Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: JmxkvLAqS6hfBvNc5qq4UciKSzmB47dLIpIyq8lkjT4=
Subject key identifier: AF:9F:60:AF:8C:AF:52:06:FE:6B:E7:11:3D:6B:F5:C6:E3:41:C2:9F
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 0194BC3C58E06DA95B3AA854290029A192FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 1163
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: MAudb8PtOB/1puF4n/UBzt6rIiIiKYLRhUpbVul6Npc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:58:e0:6d:a9:5b:3a:a8:54:29:00:29:a1:92:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=af9f60af8caf5206fe6be7113d6bf5c6e341c29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:ae:39:49:30:82:d3:95:f6:5f:ac:ca:6a:
74:35:82:63:53:4c:4e:de:34:78:d3:ac:14:16:50:
83:31:25:73:90:54:d3:24:15:0c:0a:65:b1:b6:37:
b0:1a:28:fa:38:c9:78:33:fb:5f:6b:b1:6d:6e:c1:
b0:aa:a6:0f:93:56:0c:0a:a9:79:05:c3:b7:8e:ca:
95:06:98:53:13:7b:62:74:10:9a:61:7b:52:aa:17:
6d:b4:25:ac:cd:3d:68:2a:8a:90:82:ee:24:06:de:
5a:5e:f9:15:ec:cf:ab:da:53:9d:e3:13:2a:17:45:
2c:fc:39:89:d0:49:14:be:80:5d:3f:50:48:a1:c5:
2d:2f:89:38:66:0c:d8:20:e4:09:2e:15:72:78:15:
a1:82:d1:5e:8e:8c:24:11:ff:85:6c:96:a9:2a:b7:
11:42:c9:2a:ca:4c:a6:8e:61:cd:d7:28:01:48:4d:
10:40:84:f3:6d:76:1e:3a:1f:37:2f:3f:3f:68:3c:
c0:2e:69:d3:e2:d1:96:40:a1:19:c7:ad:8f:b6:8a:
c3:b0:35:52:f3:55:d1:9c:1d:85:83:cf:b5:49:c7:
44:99:62:d9:1d:53:af:86:c5:6b:95:57:67:50:60:
e3:13:fe:88:a1:f4:c2:e9:33:e3:1b:b9:68:cb:b3:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:60:AF:8C:AF:52:06:FE:6B:E7:11:3D:6B:F5:C6:E3:41:C2:9F
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:35:5d:31:fc:d4:6a:53:65:a8:c4:00:a9:d1:a0:15:e2:c0:
6e:63:2e:14:63:98:27:d5:84:6b:7c:f5:2a:ad:d1:05:50:11:
08:0d:b8:e8:bb:2a:be:50:7c:e1:17:5b:a9:93:9d:28:03:5f:
0b:39:bc:ad:ee:4f:e4:9b:29:ab:9d:7e:28:f0:bd:1d:ed:ec:
bb:cf:16:ed:a6:bc:62:55:2f:c6:7e:87:e5:17:0f:14:95:6d:
31:a3:1a:a6:7f:84:12:8f:35:52:2d:77:af:5e:7c:9b:35:1c:
49:98:66:0f:0f:8f:d9:72:83:a0:ef:a1:5b:93:41:c2:f8:f0:
65:bf:7e:12:c3:01:ea:5a:fe:f1:7a:fe:6b:e2:e5:36:d5:0a:
20:26:f8:53:ca:5c:97:16:68:f1:ed:aa:0c:9d:90:f2:b2:55:
1a:d8:33:3f:8f:21:06:49:bc:b4:92:61:23:4c:18:27:95:c0:
d1:63:23:42:97:30:30:92:d0:1e:4a:6f:5f:58:db:b8:f1:cb:
b8:ce:41:45:13:53:25:b3:3f:e5:c0:84:4e:ab:16:2e:88:71:
93:0e:11:76:e7:56:25:dd:2c:e1:e5:22:2c:fe:3b:67:87:85:
25:a2:8e:63:79:c4:07:0d:ae:b1:62:06:13:34:bf:dd:2f:22:
5d:ae:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:38:46 2025 by rpki-client