Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier: 2BSF13UJnR7bEiQqN82hfU1oiFyNTLtnnPeoPuA6OJM=
Subject key identifier: 05:82:62:DD:E3:6D:EF:D6:DC:41:0D:4E:E4:4A:BE:68:61:15:5E:C5
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 0194BC04EDF1625EDE18CF2439A99EF8FDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number: 89
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: oUJSPJ5Xetj40C3OI7edAlJAloarHQwBk+g4+jJpE3o=)
2: iJ7kty974jPkWgzxQa34AvpfJzg.roa (hash: f39eViBwQsbAY89QmdcG3WCS0jbc3aqJWKGT/0jNv9U=)
3: nya5VnmImUQCPczzWGzozyYmAoM.roa (hash: qg+/w/vLW7M/opQjKzbc9S+ktTmX4UXhPUmqd4d4i7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ed:f1:62:5e:de:18:cf:24:39:a9:9e:f8:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=058262dde36defd6dc410d4ee44abe6861155ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:7e:24:41:89:ca:ff:26:3e:1a:1d:f3:99:
56:8a:e9:9c:6d:a4:47:d4:64:1a:fb:89:3a:69:f3:
f3:41:cd:fd:e2:40:b9:8c:9b:1a:ef:25:39:e8:b5:
80:14:62:c6:42:ef:20:5f:e1:10:70:3c:7c:db:a1:
63:32:5c:4f:ba:42:5e:2b:5f:26:66:a3:c0:8f:a8:
ce:6b:66:cd:f7:c2:a9:60:4b:d9:ca:ea:f2:2e:d0:
56:39:13:79:09:43:51:d7:6a:bc:b8:49:18:91:fd:
7a:4e:3c:2e:ce:2c:a0:3e:fe:b4:b8:6e:7a:54:88:
3b:70:0d:e0:85:b8:a1:e6:d9:1b:92:f0:09:1b:2d:
bf:43:26:cf:c7:6d:e1:d4:67:44:cf:c4:16:0b:8c:
37:87:d4:82:e5:a7:f2:66:4b:4d:92:53:01:f4:1a:
f8:78:ef:c6:ca:3b:1b:22:1d:b1:cf:d6:49:ac:83:
82:0f:5e:60:53:c1:d1:fe:66:4c:ef:d6:06:51:c6:
a8:52:fb:f7:79:28:fd:63:f8:55:9b:8a:2a:7d:bc:
ea:7d:d0:27:44:1e:e0:c2:85:99:96:6f:6b:e9:fc:
6d:5b:a3:b1:03:ab:82:30:70:16:5a:f7:5b:03:4b:
af:72:33:8d:1c:25:49:0e:c1:41:65:f7:66:ad:d5:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:62:DD:E3:6D:EF:D6:DC:41:0D:4E:E4:4A:BE:68:61:15:5E:C5
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7d:79:03:1e:d6:d9:bb:af:de:c6:c8:f7:1f:2f:5d:09:5b:
60:b1:51:a6:df:b9:9a:96:64:dc:8a:3f:61:f5:a4:3f:c6:ee:
81:27:6c:6d:14:56:f4:58:4f:26:91:13:d9:20:08:45:ce:3d:
26:07:4e:10:db:76:cc:81:12:55:f5:c6:bc:ef:8f:b6:b1:5f:
d6:0c:43:e2:f2:06:0f:64:fb:5d:6f:84:40:ad:32:16:4d:04:
70:bc:f6:48:d7:2c:cd:06:5f:f2:aa:c9:46:93:8d:d4:74:03:
48:7f:9b:a9:ba:24:87:76:06:f4:c9:01:67:c3:7f:b9:03:bb:
02:4f:c4:5b:84:9b:68:98:06:a2:a5:a7:97:27:c2:c0:47:2b:
78:a7:7e:28:d4:62:b4:6d:07:e3:27:3c:99:e2:3b:8d:fd:4b:
73:0a:3e:94:19:40:47:43:38:ec:a1:05:c0:81:41:63:29:f8:
d3:57:4f:0a:c8:a5:d0:ca:ba:25:3e:9e:5d:06:a1:83:97:98:
2e:74:41:f1:4c:97:43:57:bb:a2:3b:eb:36:3f:ad:28:07:9a:
a1:dc:cf:a9:ae:b6:fe:95:5e:6c:4a:be:bc:40:39:f8:4d:9d:
01:d4:7a:17:7d:21:92:4c:15:b9:15:2b:85:83:2c:68:18:b6:
1f:69:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:04 2025 by rpki-client