Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File: 1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier: lpZ+dYLlWeqQDVcc4GceS5Hazh3ak1v2d7pSnBVvJsk=
Subject key identifier: 20:4D:06:33:62:C4:3A:AA:19:99:92:3F:F0:61:70:CB:CB:46:8C:7D
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial: 0194BBCDD68485634AAE0F1ABE49F2ACF10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number: 017D
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: kc3R9gpTM4cxikHJkUJrP7MMvFlKI7fdZcs8rhcbHgU=)
2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d6:84:85:63:4a:ae:0f:1a:be:49:f2:ac:f1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=204d063362c43aaa1999923ff06170cbcb468c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:86:84:21:3f:d7:66:3d:b0:c1:f2:5d:bb:
25:0c:3c:30:ea:bf:7a:36:04:02:11:6b:2f:98:fc:
94:48:8e:f8:a6:2f:9a:7d:73:f8:d1:70:c4:12:e0:
a5:75:42:ff:a6:e9:c5:ad:87:0e:10:04:f8:5b:69:
31:69:77:90:da:94:70:00:52:69:bb:bd:f3:fe:44:
9c:1b:31:22:e7:e6:19:3b:0a:48:8e:6c:e5:7b:f5:
2e:69:a3:a5:18:98:79:f6:b3:d0:fb:eb:a9:f0:22:
66:54:ea:00:50:ea:05:a0:3f:cc:47:1e:93:0c:5d:
46:19:fb:f1:34:90:09:6b:98:9e:09:bc:01:5c:67:
f7:9a:ee:c5:c9:f4:a9:29:a2:7e:50:78:79:80:26:
80:2c:b0:2e:7b:c8:a6:59:fc:a7:bf:c3:cd:93:cf:
6e:59:38:23:4f:be:1b:dc:32:e5:05:fa:ef:5f:51:
9f:bd:b6:71:8b:4b:ad:c6:b0:fb:8f:48:4d:8f:39:
ca:39:e3:69:6f:e0:81:8a:cf:a7:9f:a0:81:71:37:
c5:34:fc:f4:93:98:f0:08:9a:9e:90:59:a9:ef:d2:
4f:75:1d:8a:74:e4:ca:61:87:7c:df:c8:89:72:6a:
73:73:27:ed:df:b9:ce:1d:27:8a:10:d2:8a:62:83:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4D:06:33:62:C4:3A:AA:19:99:92:3F:F0:61:70:CB:CB:46:8C:7D
X509v3 Authority Key Identifier:
keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:52:3e:3c:2d:8f:87:b6:b9:b9:79:7a:b9:5f:13:fd:2c:d9:
d9:0f:38:40:ea:7c:20:a2:2d:70:43:f0:42:bb:a7:f4:44:5f:
b2:e3:24:b2:64:ea:da:30:47:eb:6c:73:4b:a7:93:0e:b3:2a:
90:c3:48:dd:d5:3c:fa:45:e6:ef:21:16:f6:d8:d8:2f:ad:09:
01:38:b8:12:2f:4c:d7:03:1a:98:3f:ce:b6:57:a6:b5:8d:80:
75:03:ba:d2:f4:14:37:b6:19:d8:c6:fb:27:b7:22:de:dd:9f:
26:81:14:28:7b:b1:c3:76:95:05:e2:5f:89:37:a4:12:f3:32:
c7:b5:1a:d1:a1:b7:b3:f9:5e:ee:93:cb:9a:d8:c4:75:96:df:
cd:95:4b:45:ba:a2:e9:00:a3:33:9e:f9:32:9c:ea:8f:bf:dc:
1c:42:1c:85:e5:91:0e:d7:58:44:3f:89:c3:aa:2b:ac:af:94:
c5:de:ee:fa:12:58:74:f6:14:7c:9e:2e:7c:c3:5a:49:7e:3a:
7c:c6:67:65:12:f9:ac:de:ba:2c:e9:cb:58:79:52:68:e5:c4:
58:e5:9d:17:40:da:de:9e:ad:49:9a:27:97:3f:87:2c:7b:de:
bd:65:b8:6e:6e:01:f9:3b:9a:2c:c3:c6:fb:5e:82:38:5b:9c:
6b:dc:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:30 2025 by rpki-client