Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: HqiUA3jztiI3T0WyCgq7P4w9pIq/aRjl30AoBf6on44=
Subject key identifier: 1F:AF:70:76:C4:B4:35:2E:0A:B2:45:6D:A4:C2:AB:B5:18:B5:CC:63
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 0194BCA96BAFD438004028DF8E7F62713CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: 2/OzwXNr+r6ZG33HsJ4RJIZESbGgt+X/nJDtGVgH7Pc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:af:d4:38:00:40:28:df:8e:7f:62:71:3c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=1faf7076c4b4352e0ab2456da4c2abb518b5cc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:26:51:7f:05:90:67:e8:b5:da:6a:bc:c5:
7a:51:68:f7:54:d0:6e:26:26:40:c2:44:73:be:b8:
5c:f5:c3:bc:c8:9a:43:a4:36:8f:53:8a:30:88:69:
7c:da:01:21:74:11:e8:26:ca:ef:e7:55:97:cf:eb:
53:95:b4:99:44:10:b7:bf:a5:24:e4:cb:81:34:7d:
cb:3f:0b:e3:af:62:36:e5:09:8d:cc:38:fe:c0:0b:
e8:71:b0:a9:9f:3b:ea:2f:bc:55:73:85:f5:e4:7a:
19:4b:a4:3f:97:b3:52:ee:6d:ae:ec:98:d3:20:15:
00:2b:97:c3:e6:1e:70:22:a8:69:af:3e:76:5d:96:
f7:6d:fb:66:f7:0b:9a:4b:de:08:0d:f8:62:c6:ed:
07:86:90:0a:1c:96:76:12:1e:16:77:e8:c4:8a:dc:
80:7e:01:55:73:56:84:97:4e:bc:38:1d:e3:af:a4:
b0:36:29:35:15:5b:dd:1c:0b:58:4f:75:70:ba:d5:
86:48:01:5a:05:ab:5e:73:72:a2:a2:5a:66:de:d5:
cd:16:7c:aa:19:b0:59:26:d9:59:28:0d:ed:0e:fe:
28:9c:65:66:62:4f:8b:6f:34:ff:e0:71:40:e4:8f:
23:4b:a2:21:cf:e1:27:a2:d0:24:5c:30:62:cb:9f:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AF:70:76:C4:B4:35:2E:0A:B2:45:6D:A4:C2:AB:B5:18:B5:CC:63
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:64:3a:50:28:ee:ca:38:3e:9f:b1:62:d3:d0:26:74:91:c4:
59:7f:dc:b2:05:eb:25:16:c2:26:33:a9:e0:08:ab:a1:b6:18:
7a:75:eb:9b:f3:96:3f:7a:1e:57:f0:78:29:8f:ce:a7:92:bd:
09:1e:ca:64:33:30:3a:47:fb:37:1c:05:1a:51:6f:05:e2:19:
62:03:22:5a:e0:dd:25:bc:9d:ee:5e:27:50:af:bb:21:1b:9b:
e3:c7:1c:dd:6a:26:1c:88:ca:55:67:38:13:52:e9:cd:1f:bf:
6c:a7:f5:ca:b8:e3:33:b6:b2:1f:98:54:1d:7d:46:15:43:61:
70:d1:7a:94:d0:83:33:ea:04:6a:f2:0d:79:ae:cc:8f:1d:a2:
b0:b2:02:f7:db:d9:7b:bd:17:a7:b6:6d:b5:16:f9:23:c9:a2:
c6:f4:47:d5:08:b8:53:10:b7:eb:3e:2b:70:86:3f:55:03:72:
68:71:b2:fd:22:6d:9b:fd:c0:d0:6f:e8:b6:83:2b:db:4a:0a:
5a:ae:1e:d2:e5:7a:cd:da:2f:f5:34:c3:33:a8:97:47:d9:2b:
28:38:be:7b:b8:03:06:3b:5f:32:fa:66:4c:0d:28:04:7f:ba:
a1:82:54:c1:fe:a6:d3:a5:db:7b:79:c5:80:3b:8b:d5:01:4f:
a7:c0:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:30 2025 by rpki-client