Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: DVBRIYwV7aT71hTmynHhO9TNTwaaMGH1rU/jDWsOc0w=
Subject key identifier: DD:AA:F4:A3:D2:B8:A4:67:CD:D2:83:21:79:07:B6:8C:EA:6E:F0:C3
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 0194BCA9816547C528252330054FDD41E64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 0CB1
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: ue9WwpiIRu+RQSJUzJGOb1RSNM0WdFF/tct4YgIMnik=)
2: p2A5CdHiVETDomluvOegsXvBo50.roa (hash: hdEavF3yB9GOEx15eolCAtVX4jfBUvmT4NUXjquJcHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:65:47:c5:28:25:23:30:05:4f:dd:41:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=ddaaf4a3d2b8a467cdd283217907b68cea6ef0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:91:2c:c7:49:c3:fa:b6:1b:22:6b:04:24:
41:ec:c0:ad:19:7f:b1:e1:dc:59:3f:e7:22:21:43:
37:a3:60:84:6e:10:22:83:3c:49:da:31:76:66:8d:
1a:a0:71:31:4b:70:5f:8d:d4:d6:39:ab:b4:b4:8c:
93:c9:db:63:f6:a5:59:b6:d7:ff:38:db:f5:bf:99:
83:6d:12:2b:c0:c8:bc:28:80:45:0b:49:7e:b8:32:
18:68:5c:b9:36:9c:a7:12:6f:b1:3b:fb:9f:29:74:
2e:02:9b:fd:02:94:d4:1e:58:d8:94:f9:af:3b:f2:
44:87:cc:cf:6f:3a:31:55:16:54:98:e9:63:fc:b2:
f8:5f:aa:1a:dd:1f:d3:fd:49:08:6a:96:cf:66:59:
7b:97:15:9d:0c:aa:db:74:8d:45:2d:59:4b:e4:1e:
46:95:81:1c:aa:58:df:87:9b:44:4d:00:d4:0f:8a:
29:fb:e7:be:b1:63:a1:f3:ac:6a:7a:37:ac:fb:c8:
5b:92:cd:28:b3:f6:01:95:3f:55:c0:68:cb:28:1f:
94:bb:ee:bc:22:fc:14:3b:dc:67:54:87:f5:85:c6:
44:bc:bb:14:4a:4f:4f:6c:69:74:c2:8a:4b:9b:dc:
bc:bb:6f:a0:b6:49:62:1c:ed:9b:1a:21:44:eb:37:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:F4:A3:D2:B8:A4:67:CD:D2:83:21:79:07:B6:8C:EA:6E:F0:C3
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8c:01:07:93:61:85:83:e8:f6:58:53:8d:67:77:1c:0f:3b:
6d:a4:16:a0:4b:0b:2b:41:2d:38:fb:64:2d:5b:25:f3:2c:fe:
0d:50:7e:0f:ef:cd:95:95:56:c3:1d:44:58:a9:27:23:d6:ef:
60:0e:4c:ac:f7:44:80:b5:a3:c1:c8:2f:4a:1a:45:0f:27:f1:
6a:c2:b6:6d:8e:75:3b:12:68:15:47:be:88:04:86:0a:2e:79:
8c:87:35:7d:44:19:2a:cb:3e:02:85:80:63:1a:1f:25:43:dc:
bb:6f:2c:60:f9:c1:74:69:56:08:ce:57:9f:a6:d9:15:d7:69:
85:3f:97:7d:f7:5c:89:21:df:73:c0:d5:77:f5:99:b8:ae:b1:
bf:17:62:3f:fa:3a:5a:e9:5a:05:64:bf:c1:ad:84:02:c0:0a:
f1:d0:97:eb:81:d7:d1:45:7d:c5:00:63:1b:8c:2f:94:9e:75:
32:96:e2:2b:47:b9:f5:71:e4:98:18:21:30:ee:0e:b3:ec:47:
a2:50:b3:a3:4e:5a:cc:73:05:09:41:47:60:fb:4a:47:aa:32:
13:45:9d:b6:88:8a:3b:9e:73:78:f5:d9:64:75:14:7f:ea:bd:
c4:6f:7d:d4:e0:18:bf:7e:d1:96:82:82:3d:7a:a8:57:80:a9:
51:84:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:31 2025 by rpki-client