Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: lQ3baupvWlY+46gU7B7G0ORzBPtkmI2R46lnN9HCzvU=
Subject key identifier: CF:62:F3:4D:60:13:CF:DD:4A:10:62:BF:C6:B5:BF:D5:53:51:5D:C0
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 0194BD856CF4D73A2C02E7600C99D7FCFD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: 5wxcg8lGRDZVUUNLI1yjDGaLkkbcaLdZz1tf6jpbMJs=)
2: pucl_qoNJsFNHYReBDscEGdx2N0.roa (hash: SiJfUuqs3fjKSI6Mo6WtKDUOtA0gOnKfbqvupwDeWPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:f4:d7:3a:2c:02:e7:60:0c:99:d7:fc:fd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=cf62f34d6013cfdd4a1062bfc6b5bfd553515dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:1b:aa:a6:7c:1c:3d:d4:e2:00:a3:31:e5:
0c:aa:8a:71:29:a4:a7:9b:86:bd:fb:a6:3e:9f:63:
1d:48:23:4a:55:f2:1f:56:d6:d8:e5:99:ab:fc:cd:
86:fe:38:31:cb:10:59:c4:dd:5e:21:3e:bd:88:8f:
9e:b5:39:06:71:5e:cb:c1:2f:3f:b1:25:94:16:df:
4c:66:20:bf:9d:7c:c9:0d:9e:2e:07:d2:c3:1f:44:
14:00:51:59:fe:69:fc:f4:9a:37:f6:82:71:bc:f7:
02:c5:95:93:65:e1:c7:d4:04:89:4e:88:1f:88:c7:
38:fd:bb:58:a1:d7:62:21:d7:b0:08:e3:1c:d8:07:
48:43:c4:ed:4c:6e:17:eb:15:25:5d:c8:cb:3d:2e:
ca:84:2b:fc:dd:9a:46:78:c3:f8:d5:f5:0b:33:63:
03:20:69:21:8c:e6:cf:5e:c2:d9:80:d6:6c:b8:d4:
ed:fd:5a:01:0c:9e:b3:44:fa:13:5d:0e:8a:67:88:
5c:9e:36:12:ed:8a:ed:74:db:ec:6e:ab:72:c3:42:
0f:70:cb:b3:85:89:f3:2f:ff:34:1b:27:0a:74:ac:
14:d3:83:eb:b3:d9:c1:33:31:12:b3:12:6a:38:ce:
26:c2:01:d1:da:51:bd:26:7e:9f:e3:6c:1b:fb:4a:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:62:F3:4D:60:13:CF:DD:4A:10:62:BF:C6:B5:BF:D5:53:51:5D:C0
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:74:a1:f4:00:9c:aa:00:33:6e:bc:d0:26:71:8a:73:84:
0c:83:96:10:84:7b:0f:f8:a2:b6:3e:33:b7:c4:63:0c:f8:c1:
02:15:a2:c9:69:9d:5f:b5:b5:7c:7e:c5:1e:2a:85:b4:6a:fe:
10:50:ba:91:aa:da:1b:39:b1:10:fc:a4:d8:9b:7f:32:98:87:
0e:3c:4a:ae:ba:1f:e7:6b:40:7c:42:dd:e7:5d:e3:04:3a:ff:
56:a2:13:3e:d0:9c:0a:a6:e6:6d:87:98:31:0d:9b:e5:d9:5f:
c4:90:b1:79:5b:6b:07:45:be:7c:14:5a:c7:03:c3:25:20:b6:
2d:0e:9a:a8:e5:33:64:06:ab:f9:90:1f:69:4d:e2:d8:af:a7:
b6:eb:c6:c2:a3:59:1a:9c:d8:c6:74:1c:2c:5b:bf:12:09:98:
24:aa:dd:b8:aa:7e:1f:32:36:08:6d:8e:72:d9:70:d3:62:55:
b2:e0:c1:56:15:7a:47:ae:ef:b7:91:3b:0c:06:07:19:9f:5d:
d6:c8:a6:e2:6f:a3:0c:a0:b1:7f:4e:2c:ea:e1:be:4f:96:b9:
ae:33:98:cc:18:eb:ba:9e:aa:06:7a:4a:1b:bd:10:83:41:1d:
65:1d:19:1a:85:59:37:b1:f6:37:c7:19:76:52:46:03:f3:66:
3b:60:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:45 2025 by rpki-client