Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: ikNQ38fsM2LVBdODas4mKE3uhB6lEUjHAuBO6QmTSH8=
Subject key identifier: 71:B3:1B:4B:BD:0B:2C:6E:C0:F7:4C:EC:5B:60:AF:6D:09:CC:1F:A2
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 0194BC3C3C48915F8DE7DF322B231AC22BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0D1B
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: YyvzCPZcM9w1ujRAN1hGMpDKr7Kk25TTyQ6lKY2s4b0=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3c:48:91:5f:8d:e7:df:32:2b:23:1a:c2:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=71b31b4bbd0b2c6ec0f74cec5b60af6d09cc1fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:fe:af:05:ab:18:d4:1c:5d:0e:dd:5b:5a:
96:08:80:9e:63:ea:78:df:5e:59:47:c1:ce:b4:e2:
75:0a:78:34:cb:ca:91:1c:40:4c:21:98:8d:8d:40:
4d:68:00:fb:f0:b9:e0:bd:97:b6:6e:3b:b8:a7:ca:
3a:fa:e0:ed:6a:42:c3:98:bd:c3:81:be:64:d7:85:
fd:e3:5f:7f:26:50:9b:2a:17:df:29:7c:01:e8:1f:
1a:ff:66:32:3b:8a:55:f5:ba:04:f0:0c:db:7e:42:
53:d1:ed:3a:de:70:db:52:42:af:d5:8e:f2:fb:06:
d1:71:b8:fb:21:8d:a1:b2:bc:72:56:5a:84:ae:da:
1a:ad:8f:e3:1f:24:5a:69:67:9f:cd:d5:2c:4b:7f:
a1:f1:a8:29:02:b5:8d:e4:5f:7f:99:d2:98:76:91:
0f:9a:dd:4b:c0:75:52:6b:9e:bd:41:e1:80:7a:bd:
de:88:d9:6a:5c:06:63:83:7d:46:3f:16:ea:48:0b:
c5:f4:67:c1:5b:75:17:52:43:5a:01:88:53:da:a5:
2e:e8:a6:08:22:de:9d:4e:68:dc:4e:cc:d0:a4:83:
65:a1:e0:0d:a5:a3:76:09:59:c6:5f:20:e7:e9:02:
4a:78:8c:5c:13:d9:71:d6:f2:94:91:2a:a0:3c:6c:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B3:1B:4B:BD:0B:2C:6E:C0:F7:4C:EC:5B:60:AF:6D:09:CC:1F:A2
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ce:f9:db:11:53:03:9f:f1:63:4c:a0:1c:98:08:fb:c8:05:
1d:72:eb:13:dc:45:d7:86:34:7e:c8:22:a4:32:9b:34:f8:86:
cb:9b:2c:a4:57:ef:76:d7:4c:ab:a0:b2:e0:cc:53:cc:d8:c6:
92:b7:79:85:cb:4a:ba:29:6c:bf:6a:35:01:7e:42:98:be:6d:
83:7c:e0:a4:dc:c0:31:d3:de:a6:23:d5:90:dd:45:f1:ff:1e:
0b:75:07:d8:2c:97:4a:ea:62:4e:9b:96:fe:4c:dc:12:39:9a:
49:e6:7e:a2:7e:de:38:bd:3e:54:39:9e:bb:9c:48:97:48:0e:
cb:19:79:21:47:43:97:5b:0a:73:45:4c:1a:ce:db:fe:de:80:
4c:8d:b5:2d:13:4d:fb:2e:69:76:b0:a9:61:0d:a4:d1:74:d4:
0f:87:c5:5d:14:4e:77:f5:43:33:dc:71:d9:d6:ec:cd:f7:c8:
e2:de:9d:27:81:1a:cc:6d:59:2b:3d:89:2c:a3:7e:e1:7f:7d:
d8:ab:ef:57:5c:be:e1:cb:6f:9b:60:e9:7d:6f:e7:d1:0b:3f:
3c:8e:5a:22:9f:64:3b:da:2a:c4:52:9f:65:57:d0:9c:df:c3:
94:a5:9e:2d:1f:de:32:56:46:5f:54:db:68:a9:78:47:87:79:
d9:02:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:52 2025 by rpki-client