37:c2:c8:55:88:1a:df:
0b:08:9b:be:d4:54:76:9a:c6:4a:94:2c:73:cd:06:
e6:ac:62:2a:61:3e:9a:12:b5:c4:f3:59:db:c7:96:
d3:d3:03:2e:2d:e0:61:eb:86:7f:b1:c2:46:02:dc:
46:9c:9a:23:f7:e2:38:9e:7a:5e:3a:0c:d5:74:0f:
e9:98:0f:9a:4a:46:f8:cb:39:50:d5:25:f1:f0:1e:
a2:9b:8e:cf:0f:da:d7:cc:ea:14:b8:ea:9f:c4:98:
65:25:b7:2b:91:75:ca:96:1b:b1:d4:d7:e7:95:2a:
36:95:49:f7:d3:21:e8:9c:fe:da:f4:b0:ec:aa:96:
24:70:d4:56:bf:53:41:8b:03:16:92:f9:b3:ae:17:
f2:38:85:a7:70:80:b5:30:27:a4:ab:d5:52:08:fb:
ce:c2:36:d7:2e:59:4d:a4:bf:60:b4:3b:63:53:86:
b7:4b:be:3f:67:dc:cc:19:1e:6f:50:b4:48:5b:d1:
8c:8e:60:af:e7:48:38:06:10:c4:ac:79:13:ae:ed:
48:48:4e:be:39:44:e3:3a:3c:cd:f9:e9:84:5d:87:
f3:0e:a4:e0:d2:81:5a:d8:0f:e3:b3:d2:6c:d1:b3:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:14:27:85:22:B8:C0:9E:F9:70:66:83:CD:AC:4D:B7:91:FD:60:27
X509v3 Authority Key Identifier:
keyid:D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:16:57:f9:75:6a:09:a1:55:7a:6e:57:63:00:15:02:5a:cb:
44:15:5a:98:3d:11:fc:1f:3f:ee:89:dd:d6:a2:35:86:66:5e:
7e:2c:5a:9f:3b:fe:4c:eb:db:06:08:be:ad:13:28:62:4b:50:
a1:47:05:08:40:c1:e0:c1:ad:2b:8e:43:98:e0:fb:36:84:35:
06:2d:0d:f0:8b:8d:47:d3:d0:37:25:2c:22:05:56:cb:a5:9d:
09:08:1c:e4:70:3a:4f:dd:4c:5e:7b:31:27:9b:0e:a9:b3:77:
49:63:99:6d:60:a2:49:73:1a:b9:94:3b:c1:47:9c:fd:29:15:
60:68:5b:e1:5b:43:f6:3f:5e:fd:e1:49:8e:3b:8b:8b:35:de:
58:63:5b:f0:af:9f:f5:90:22:69:5c:1f:8a:39:16:42:63:87:
d6:d1:b4:82:31:6b:77:87:bf:16:9b:09:03:f1:51:3d:96:8d:
b4:32:71:6c:8f:68:42:8a:19:41:5a:00:98:51:05:e3:22:4b:
f7:81:e2:e5:84:65:d2:4c:36:af:e3:ee:64:de:33:1b:9f:24:
08:53:ea:eb:03:41:7c:e7:a3:57:5f:5f:db:db:7a:ad:db:7e:
75:15:5d:c7:0c:f0:40:57:f4:b1:80:7a:5b:08:cb:6a:e4:13:
74:a2:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:38:52 2025 by rpki-client