Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: MvnHtTMqaQ7g2/QK16hoNphTdYjoYpEcyu12PRr89ok=
Subject key identifier: B1:47:5C:C5:02:6C:C5:58:34:22:E0:F1:2F:E3:B6:69:4F:96:5F:58
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 0194BCE0DFDB658B8BDB4602535A011496D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: NNdpAPZtF1DCZIGCrsRKE9f5ffkZ8bXLwRJq9e8QVgE=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:db:65:8b:8b:db:46:02:53:5a:01:14:96:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=b1475cc5026cc5583422e0f12fe3b6694f965f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:76:94:b7:77:eb:06:9a:5b:d1:a3:d3:55:
06:40:1c:17:1d:da:70:da:a2:c6:7c:72:dd:52:27:
9d:42:46:80:0b:a2:00:b4:e9:f6:df:67:b5:37:e7:
fa:ab:51:db:d1:21:00:dc:65:f1:10:81:60:e4:45:
e0:a8:4a:45:d6:01:91:08:4b:03:bf:a3:e2:45:97:
10:f7:11:ce:18:ad:04:0b:1a:eb:72:d5:b4:e1:5f:
d5:6e:67:9f:47:b8:b8:66:e7:24:89:fb:d8:79:6a:
36:c1:58:db:d0:64:be:a6:fd:8a:00:b9:d8:4a:4d:
47:ec:92:b1:53:44:3b:b0:f3:dc:8b:30:02:7f:f2:
c9:7e:fb:fa:0b:ea:74:04:9f:88:55:23:8e:1a:eb:
45:bb:a5:a5:ff:d2:55:b4:0f:1d:51:09:44:da:62:
e7:70:81:4a:52:46:f2:1f:3b:4d:62:11:19:b8:41:
0d:de:1d:ae:03:b7:e2:46:93:fb:bb:4b:7a:ed:7a:
14:1c:66:8c:e5:a3:27:0b:a1:11:5d:10:21:54:63:
46:43:3e:a3:05:af:5f:13:97:8b:97:05:f0:cf:84:
c8:ba:b6:66:35:e7:39:1b:a0:9e:99:a5:a1:58:ba:
03:4a:fd:8c:c3:88:d3:1b:c0:96:19:0b:e4:29:39:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:5C:C5:02:6C:C5:58:34:22:E0:F1:2F:E3:B6:69:4F:96:5F:58
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:06:6c:f8:9e:47:d1:4f:09:93:f6:30:d3:ca:0d:be:b8:f9:
fc:13:1f:2d:9f:9b:ba:d3:69:92:a7:cc:87:18:17:34:a4:87:
f2:7d:24:db:a8:a9:9b:9a:ca:3c:75:0f:9c:43:83:46:e1:82:
e3:0f:d3:79:c0:a7:46:15:30:7a:a6:a3:c2:76:17:21:e1:c4:
d3:ab:f3:82:cd:6d:9b:6e:c1:e9:e8:ae:7e:dd:39:09:d0:1d:
15:6e:97:60:4c:1d:8e:36:c9:04:95:ea:78:36:86:7a:1d:12:
00:7e:5e:98:3c:e9:fd:6c:18:1d:66:32:b7:3f:02:26:a0:5f:
7c:f8:3b:b6:a1:44:d6:dd:98:a7:ee:66:fe:08:fd:32:7e:a7:
71:89:0c:e9:62:7c:e6:da:3d:2e:83:c1:0f:b1:4c:35:17:46:
d6:b6:f5:24:9b:42:21:14:c2:ed:cb:4a:ac:8e:7b:75:5d:e6:
ef:6f:19:6d:dc:d1:c6:54:18:f5:91:d5:3e:50:60:60:86:ec:
cf:71:40:ee:45:69:f2:4a:51:6b:0b:d0:7e:b3:fe:df:49:13:
38:0c:bb:ab:94:69:92:c7:00:30:b8:e4:1e:d2:2b:ac:3b:1a:
2e:2d:14:75:d8:42:88:f4:da:52:ec:bc:f9:b9:0b:ee:5c:97:
64:8a:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:55 2025 by rpki-client