Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: EvvTIZLzENfwzKX+Du78+2HGxLh3xr93iRWZ1utInhg=
Subject key identifier: ED:0E:14:0A:7F:19:A0:D8:15:53:ED:D4:46:AF:FE:62:AA:66:06:0D
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 0194BC3BE8F63D5DB10375346D63B8A1C6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: h5+bB8M1Rw18/uyXkKH4IJkEh6LJWD36IL72QumS2wU=)
2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e8:f6:3d:5d:b1:03:75:34:6d:63:b8:a1:c6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=ed0e140a7f19a0d81553edd446affe62aa66060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:33:1a:83:e5:1c:b2:3f:ab:7c:7d:e7:d4:
2b:3c:13:81:12:34:09:8b:60:75:e8:b6:9e:5e:fe:
8a:8e:2e:14:89:fe:5b:7f:54:d4:b8:30:b9:0d:c9:
2d:0a:9a:5c:ba:87:01:92:d3:e6:c1:20:70:ac:c1:
ff:6f:5e:05:30:8c:29:25:35:8a:98:85:7e:c6:bc:
6f:6f:8b:0f:e0:8b:e3:b2:97:ee:7a:3b:10:2f:b9:
36:17:32:ac:d4:4a:41:a9:8d:fc:e8:3e:11:f4:51:
eb:34:a8:22:43:57:50:46:4b:7c:02:53:eb:fd:51:
0e:27:7b:0c:cb:6b:f5:6e:24:be:ed:73:60:14:32:
b7:c0:a2:c2:95:2a:b1:90:14:9f:6b:09:3d:48:fd:
25:31:57:13:a1:e9:9d:89:1c:8f:46:45:f7:5d:38:
6a:63:b1:16:95:91:91:e2:6e:6b:32:aa:7b:aa:20:
3a:29:d6:f5:af:ae:7d:8b:4a:81:f7:ca:e5:1b:e4:
69:4e:93:2f:0d:63:c5:b6:0e:b0:3a:28:7b:57:f7:
ad:dc:41:87:0d:f6:9f:56:65:72:04:e8:27:e8:aa:
34:bd:fc:70:19:14:fb:fa:d9:7e:90:d4:d2:32:65:
19:2c:8a:71:d4:58:a0:1e:1b:09:36:79:50:db:6e:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0E:14:0A:7F:19:A0:D8:15:53:ED:D4:46:AF:FE:62:AA:66:06:0D
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:2a:5c:c1:e9:51:1a:ab:12:32:27:f7:76:18:09:30:b4:
e0:78:75:ff:83:b8:03:55:0d:bd:b5:8f:d1:9d:4a:5d:4e:ab:
d0:b5:6d:d1:22:b6:f0:d4:2a:f2:9a:9d:e6:ee:07:66:9f:a0:
04:ba:73:5d:b4:2e:ee:b6:68:e1:04:17:f8:3f:26:7f:e9:f2:
63:b5:62:e6:16:c5:51:e6:67:68:00:a8:0f:2c:17:fe:8e:5f:
22:53:f7:28:97:b6:a9:d9:11:d0:6d:97:cb:ea:f7:2f:2c:72:
e5:fb:73:56:04:20:4d:76:83:be:4c:7f:a6:c3:c3:b3:49:bf:
21:50:f3:0d:e2:12:91:03:b2:2d:08:2f:e5:92:d2:cf:25:e2:
a5:0f:03:28:cb:7f:1e:90:4c:05:c3:cc:55:8a:1d:33:2f:64:
d8:83:7e:4f:ec:46:b6:f7:4b:3d:20:01:63:05:ea:24:09:81:
a5:81:d7:87:cf:e3:7e:78:df:f7:8c:34:9b:fb:31:01:b9:24:
29:1f:3c:42:c1:05:c5:e2:25:2e:64:8a:79:3f:42:15:2a:68:
5a:84:35:51:db:13:8d:a0:af:a8:4c:de:d7:4b:22:90:db:1a:
6a:2b:77:77:24:c1:27:f8:1a:bf:91:33:0a:31:46:6a:cb:47:
5b:58:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:07 2025 by rpki-client