Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: EWmEaTD/kopTcsCmRf7m56HDIGiZe2gg1h1n2j4Nc/U=
Subject key identifier: E3:BC:E6:E3:43:01:47:C1:07:D4:8B:B5:74:0D:07:47:EA:D9:5F:54
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 0194BBCDF9A2E522768DA2A30AF209F0D544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 1311
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: WqmkV8VEu8ahWTwMRvTA42eHW/2wykM4RZUStE4Whmw=)
2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:a2:e5:22:76:8d:a2:a3:0a:f2:09:f0:d5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=e3bce6e3430147c107d48bb5740d0747ead95f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:82:20:a0:f2:bb:04:9f:24:28:00:08:05:
54:71:79:5e:d7:44:a0:06:bc:a2:03:a1:a9:ba:61:
33:a7:16:bc:66:09:40:11:69:aa:e9:a5:0d:22:37:
dd:92:74:9c:27:d5:d6:cd:0f:42:ae:2b:e8:09:a3:
5d:5e:4a:22:95:23:f9:d5:49:4f:4d:fd:bb:e5:24:
0f:b5:a2:74:da:46:ca:3a:5d:64:9f:7d:a0:ac:74:
a8:c3:2d:52:ff:1e:d4:34:f7:08:cb:89:8a:76:64:
87:38:fb:35:e7:8a:57:3d:99:21:56:53:53:8b:ee:
f5:0b:7b:39:ab:e3:b5:fd:59:89:a7:b8:92:ef:31:
3c:ff:17:d3:98:eb:d8:08:77:0b:43:22:95:43:08:
9e:e2:63:98:84:8e:67:83:a4:b8:6b:39:5d:5b:29:
16:ae:bc:5e:11:c2:d7:bc:15:0b:5f:61:60:59:d0:
6c:d4:93:45:ba:b8:34:c0:b7:ce:79:cf:3f:07:ee:
a0:98:fa:55:3c:e0:4d:22:c0:fd:06:2f:16:29:9e:
04:2e:76:a6:45:40:73:eb:da:64:d4:aa:5d:9c:97:
58:89:5c:92:3a:00:4f:50:8f:0a:be:e2:57:90:f8:
f0:d4:ae:39:5d:30:52:2e:cd:3e:fe:87:1c:db:4a:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:E6:E3:43:01:47:C1:07:D4:8B:B5:74:0D:07:47:EA:D9:5F:54
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dd:98:ab:0a:05:93:c4:5d:60:45:79:42:71:48:cd:89:b2:
d4:9d:63:78:ab:2d:3b:cb:fd:dc:76:be:db:0b:27:1c:18:42:
3f:c2:a8:4c:a7:60:56:6d:d7:ad:89:85:59:c1:7a:2b:9a:63:
c9:39:b1:bb:81:5d:97:95:41:52:25:22:71:3e:35:a2:7b:08:
c5:ee:8a:5f:c2:c3:50:4c:8d:5a:fa:82:20:74:d2:73:50:6d:
7b:83:d8:8b:81:65:22:bb:e3:62:c5:21:4b:36:dc:a5:b0:5f:
0c:73:74:27:f1:97:bf:be:36:24:b0:9d:ca:7e:89:b6:a5:cf:
c6:7c:8c:d1:70:cf:b8:39:e3:81:db:76:73:0d:0f:ef:13:66:
25:da:36:56:45:e4:c5:6b:01:69:98:10:b4:25:e4:c0:3a:a3:
ec:29:2a:3b:6b:4f:34:6a:a1:4b:d2:ac:3e:6c:c5:84:14:aa:
87:26:aa:0b:00:98:a8:11:ee:ff:cd:94:3b:76:6c:31:60:0d:
c8:2e:a6:52:25:bd:f9:f9:c2:f5:f5:4d:88:80:be:9b:7d:5f:
99:80:f4:94:eb:16:f5:17:24:b2:ac:fb:c2:98:b5:1c:15:c6:
2d:f2:0a:e8:13:ab:9c:27:0b:16:27:7f:15:44:ce:c3:67:0d:
57:dd:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:21:10 2025 by rpki-client