Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: 57UZYXkKlPf1i++63e6kfJF+ySISvqbaso4euya8ToE=
Subject key identifier: 4B:42:23:A0:F8:A5:0A:F8:18:A8:6D:36:4D:4C:59:D6:56:C5:A6:1B
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 0194BC3BD4E3F44E81C849ABB8189AA0FA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 1032
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: r9Rdcb8gdhwW1colJLpCEpn1EzlWgl7OLqC+30H0dWw=)
2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:e3:f4:4e:81:c8:49:ab:b8:18:9a:a0:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=4b4223a0f8a50af818a86d364d4c59d656c5a61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:e2:47:ae:2c:5d:a5:e0:2e:23:52:55:9b:
64:1c:87:f2:f3:ff:97:cf:4a:7c:b9:be:9f:c0:1c:
01:95:37:68:51:c8:2e:48:3b:d1:4c:18:e9:db:ff:
fe:1e:2d:da:19:50:b4:36:79:07:2c:f8:19:46:58:
ad:a0:ed:b5:01:08:f9:0f:97:1f:7a:0f:d6:15:7f:
06:55:87:42:45:30:39:5d:4e:60:d0:e3:3c:ce:a3:
3a:a1:a7:ba:c1:35:86:69:7e:fd:f2:fb:48:c5:c4:
e1:90:93:94:5d:ee:58:cc:f9:6c:dc:15:18:b2:ba:
8c:c6:7d:27:f5:b9:6d:c5:a6:c6:8e:cb:69:e7:6e:
85:66:7a:97:67:64:8f:1a:1e:51:c7:e0:80:e5:83:
34:40:5e:62:1e:4b:5a:19:84:ca:3f:ab:df:67:f0:
00:22:d4:7a:c6:52:0f:51:ab:f0:27:45:fb:73:0a:
a9:6b:bb:fb:15:69:7e:7c:45:f2:2f:86:81:67:2f:
d2:c6:64:52:94:6a:56:f4:26:f6:6d:17:ab:47:8a:
b5:8c:6e:df:8f:47:0b:75:27:b9:f8:b7:10:b4:4b:
15:b1:14:1d:9f:e8:ee:2b:03:aa:7e:4e:60:fb:4b:
6a:d1:88:5d:55:1d:7a:f5:33:42:fb:51:5b:3d:9d:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:42:23:A0:F8:A5:0A:F8:18:A8:6D:36:4D:4C:59:D6:56:C5:A6:1B
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:17:83:dc:d0:7b:9f:1a:ac:de:07:af:ab:f9:ed:5a:95:
57:da:21:69:a6:67:00:13:b3:ce:40:9c:87:7e:c4:8f:04:1c:
a6:36:aa:dc:25:f7:cf:85:33:fe:16:77:5b:90:44:34:5d:01:
48:bc:d6:36:b3:34:ef:09:77:8b:ee:88:d3:c9:3f:b5:d5:e5:
e7:b7:48:6c:8c:89:70:34:7d:4e:e3:13:85:ee:97:88:74:49:
47:e8:6e:1f:88:67:3d:a9:40:77:bd:ed:78:12:57:c0:e2:44:
c2:fa:db:55:a5:4a:13:72:c2:e0:57:21:ad:fb:d3:52:91:1c:
a8:62:b9:fc:0f:12:30:d1:35:cd:d2:2f:72:77:5d:64:c4:8e:
fa:8e:11:73:c0:be:b1:63:72:24:a2:94:aa:4f:d4:f1:49:53:
7b:d5:f8:5a:9e:8b:9d:7d:16:6a:b1:05:c6:c1:8a:1c:3a:40:
fe:c4:7e:ee:9c:6c:d9:d4:5c:e4:7f:5a:f7:f1:08:7a:67:b1:
82:be:3b:68:75:2a:7c:74:6e:0c:9c:e0:05:28:97:01:10:50:
5e:27:d7:44:91:1e:f4:54:61:1e:89:25:a7:d7:24:0e:dd:18:
10:61:3a:4f:62:80:ed:c3:4e:77:7e:d1:64:07:5b:f7:aa:d5:
43:14:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:01 2025 by rpki-client