Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: Yww5t8owzQp62qeDKHbcpjE82TkUAshPy1s/aFtmt9E=
Subject key identifier: 79:4E:8C:83:5B:1F:B9:89:8A:34:E8:BB:6D:39:42:D3:91:A4:4C:18
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 0194BC04A4596427FA55EE1951F2A957AB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0C1F
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: pMCCC+yI1JV/ImFUaJkxXRlj4NHOX5gbEu6XbUt4vjs=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a4:59:64:27:fa:55:ee:19:51:f2:a9:57:ab:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=794e8c835b1fb9898a34e8bb6d3942d391a44c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:71:7d:dc:47:bd:40:45:5b:f1:08:8d:df:
93:b8:a4:86:9c:27:91:a4:2d:c0:75:22:08:ee:38:
23:a2:07:56:1c:3c:2c:7b:ed:24:d8:e7:54:e2:9f:
61:d1:95:33:ef:05:81:71:e8:39:06:3b:5a:14:85:
74:1e:e1:78:21:40:90:80:e1:5d:4f:43:40:0c:6d:
52:65:ac:91:80:fb:20:9b:02:bb:b2:2f:d2:20:bd:
78:dc:62:ce:24:c5:5c:0f:f1:dd:54:90:82:ac:39:
ea:3e:f5:f0:83:c8:f6:27:f6:e3:b5:68:f9:e5:b8:
3d:8b:b0:eb:3f:0a:b0:54:5b:37:f7:92:ce:8d:60:
54:22:09:7b:f3:a0:f9:ff:f5:36:3e:ce:ed:5e:45:
db:a3:79:51:32:0a:ca:d5:5e:67:a8:c7:56:bc:93:
ea:7d:fd:f7:73:99:2a:b0:c2:20:84:7e:cb:33:6b:
d6:3e:a1:eb:11:21:bd:14:5c:e8:8f:89:49:de:e3:
a3:45:c1:7a:e0:a0:a5:9e:01:c9:1c:6b:4e:32:da:
39:08:a1:f0:e6:1b:93:ed:a0:6e:0a:d7:0d:e7:35:
98:02:5e:bd:c1:41:44:a7:22:4f:ec:e2:d3:ac:39:
9a:49:04:3a:0f:24:98:79:bc:4d:fa:98:7d:47:36:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4E:8C:83:5B:1F:B9:89:8A:34:E8:BB:6D:39:42:D3:91:A4:4C:18
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:34:57:f9:2a:96:46:3c:ce:57:5a:4e:da:22:8c:db:1f:97:
87:58:ef:3b:04:bc:83:8c:53:43:e6:46:49:b1:f2:3e:3f:c6:
52:4b:57:b2:7b:af:f8:91:ec:5c:d8:5d:c5:47:8a:1d:9f:4d:
7c:e3:ef:91:48:f0:98:a9:01:cd:44:c1:c3:8a:bd:21:c6:9d:
d0:66:c6:dc:b9:9b:ed:5c:1d:81:61:a9:bb:e0:de:fc:bb:35:
cc:d5:56:cd:d6:63:29:0d:4e:13:69:0a:f0:3b:1e:d4:0f:b4:
3c:e5:f1:e6:4c:3d:ea:f4:8b:4d:e7:51:4b:ba:81:71:c0:aa:
7c:4a:72:f9:23:5b:55:96:c9:cf:e2:dd:80:e0:02:24:9c:43:
80:92:2b:23:9f:5f:29:47:56:38:ee:3c:4c:6a:60:e0:6d:3f:
45:7b:02:4b:6f:2b:7e:55:4c:fd:ec:65:a0:a0:fa:f6:b9:e0:
80:d5:ac:ce:de:15:9f:d1:1c:c8:14:e8:e0:a7:28:86:e9:cc:
d9:86:50:88:e5:35:11:f8:bc:5a:88:a9:a9:df:f9:93:d1:8c:
86:e8:d1:11:2e:91:6b:fb:b4:a8:f9:58:5a:e0:e7:06:bc:1f:
d3:30:64:fd:87:93:2a:35:f1:82:eb:e1:b8:3e:e1:05:f0:8a:
84:21:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:30 2025 by rpki-client