Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier: NaoXu0v8XvUBaxvm6SJ2aXAiH0//vAlezLERzOSHnmI=
Subject key identifier: 6A:53:FE:F7:3D:EC:65:ED:7F:C7:E1:A9:64:15:D7:EC:BF:D0:79:F5
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial: 0194BC730A048149AC2DE8499159B9C5A9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number: 0CC2
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: 4101/WfYn1bcZxdf4wcm+qjuNlDUKdw2yEpSNGjpMVs=)
2: 3H8Iz5hHhMEKn8xskQH_PIfxJ2M.roa (hash: kRuaNE5DN0ER4h4yEzfsi+B5+sjpCYHLxCQH23V/CIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0a:04:81:49:ac:2d:e8:49:91:59:b9:c5:a9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=6a53fef73dec65ed7fc7e1a96415d7ecbfd079f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:81:ce:c4:00:c3:d9:c0:10:5b:95:c6:3f:
c6:b8:5f:02:b5:51:f0:d3:17:f0:af:69:94:1b:b6:
88:c1:5b:77:61:2e:f1:bb:2f:4f:2e:2f:f6:df:11:
af:ea:fd:fe:73:8f:57:ef:44:ea:16:98:90:cf:5e:
fc:b9:db:22:36:76:53:70:df:9f:68:25:6e:dc:fc:
38:3a:55:d5:80:5a:ab:63:2e:ed:b2:60:78:90:1f:
80:46:33:06:d8:7e:8d:66:e9:81:9a:65:31:54:1b:
84:67:ba:a6:dd:38:f5:87:63:a5:e2:10:4c:cb:1b:
b7:06:de:a7:f2:d3:17:31:c4:c8:58:4d:53:bb:ab:
71:2a:e5:08:a2:49:7d:b1:34:2b:21:f5:89:0b:0a:
f4:f8:97:82:c4:ea:ff:50:61:4e:88:ef:63:ed:a2:
74:b4:c8:40:df:df:9d:cc:f9:f5:17:7a:61:cd:be:
55:32:41:29:30:36:12:85:fa:f3:80:04:4e:a7:98:
84:74:50:ef:50:9a:54:9e:8a:8c:2e:a7:48:d6:9e:
2c:6a:37:44:c3:46:ad:24:4a:81:d6:41:b7:86:ff:
df:52:88:5d:ad:34:ff:b5:5d:38:30:55:3e:ac:19:
87:81:13:82:07:8d:27:a9:2e:77:b9:c7:84:22:73:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:FE:F7:3D:EC:65:ED:7F:C7:E1:A9:64:15:D7:EC:BF:D0:79:F5
X509v3 Authority Key Identifier:
keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c7:ac:a9:92:5c:21:db:ae:32:8e:16:59:52:e2:4c:a6:e2:
39:7a:d7:d1:e0:3e:ee:4f:6f:ae:90:e5:be:f1:a1:26:c5:66:
aa:33:03:07:1f:bd:c8:dc:86:81:5a:62:ae:f9:e0:2e:7a:92:
35:41:d3:25:42:3f:9f:2a:da:94:4c:67:9e:ed:d4:fa:41:58:
12:1e:ef:60:8b:c6:dd:36:77:76:15:fa:37:ef:66:12:52:1a:
45:31:46:67:96:8c:54:f0:a9:da:70:9a:95:a4:51:36:d9:91:
c7:34:cc:1b:e6:22:b2:56:ac:92:f1:58:93:2f:36:9f:c8:ee:
89:0d:d7:cb:a8:cf:c8:38:21:62:59:dc:b0:15:76:dc:8f:59:
6e:85:9c:00:4c:b8:8f:d1:c7:9d:03:4f:86:d6:e5:87:76:e4:
4d:06:09:82:85:54:a9:5b:ce:d8:50:6b:bd:28:33:e8:40:15:
71:13:b5:25:dd:49:e4:01:d7:91:ab:7d:8c:82:83:ae:76:c4:
6d:41:df:a8:88:00:da:af:6b:3e:a1:19:56:f3:c7:c5:fe:61:
d1:3b:33:e4:f8:d9:34:4e:f7:8f:9f:25:d4:3f:eb:ab:a1:5b:
ca:57:fb:04:ea:80:44:a1:a7:9d:97:40:19:2a:f5:14:94:a0:
8b:e4:18:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:50 2025 by rpki-client