Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: gT3GwVjKfFsBgUn/1kyVcmvtvyUS43QZM6fuD5j/dqo=
Subject key identifier: AF:79:12:0B:91:24:DD:A8:47:01:2D:CD:6E:7F:EA:6D:8F:E1:42:EC
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 0194BC3C82A8F3DB823A43F10E7B14A6F8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0694
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: B1scRvJcfgtOr82jf0g2e2A8veJmys0XgpLuXSHV9jE=)
2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:82:a8:f3:db:82:3a:43:f1:0e:7b:14:a6:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=af79120b9124dda847012dcd6e7fea6d8fe142ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:35:ff:cc:80:f3:3b:cb:2f:04:6e:df:a8:
bd:e5:b3:59:7d:bc:6f:c3:4f:d9:ef:85:84:71:d9:
26:38:25:2c:19:7f:97:7b:d9:0f:7d:4e:1e:2d:e5:
49:13:10:ba:0b:b3:ea:c2:bd:b4:9f:df:3b:6d:89:
3d:f1:c5:c6:56:cc:a8:d1:a4:23:63:85:2e:34:bc:
14:69:aa:45:9a:d8:f8:0d:42:6a:d1:93:6c:41:56:
20:39:03:48:9c:90:31:da:ce:17:a0:cd:df:cc:e2:
1a:ce:94:46:d8:61:ce:6b:d4:0b:74:3e:ed:26:a0:
45:02:4f:86:32:10:9e:b1:9e:11:ab:63:c3:10:b6:
e8:2d:24:6c:d6:07:81:03:15:b4:f2:0d:9c:f2:25:
6c:67:2f:b2:62:ce:bf:1c:b1:f3:67:42:38:b5:c6:
ec:31:d3:ea:c6:49:e1:41:26:7e:4d:ca:6d:84:94:
93:1e:88:16:f4:72:f7:5f:8f:61:07:48:72:5f:af:
7e:b0:35:b2:4d:2e:79:a6:d2:7a:7b:83:fe:df:34:
83:85:db:cb:cb:2d:41:29:3e:d8:ea:ec:fa:0b:92:
fe:95:22:22:0b:28:c2:1d:14:34:e3:fb:c3:0a:23:
41:ad:67:b4:65:55:5e:6c:57:79:4f:65:67:92:b8:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:12:0B:91:24:DD:A8:47:01:2D:CD:6E:7F:EA:6D:8F:E1:42:EC
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9c:4c:67:b4:97:81:bf:43:53:77:3d:f1:e1:7b:e6:05:c9:
4a:1d:4c:21:20:0a:10:bd:59:d4:fe:88:8d:a9:a8:ee:9e:de:
b4:b6:a3:aa:bf:07:98:24:9f:9f:6f:3e:3a:71:b4:8f:07:30:
20:34:d3:8f:d9:18:1e:d3:90:41:d2:63:bf:0a:37:f6:5e:6f:
95:14:b3:0d:1e:60:10:49:7d:00:3e:28:3e:9d:1e:bf:89:3a:
f6:57:1e:46:f1:e1:6f:f4:3f:cb:f3:26:be:d2:d8:e3:37:2f:
2f:03:ed:8d:ae:23:60:a4:7a:4c:88:c3:e9:d1:89:f5:1c:a7:
d8:0f:bf:e2:11:32:49:ea:22:4f:cb:4d:e8:a7:52:db:19:4c:
07:51:32:0b:3e:fd:a2:c9:be:4c:55:44:79:ba:43:6c:3a:c0:
ff:56:49:48:99:0d:cb:13:6e:67:dd:78:ff:da:24:f1:35:1b:
47:00:92:b0:7b:90:3e:94:38:a4:bb:46:ef:34:4f:41:d6:0a:
0b:61:c5:93:e8:69:61:88:28:cc:45:d5:47:15:bc:b7:fc:1d:
d3:66:46:f7:18:51:6c:23:49:b0:c7:18:c0:3b:e5:cb:d7:58:
f6:7c:fa:62:80:38:c0:5b:de:47:f4:c5:f7:a8:cc:b1:fd:0a:
73:89:50:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:26 2025 by rpki-client