Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: KfqH6HtW1tL23M6EYyhCU3L8ZJxB+CIj9uPPp2SQR4I=
Subject key identifier: 5F:A1:AE:E2:6E:70:7D:1A:AB:4C:1C:BD:1F:36:88:F1:81:A5:C1:8B
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 0194BCE0AB81B09626E4A4E4E5B27431E5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1035
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: zoewpHauhivYclrwoTs+iS03kOIdHzSrR5RUSBBzMgQ=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:81:b0:96:26:e4:a4:e4:e5:b2:74:31:e5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=5fa1aee26e707d1aab4c1cbd1f3688f181a5c18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:06:05:58:ec:29:6d:d8:89:d1:7e:19:7d:
b2:86:8a:9b:e3:6a:e2:01:a5:48:8f:af:4f:bc:de:
ed:bd:bb:b9:28:20:1d:f0:13:0a:64:41:fa:b9:0d:
74:78:d1:b2:14:8a:00:c6:52:02:96:14:77:e4:07:
47:81:4b:ac:a7:c3:ae:6a:40:68:8c:62:c3:d4:08:
4b:a8:d8:db:09:17:29:9a:15:57:66:b4:be:ab:07:
cf:d1:1d:ba:2e:a9:23:e9:1b:77:b0:bd:ff:37:60:
40:1e:5f:b8:d0:bf:34:0b:13:ac:98:f0:f5:26:f2:
02:2c:14:af:08:4e:b9:f1:b3:29:33:40:5e:5b:29:
15:50:a3:fc:a7:c0:51:ae:fd:18:d0:9a:ca:0f:0c:
97:bd:8b:9e:6b:2a:36:46:6f:23:15:66:ab:9b:7e:
0c:38:74:67:7d:d4:9f:f6:59:fa:1f:d1:f5:40:1e:
58:56:32:ff:36:c5:11:ab:d4:4b:e9:d6:55:67:72:
0b:5d:b4:cf:8c:49:0d:3f:19:3b:82:47:af:ad:1a:
13:b0:d4:e3:be:2b:7b:fc:7e:4b:54:e7:fc:f3:e6:
1e:7a:1e:6d:9e:27:37:14:c5:87:b0:d3:6a:40:51:
1d:d0:54:d8:18:ae:5c:74:82:2b:ee:2f:78:53:99:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:AE:E2:6E:70:7D:1A:AB:4C:1C:BD:1F:36:88:F1:81:A5:C1:8B
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7b:26:89:58:45:1e:9b:7f:9f:ff:7a:c0:85:b7:21:49:43:
3c:cc:7f:7c:fc:7a:f1:07:59:5c:93:68:bb:2a:49:52:65:13:
c0:99:9e:18:90:f5:17:63:28:1d:b9:5a:27:ac:6f:7c:fd:a0:
e0:5f:e9:99:30:d9:23:73:85:d0:52:fc:90:c0:e0:e3:2c:1b:
80:0b:e9:3a:56:f5:17:6e:c6:09:f8:4d:47:98:90:65:98:a6:
76:1a:74:ac:63:7f:b1:f5:b0:59:ef:a1:d3:11:72:36:56:b2:
c4:10:68:7a:98:76:0d:61:51:7d:6e:cc:c4:e3:d9:e6:ff:a9:
51:99:b0:51:58:49:ca:2a:19:8d:ab:80:7d:f5:2f:d8:62:14:
c0:18:87:f7:2e:38:6b:82:36:fd:a5:7b:92:07:7d:da:52:d6:
ce:8d:a8:b3:06:ec:18:8c:13:ff:e7:80:cc:dc:9e:e4:6a:7d:
6c:f7:33:c9:f6:69:64:73:3e:01:c8:ee:88:c2:a6:17:5b:8f:
0b:b6:01:7d:34:c2:9a:57:73:1e:4a:db:4a:72:42:4e:98:1b:
74:46:0a:d7:0f:f6:10:ac:23:aa:51:6c:fd:63:d4:b3:a8:bf:
d8:c3:1e:f6:06:3f:db:5f:46:4f:dd:e8:49:9f:3d:16:0c:a7:
4e:14:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:16 2025 by rpki-client