Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File: 1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier: Ra7EY3fWHgZTjpeO3jEsYf5NlblH9IVURbxiVYYN6bU=
Subject key identifier: 0B:45:DE:DB:04:39:80:AD:FE:F9:FE:9D:D3:0E:CC:D3:62:9D:9A:4A
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial: 0194BCAA368E56A64BD06E757184843BB9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: tJR1r7Hc51weYAOD19rfBqqsMcGiV7DSXGQZRWs1y10=)
2: LNGDPhvWhaUufvaPWy4zm2txK38.roa (hash: E9Pi4pJgm1TVZXCieOIM/HMpQ/NRLxBbn/SRBFS6LQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:36:8e:56:a6:4b:d0:6e:75:71:84:84:3b:b9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=0b45dedb043980adfef9fe9dd30eccd3629d9a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:80:43:0c:67:4d:f9:79:ff:2c:78:9c:99:
1b:b1:98:ce:7b:aa:ec:35:12:aa:df:f5:68:54:29:
29:1e:64:30:5d:6b:8e:4a:67:cc:ca:c4:29:4e:24:
c3:47:61:42:46:8f:c7:e5:ec:9b:cf:7a:3b:6e:f8:
4c:dc:ca:e0:91:4e:78:49:29:61:4b:58:c3:a3:ea:
fb:66:f6:bb:4f:23:39:63:73:0d:a7:95:cd:b9:0e:
7d:a9:38:34:15:a5:e6:f9:51:cf:c9:d5:8d:bb:25:
f5:1f:50:2b:a2:b7:92:08:68:87:c1:64:df:97:4f:
88:ad:43:f0:d5:3e:f9:3b:19:53:93:56:d2:1f:4a:
b6:d6:bd:36:83:a9:61:32:d0:4e:ca:f4:59:10:27:
f3:4c:6f:e5:c3:25:03:6e:60:77:be:3a:fc:a7:53:
49:35:da:62:2d:a6:fe:03:fe:8a:e9:04:57:0c:03:
ed:03:2f:f8:1a:91:ad:b0:cc:58:b1:9a:c0:92:01:
74:79:e3:2c:b3:1b:20:ae:de:26:cc:09:55:9c:c9:
76:53:f5:27:ba:c7:4c:b0:45:04:8b:12:7b:0f:65:
76:2d:a5:6c:0e:2f:85:d7:0d:cc:b6:0d:a4:27:46:
cc:66:69:47:8b:75:fa:8b:3a:39:7c:51:19:66:7c:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:DE:DB:04:39:80:AD:FE:F9:FE:9D:D3:0E:CC:D3:62:9D:9A:4A
X509v3 Authority Key Identifier:
keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:84:c2:dc:b6:2b:71:de:5d:82:55:f9:36:e1:40:d5:a3:0f:
34:ac:c0:ad:6f:6e:e4:e7:f0:2c:37:69:ff:3f:54:01:c6:e5:
47:aa:f7:79:38:21:2f:b8:85:ee:1c:69:90:06:c5:8b:0b:c6:
b9:34:ca:0f:b1:1d:c1:d3:ea:45:a0:6c:f7:ab:0a:50:e5:f7:
56:1c:53:9a:bb:04:40:bc:8d:7e:87:e2:d4:33:6b:62:f8:4a:
ef:af:76:6c:a3:b7:46:59:b8:8f:c1:70:68:1e:19:b7:9f:05:
99:12:6e:50:9a:b2:67:f4:a1:10:fd:05:f8:f7:c6:e6:db:b7:
3f:6e:30:53:02:c5:cd:dc:e3:57:fa:86:9c:cc:84:d2:c5:bd:
e7:df:72:2a:25:59:b7:20:07:07:aa:b5:48:54:9f:10:08:2b:
b7:33:1b:31:ac:f0:19:6c:0b:79:ed:e7:06:ca:be:79:bf:a8:
fa:3a:0c:c3:e1:c2:84:1b:ab:61:08:23:74:09:84:21:ad:14:
6e:1c:1d:27:56:02:e5:ae:d1:e4:29:84:af:52:0d:1e:a6:18:
51:38:ca:69:12:8e:3f:20:ba:b5:3b:0c:46:e5:0a:c8:4c:01:
06:2d:c5:22:15:ae:53:bd:13:7a:2a:2f:04:9e:15:89:d6:3a:
7c:ed:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:16 2025 by rpki-client