Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: mgeCjWMg429H1LMx5A7wdkw8RmGXOVQCaTxkC3ZhZrs=
Subject key identifier: 25:2F:24:1F:97:3F:28:35:93:06:A4:61:DE:23:EE:EE:84:70:0C:EE
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 0194BBCDEC7058EEBFC49D5658A72874E3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 01BB
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: dybA3rRWO0yD6Zj+IAOCoGIJxFtAGS26xKqGDreVAaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:70:58:ee:bf:c4:9d:56:58:a7:28:74:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=252f241f973f28359306a461de23eeee84700cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:39:2f:25:0e:de:c1:ae:5e:c0:22:11:e9:
08:38:7d:35:23:df:c5:51:01:4c:d8:cc:b8:bf:89:
e7:fa:ac:87:9c:37:99:1b:d4:c5:f3:be:7a:2a:a5:
1d:62:4d:9e:e3:e2:45:8d:f1:5e:4e:a0:ea:e2:ef:
75:a4:c4:47:20:ed:c0:36:37:06:ed:41:b8:ca:8d:
d1:20:11:05:48:fd:d9:9e:88:bc:16:63:11:64:a2:
4f:61:77:62:94:76:de:58:6f:0c:8c:1f:d1:43:7e:
f5:b8:5e:41:92:f3:60:fe:93:45:6d:c4:96:ad:1f:
a9:ba:3d:d7:3b:5f:64:5b:a0:e2:66:2d:35:da:42:
f5:3a:5e:cc:50:bb:51:00:ac:24:0d:da:d5:6b:c6:
64:db:44:42:e4:87:1f:8c:01:32:37:f4:66:5f:fd:
b5:50:7b:df:2f:ee:72:41:8e:fa:b4:1e:87:7c:2c:
31:53:6a:6d:74:46:f0:dc:b1:b4:0b:94:85:7e:36:
54:ac:79:e2:74:74:6d:5c:8d:18:48:2e:02:b4:01:
ba:69:3c:7e:1b:ca:63:3e:68:e8:92:dc:23:fe:5a:
52:2f:d3:59:90:8c:73:40:98:df:0a:fb:a3:87:60:
c9:3a:eb:c6:9a:36:97:2b:08:35:fc:ad:5a:1f:04:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:24:1F:97:3F:28:35:93:06:A4:61:DE:23:EE:EE:84:70:0C:EE
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:05:a6:0a:49:82:3b:0e:e8:b3:87:1c:76:2b:bb:61:6e:4f:
bf:9e:16:bd:42:88:fe:b0:65:ed:7f:8c:e1:8a:07:f3:42:00:
e5:4b:e6:ee:7f:4e:7f:2b:31:17:cb:c5:85:4e:73:b5:ce:31:
25:e0:1a:b8:7a:05:31:d8:44:dd:1e:01:d7:6c:c5:eb:7e:3b:
d8:d9:70:fa:6c:69:5b:0b:db:ca:f7:24:59:07:f3:20:62:d2:
32:8f:ea:21:a4:89:7f:1a:09:f1:c1:3c:18:41:28:47:e1:ff:
8e:3e:a1:82:bf:9c:5b:10:fb:9f:27:a6:c6:d8:8b:c8:5c:45:
bd:0e:23:08:e9:4f:67:7b:6a:20:94:58:df:86:45:f5:36:fa:
b3:65:83:a2:74:0b:48:67:66:ce:8b:42:ea:61:e1:74:93:bb:
01:d8:a7:a8:56:e2:91:a4:41:8d:c7:71:22:4b:eb:2b:6b:95:
60:97:b2:bb:2e:2a:27:9b:fa:dc:3d:07:09:86:0e:ad:44:b7:
9f:17:60:d1:b5:e1:4b:84:1e:d2:60:70:74:5c:71:d1:38:1d:
08:e1:d9:4d:8f:57:0d:44:22:fe:c3:56:41:13:c3:f9:da:ea:
7d:eb:ba:4d:7d:97:31:ac:2e:f4:cd:9a:4d:6c:a9:f6:24:fe:
7e:e3:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:13:58 2025 by rpki-client