Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: UipHzkMtecR915eIabagWtXvsiBG8pXrERk94bgeSmk=
Subject key identifier: 14:C0:AB:C9:95:8A:03:83:61:84:59:41:CA:F4:20:61:5B:7B:73:0B
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 0194BD4E7BC3A3EB752E9688B1928D778122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 1210
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: GNKXiR2XSC2zaSDHZ2gNWr40VyiDdsJEcCdlZeZlPR8=)
2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:c3:a3:eb:75:2e:96:88:b1:92:8d:77:81:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=14c0abc9958a038361845941caf420615b7b730b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:4b:fb:c5:18:fd:75:c2:e3:a9:27:d3:b2:
5d:b5:3f:91:b0:e8:87:b5:3d:83:0f:19:e4:77:0c:
d4:10:46:16:8a:0a:fe:ed:61:13:0e:48:ab:bf:65:
f8:f2:46:a0:30:23:94:df:81:9e:c6:34:cd:9a:73:
af:00:8a:99:6c:14:c8:68:f5:35:8d:e2:79:fa:8d:
06:b4:63:a3:1b:ec:c0:27:46:64:f0:15:30:fe:8e:
50:c8:51:fe:d3:8d:48:69:48:c6:c2:49:06:80:27:
e1:de:73:02:05:a8:86:5d:c9:47:94:6e:7e:a2:70:
28:a7:b0:77:7a:b5:64:cc:78:6b:62:a1:88:61:c1:
7b:d6:91:90:eb:56:fe:c7:ad:da:0a:db:1c:fa:fd:
97:25:06:2e:64:02:2a:37:aa:9a:5b:9a:b9:7c:e3:
66:b4:44:2b:ca:15:43:bf:91:90:e1:26:64:94:e1:
21:91:60:6e:07:dd:81:bf:52:7f:9b:3f:42:b6:97:
57:3c:1f:da:12:1c:18:47:4e:65:b0:b6:d6:ab:d2:
ae:41:1d:4d:6b:68:e8:01:49:54:47:fa:cd:cf:ab:
66:97:75:f0:a7:a3:3c:9f:bd:8a:ee:4f:77:d4:6b:
84:fc:80:13:d3:58:0b:17:45:b6:c6:83:47:2e:05:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:AB:C9:95:8A:03:83:61:84:59:41:CA:F4:20:61:5B:7B:73:0B
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e1:05:10:c0:69:9a:b1:55:47:ec:af:2d:a4:76:eb:ef:b4:
03:5f:5c:54:3c:56:5d:da:6e:13:85:2a:44:0c:3c:3c:58:a8:
6f:3a:13:a3:7e:62:b6:1b:c2:81:50:4e:2f:ee:7c:90:76:87:
ef:64:24:10:9f:47:66:a2:3c:ac:1b:9f:96:7b:76:81:28:d1:
f3:1b:c0:5a:1e:29:98:d2:af:91:8f:35:b0:87:e4:7e:6b:4d:
71:31:ea:d5:8d:28:42:f0:43:99:b5:01:c8:44:68:27:72:a2:
1c:ab:61:ee:ac:73:a0:79:d0:65:ff:04:c7:55:cd:14:62:be:
2e:ee:0d:63:e2:6d:4d:f7:f8:f5:63:db:b2:e8:4f:90:36:d2:
8f:e8:41:40:19:e1:9e:eb:d9:e0:98:d4:93:db:1c:13:b2:f3:
83:46:78:66:f1:ae:f3:db:c9:ca:6a:47:5f:5b:a2:37:f2:7f:
c6:75:18:3b:41:62:5e:14:3b:eb:74:e2:b8:50:80:25:76:f7:
e2:c9:02:df:f3:ad:01:21:86:5b:ef:41:21:a8:c7:2e:0b:fe:
e2:38:a7:28:03:eb:7f:0b:79:bb:5e:fc:f0:b2:fb:6a:e3:a6:
9b:98:ed:f9:f7:30:8f:79:80:09:4c:9d:ab:16:2b:57:44:4f:
db:9b:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:36 2025 by rpki-client