Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: BjpMtc/q8xi/iBlG8pRYA7lEmCQJsC8AYRBm7RFSPZ0=
Subject key identifier: DA:CF:BF:50:87:D0:3F:23:82:7C:3C:AC:04:D9:EB:EC:0E:ED:B9:C6
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 0194BC72D69EB5BFDF86031F6DA68E663323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: jpQkcX9BFoPcnx0CZADo1TiazwiWPU5jKiaIZ72yVtM=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d6:9e:b5:bf:df:86:03:1f:6d:a6:8e:66:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=dacfbf5087d03f23827c3cac04d9ebec0eedb9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c7:79:12:8f:a6:46:73:de:f6:9e:c4:57:aa:
a1:57:58:20:b7:71:4d:36:98:19:dc:d0:1c:0a:06:
27:6a:e2:3a:66:dd:f4:39:12:52:25:52:83:b8:66:
95:01:73:b5:14:3f:68:3d:b8:73:28:ba:12:0d:4a:
0b:3f:bb:59:e4:90:91:c6:59:60:0f:81:3d:90:87:
f1:d2:b5:e9:b6:14:c9:9a:b7:95:5e:a5:75:6c:90:
25:ea:4d:bd:4f:83:43:ad:8f:50:6f:ab:47:3d:fa:
51:17:6d:ef:e2:0c:75:85:ef:09:2d:cc:a9:e5:6e:
99:9c:e8:d4:bb:8f:50:33:23:0f:bc:6d:24:ac:5c:
41:42:e0:5a:e6:74:c4:a2:65:35:0a:c0:0d:7d:70:
2b:a5:22:ba:f6:b3:dc:d9:da:d1:7e:e0:f6:f1:50:
8d:4f:44:b2:b2:6a:dc:f7:7d:85:4a:22:14:8c:5f:
88:66:7f:af:57:c5:b1:45:75:84:fe:d2:ed:65:d3:
68:2c:6e:c6:70:66:3c:7e:d1:76:0e:88:09:d7:64:
5b:6a:31:9a:56:c2:e7:3b:2c:f0:c4:8b:d9:51:09:
6c:7b:61:be:4c:7b:5f:8b:dc:a4:e1:3e:5f:e2:e1:
34:8a:aa:63:8c:cd:ba:a9:61:a2:13:fb:af:b1:18:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:BF:50:87:D0:3F:23:82:7C:3C:AC:04:D9:EB:EC:0E:ED:B9:C6
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:69:03:eb:43:15:3f:17:87:40:92:6a:95:da:ea:34:ef:47:
df:e4:af:0d:43:79:5f:42:4c:ea:ec:b5:ce:10:5d:e0:cd:7d:
fa:f3:9f:a5:8b:d1:a9:89:0b:f0:71:42:3e:07:4b:d6:55:1c:
93:e0:75:b0:bf:6b:ac:0e:01:79:05:f4:e8:b6:2e:b1:c3:9d:
93:15:54:b9:99:29:10:32:6a:e4:aa:74:01:b4:87:f5:76:15:
ff:cb:5c:b8:b8:5a:2d:69:0d:10:4d:72:ff:03:ec:38:9a:63:
57:98:0a:f7:4f:38:f3:47:f0:de:91:7a:e9:31:3d:e7:8b:5c:
0d:9d:f6:4b:17:68:f2:b8:b5:ac:02:1e:d1:b2:6d:d6:de:48:
03:60:8a:45:a4:7e:f0:2f:3f:67:04:ea:dc:5b:f2:cd:c8:cf:
c2:aa:7a:3e:93:77:84:fc:8d:d1:a9:51:67:ad:f8:91:d0:40:
e4:cb:6f:21:c0:c4:cd:84:ee:d5:46:11:b9:ed:32:7f:da:25:
f7:5b:c0:de:91:d4:e2:0c:83:8f:86:19:ad:82:7f:0d:55:78:
c5:5b:3f:97:33:9a:78:0f:f5:3c:b4:d8:2e:59:da:12:14:c8:
06:bf:75:c0:df:28:5b:52:0c:fd:9c:2b:d7:ce:da:ff:dc:cd:
e5:92:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:32 2025 by rpki-client