Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: CdNaPRg8g8mcTElK8a6oqpm1CjBYHSLqFNMDtId+yXU=
Subject key identifier: 9B:5B:67:DA:5B:18:73:F9:47:CA:E3:4A:0F:69:4E:0D:AF:B1:26:C7
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 0194BD177C6EEE9C38CEF33FE6AC4D646853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 1160
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: J8ayqGzPfLAhQbAUmR4k0tnpnZhH9glJsbjHTWAL2Rs=)
2: 2Z4uWBrUsnH37u-4XuHfV5Ci7Ek.roa (hash: AkCUWRms5SxBxIsWLsuMaXD0PJyWJJHr8rOMRKJRlkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7c:6e:ee:9c:38:ce:f3:3f:e6:ac:4d:64:68:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=9b5b67da5b1873f947cae34a0f694e0dafb126c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:9d:8c:08:5d:33:41:70:53:3f:be:c2:8b:
26:ec:2e:05:88:67:40:3d:55:58:fb:12:57:40:e8:
51:9b:f1:1d:2f:b5:72:e1:39:b1:ce:61:ed:ef:d0:
e6:73:ef:25:d3:ae:1a:d3:ee:72:1d:17:4c:f5:0a:
51:fd:a5:a6:6b:9d:68:21:28:8e:74:0b:4d:eb:19:
ae:68:69:d1:8f:3b:60:b3:18:48:7c:e3:45:ee:67:
ba:95:e1:90:64:10:e2:70:cb:ce:6e:12:0b:fa:7e:
ea:c4:a5:a6:cf:1a:58:24:90:a6:17:e5:1f:a5:cd:
9f:01:6f:ad:d8:fa:2b:41:a5:1a:42:56:49:98:05:
5a:26:0d:75:bf:30:35:28:e8:c0:ed:e4:c0:2d:12:
9e:6f:46:ee:18:55:ed:e1:be:23:18:46:db:15:dc:
e4:67:83:ff:a9:5e:c7:7e:e5:c7:a3:4e:9d:b3:59:
12:b7:f8:de:98:68:3a:29:0e:eb:ab:94:48:42:bd:
bd:54:4b:28:aa:7c:43:25:68:99:eb:b7:e2:f0:7a:
21:d4:ed:36:8b:f9:cc:60:60:69:67:49:13:9a:19:
e0:fd:89:7e:28:20:d3:00:a3:ac:78:f3:77:16:9c:
fb:7a:24:c8:05:72:e8:ed:92:35:09:49:e6:58:04:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:67:DA:5B:18:73:F9:47:CA:E3:4A:0F:69:4E:0D:AF:B1:26:C7
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7a:67:7e:f6:14:de:4b:9c:44:c3:7e:d8:8f:8c:d7:51:2b:
ab:7b:57:0a:23:02:c6:77:1f:60:85:e8:17:58:3a:bb:19:c6:
e8:c5:07:af:85:2d:8e:78:f4:53:0f:fa:e0:c2:38:72:6e:84:
ed:5d:7c:57:90:2e:b6:49:5d:b3:2c:b1:8e:2e:c2:8f:9a:85:
f2:da:86:44:23:b6:c1:94:79:81:8d:dc:32:d1:3b:85:70:1b:
c6:02:51:9d:d1:f4:53:f2:14:42:de:41:cc:11:0c:a4:4a:fc:
0a:68:0a:f9:48:2c:49:3b:84:13:cd:73:73:df:1f:fb:c8:79:
74:7c:02:9c:8b:6b:a0:8c:20:dd:5e:34:ad:1a:d9:2a:75:06:
4e:92:74:d0:ca:4b:69:ba:1d:84:c3:5d:f6:57:1f:ee:05:88:
1a:3d:91:46:2e:fa:bc:77:cf:62:22:f2:0d:aa:21:d1:a3:61:
d5:61:5b:9d:9d:9f:cf:0d:8d:cb:1a:44:e9:21:70:75:74:fe:
54:94:bf:0d:51:82:05:0d:67:38:33:0d:7b:09:0f:56:14:85:
c7:93:45:05:25:2d:1a:49:1b:84:fa:d0:2b:10:03:be:32:05:
61:77:8f:18:1f:83:b3:66:d8:95:ba:59:7c:22:37:5e:18:a2:
be:df:b6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:59 2025 by rpki-client