Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: 0IVBtx45z7vOIjt057RtGCh0FaAr3pjHEokrOZv2ctA=
Subject key identifier: CD:05:21:BE:4E:AD:A3:23:AB:D1:06:AA:98:63:D1:35:0B:DF:25:1A
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 0194BC72C69052601C6EBA99E01B0BF1CB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 0D7A
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: Pnaf3dL8yy4KEOBp/IU9JivpHwXiuFiHcZRk/4wrYRk=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c6:90:52:60:1c:6e:ba:99:e0:1b:0b:f1:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=cd0521be4eada323abd106aa9863d1350bdf251a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:ca:ec:d9:64:26:01:30:02:a2:25:26:ad:
59:b5:69:1c:6e:54:63:07:0c:fb:f8:7f:af:89:0d:
cb:b4:8c:22:43:1c:6e:18:ff:c1:60:f9:e4:5a:1c:
c4:f1:81:bb:63:de:91:91:8c:4a:f8:a9:89:ad:4a:
b3:56:5b:88:c3:e6:91:2c:0b:73:bd:cd:50:49:27:
ac:8e:11:18:ba:d6:66:99:71:c4:01:50:51:a1:5d:
89:1e:69:cd:70:e4:40:08:3a:c1:c9:08:02:90:a5:
c0:7c:18:64:f8:b1:a9:d6:6f:b2:85:1d:13:03:56:
83:5c:ea:79:10:eb:c9:54:a2:08:8e:7b:31:8d:0b:
1f:86:e7:9f:90:93:62:8d:e6:83:6c:61:6e:72:2a:
16:70:b9:89:66:87:ea:aa:61:53:fa:d9:2c:73:42:
2d:c0:a8:da:22:fe:07:c4:d3:9b:02:ea:54:e1:e0:
1c:e3:b4:21:77:5c:c7:3c:b6:b5:c2:e6:2f:36:f2:
1b:f4:86:0d:fb:4a:41:3a:8e:ab:e0:5c:63:db:c8:
e2:75:03:7f:88:a7:0e:4a:a2:1d:64:b9:2a:56:7d:
f3:5b:81:72:4a:e0:df:89:bf:04:f0:4c:d0:e1:89:
30:53:71:55:d7:f2:f1:d7:2c:5c:0e:79:bb:45:c5:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:05:21:BE:4E:AD:A3:23:AB:D1:06:AA:98:63:D1:35:0B:DF:25:1A
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c0:f6:72:68:b4:20:09:80:9c:b0:9d:8e:01:e5:22:19:9d:
8d:94:91:fb:ad:7d:9f:54:a7:90:74:0b:7e:04:b8:69:3a:a0:
94:e0:47:d6:2f:45:68:1e:0d:d8:c5:cb:22:87:03:8f:c3:f5:
a3:aa:37:8a:eb:96:e7:68:34:c9:f5:51:72:8f:bb:9f:3c:47:
e5:ce:93:1f:2a:f2:a6:ff:12:df:8d:9a:53:89:5f:41:cb:e2:
63:8e:ad:73:af:d5:4f:b7:c7:8c:21:dc:41:df:46:4c:95:df:
ff:71:ea:7c:6c:44:aa:f0:cb:66:c8:bc:69:a6:90:44:49:94:
39:0d:37:f0:40:44:67:1b:ed:fc:e9:a4:54:6a:a3:0e:1a:91:
ac:90:9c:98:09:93:26:55:0a:1c:ec:48:ab:13:14:9e:ad:43:
f1:38:8b:94:5c:8c:ed:42:79:65:85:ec:87:a5:f7:bb:b0:9e:
46:ba:78:96:66:a7:cb:19:d3:24:4e:72:28:1a:a7:1f:c3:8d:
7e:9b:bb:7a:ca:af:6a:37:19:b1:59:9c:df:4d:02:f9:ac:68:
f2:2b:04:62:f6:f7:df:9f:1d:66:ce:b6:bc:f4:df:2f:0e:e6:
6a:fd:4c:b7:a9:04:4c:ba:4f:3d:39:29:bb:2a:3e:c5:db:df:
9b:7b:bd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:19 2025 by rpki-client