Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: rNVpcdwuG13JHusMjAweH0NbbfUgix7fN8ljntVXhKQ=
Subject key identifier: 4D:12:7F:82:91:85:DC:1B:5A:22:4D:34:13:D1:61:F8:25:7C:45:D9
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 0194BCE0A17604A3EE707634CD2C298FDCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0856
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: 7le2UaBNpKcL0+9G4dJV49wwGG5Mf1BnugjX2UcU4VE=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a1:76:04:a3:ee:70:76:34:cd:2c:29:8f:dc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=4d127f829185dc1b5a224d3413d161f8257c45d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:84:9b:0b:51:0b:1b:a7:0c:af:d4:4d:cb:
e4:4c:15:af:13:9c:f9:0a:d2:b4:b1:10:73:1c:ca:
a3:fd:88:08:48:96:e8:d4:d0:41:9d:f9:31:52:10:
ac:1a:80:0f:55:f8:bd:0d:09:4a:0f:7c:a0:e9:e7:
d3:dc:42:84:8c:35:73:d7:e0:6d:18:5d:73:37:d1:
88:6a:f5:09:fe:30:5e:ec:3e:d8:7a:8a:d8:68:3f:
47:c0:c9:0a:f0:02:9b:a7:71:ce:23:e2:c1:a3:99:
06:1c:2e:70:ff:33:09:52:09:83:36:2c:d3:ae:a0:
02:47:19:f5:b9:b5:26:a5:80:ea:64:43:cc:f1:95:
30:dc:2a:21:f6:c3:10:41:37:98:5a:9e:08:b1:c5:
3d:99:31:38:84:92:b2:e1:3d:a0:49:e6:b6:87:6c:
1a:04:a8:a6:f2:4b:71:f9:87:8e:eb:53:e8:c1:83:
78:f0:37:df:5e:51:16:19:1b:64:4d:56:54:4d:30:
f7:a6:f2:70:49:52:d0:90:4f:0d:7e:30:14:26:cf:
18:66:cf:f2:62:47:44:33:4e:fd:0c:95:53:ca:e9:
54:9a:1f:da:d0:ff:8d:5f:bb:8b:3b:32:34:a5:8d:
20:9d:9a:dc:7e:95:9d:0e:f0:29:60:78:1e:71:2d:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:7F:82:91:85:DC:1B:5A:22:4D:34:13:D1:61:F8:25:7C:45:D9
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:da:ce:37:0a:f3:43:61:26:76:81:ea:69:22:18:ed:a6:
9e:fe:7c:f8:17:7f:fb:af:5f:41:91:8e:a1:38:de:00:e6:fb:
5f:94:ee:73:01:35:48:21:bd:c0:3e:01:74:9e:30:9e:33:d0:
bc:a7:0f:f1:79:0c:a7:e6:a5:b9:77:2d:a2:e7:53:69:b0:67:
ef:e6:7d:94:b1:57:d5:bb:e1:c8:12:a8:51:5f:f2:92:7d:cd:
ed:66:07:bc:75:c3:99:0f:b5:67:e2:6f:80:78:17:c5:29:ff:
3e:ea:4f:56:5b:ee:37:e1:e5:c5:61:8a:53:4c:d9:fb:66:f6:
cb:dd:27:af:2b:9b:a1:ea:5a:e7:47:00:44:a8:af:4e:60:60:
b4:e4:48:f2:cc:0c:40:bc:b2:2c:70:fc:6a:e6:90:f8:c4:9d:
6b:02:93:f2:39:0e:67:e1:e2:92:e1:69:c6:cd:fb:3d:ed:0e:
36:88:38:60:21:f0:a6:35:78:a9:4e:06:21:4c:9b:57:3e:f4:
7e:bc:90:99:44:93:9e:39:de:6b:d5:e9:fc:66:cf:a8:b2:71:
44:77:dd:ee:64:16:c7:ef:a4:5b:e4:38:65:7d:95:dd:e4:58:
29:4a:f2:85:ec:9a:65:24:10:95:c1:0f:16:ca:d5:d3:03:68:
d3:b9:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:01 2025 by rpki-client