Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: Jbck+3QIGuo5aGvvg7jqYW6snwIhEskDV6x0KTfexOs=
Subject key identifier: 94:D4:44:60:3A:74:E3:06:8F:E7:1F:0F:57:B4:8C:39:E0:D3:2B:FD
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 0194BC052EF86536ADD635FFB91DB687BEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: 31DH+UVhe9+2d9CY3pYr0tB1y2SPyMD46mWPE0d/FtY=)
2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2e:f8:65:36:ad:d6:35:ff:b9:1d:b6:87:be:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=94d444603a74e3068fe71f0f57b48c39e0d32bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e3:b7:f9:fe:00:8d:76:90:a6:ee:3d:38:43:
20:43:b0:07:88:65:a4:93:ad:12:44:c2:b0:f9:4f:
8a:ea:52:4d:d5:f9:f9:a7:53:46:9a:52:e6:fc:1e:
f3:ed:57:0b:32:4a:5c:8b:11:d2:76:e4:d4:8a:4d:
9a:30:ed:4c:b2:6a:c1:8a:db:2d:f6:6c:07:a5:4b:
bc:20:45:d4:62:e8:b6:6e:91:e4:e9:ab:9a:29:24:
65:6e:dd:5e:37:3c:5d:42:0b:d9:d6:23:53:07:29:
58:6d:ae:c8:96:f3:91:80:11:d8:ed:bf:18:89:46:
f9:53:47:71:77:c0:12:bd:b8:25:a6:d1:bc:32:30:
b3:90:4c:0c:7c:7d:07:01:b6:b1:94:a2:d3:84:d9:
9e:60:ff:1b:06:c2:93:29:59:f9:3b:48:58:f9:7b:
bf:b3:c8:10:d0:00:1f:d7:9b:f4:5b:80:55:4a:26:
6a:ad:8a:85:5d:4b:e2:a3:92:2f:a6:26:2c:b0:96:
df:24:b2:b3:14:00:cd:ee:83:f0:9d:b3:4b:17:25:
33:55:86:e4:cd:93:01:5e:9a:ec:04:6d:47:c8:f4:
5a:b8:20:e9:a2:97:cd:2f:ef:b1:23:6b:d5:45:ae:
01:39:3c:17:f7:bf:42:a9:71:ca:e6:0b:82:a2:59:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D4:44:60:3A:74:E3:06:8F:E7:1F:0F:57:B4:8C:39:E0:D3:2B:FD
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:39:02:73:0d:ea:14:04:ae:d0:3c:96:13:3c:d7:96:38:
6f:da:c6:62:8a:b5:7d:3b:85:ae:7f:04:03:52:74:40:8e:c3:
1b:cd:3c:02:0b:45:30:c6:79:90:40:3f:26:84:3e:cf:37:63:
b7:02:21:4a:00:3c:35:49:cb:92:15:8f:ce:a0:9b:11:52:f2:
72:71:59:60:51:15:45:32:3b:f4:c7:04:e6:c5:00:c8:47:03:
3c:82:31:d1:2b:34:62:58:0a:98:e3:35:37:04:f9:70:31:e9:
88:da:a0:64:6d:32:53:8d:48:cb:83:f1:84:ab:3e:c8:69:08:
b1:93:2d:63:e6:a5:ed:a1:d5:89:88:5b:96:dc:99:1a:60:aa:
e3:f0:fd:5d:51:8a:a6:7b:39:fe:6e:75:cb:a8:cb:61:ad:80:
63:74:6f:d3:a4:e6:16:52:62:18:d7:78:06:d2:bb:44:dd:52:
c0:57:93:7d:92:bb:05:98:67:48:f2:40:79:e7:8b:31:8d:1a:
d9:82:5e:b0:08:d5:bc:3f:27:ad:3b:f2:78:81:56:93:95:de:
d8:51:84:cf:b6:de:2b:d4:c7:c8:ad:5c:7e:09:cc:76:fb:2d:
a0:53:10:7f:9e:52:b7:d6:5c:5e:7e:69:01:ed:03:ee:db:94:
18:15:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:31 2025 by rpki-client