Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: 0hjvXKJ4j4gO8FU2I1+UkR1rXSpVMUNpe2PVR0gJDBw=
Subject key identifier: AF:CF:7B:43:F3:A0:85:49:4F:09:2C:0A:AC:6F:F4:8C:14:1A:A3:E1
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 0194BC04DB1951BC37E1857A5AC27B2FBCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 0356
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: yf2bELJDh2b5KPBEkD90povOW7witgTwcAbTMZKvKWU=)
2: x_9Ds4w921G-S6uMB3BqKl4lwk4.roa (hash: 4uIRZVtStLzfbHbkUvgOoPNPKk9YaTAL+flcnzSJknE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:db:19:51:bc:37:e1:85:7a:5a:c2:7b:2f:bc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=afcf7b43f3a085494f092c0aac6ff48c141aa3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:d8:ee:c9:d3:2d:b7:8d:4b:40:62:0a:cf:
fe:51:e1:e6:a4:62:28:87:6f:1b:22:7b:a5:fb:db:
97:fc:73:eb:75:91:05:d0:46:d7:a4:d5:3b:9d:fd:
a5:a2:c3:b2:af:fb:47:d9:51:70:32:df:20:06:56:
09:eb:cf:a3:a6:03:a4:13:fa:dd:6c:4c:24:52:5a:
56:58:22:fc:82:d6:17:93:83:4e:71:14:63:ac:1c:
71:97:b9:38:9e:b9:e2:57:ab:a4:d0:be:82:09:49:
cf:93:bb:2e:0d:de:12:5c:fe:25:66:01:93:ea:6a:
cb:c7:02:ec:21:2e:d9:0c:61:d8:fa:1c:fd:61:c5:
09:af:fd:6a:6a:d6:6d:34:5e:33:ca:74:9f:8b:07:
0b:fa:19:62:bb:be:56:bf:db:7a:b9:33:3b:e9:6c:
9c:cf:82:92:b5:0d:dc:8f:38:09:14:19:7e:86:c3:
c2:3c:b6:b6:30:95:eb:3d:ab:c2:b7:95:88:93:4d:
02:64:a1:f3:36:f5:17:58:f1:29:ec:67:db:07:07:
54:49:b2:73:67:66:4b:cf:30:6b:c9:cb:de:8e:63:
1d:fa:32:4d:9c:2d:3b:16:e7:6c:fb:52:65:5d:1c:
4b:66:7f:c0:47:52:c2:39:1a:6f:83:63:09:91:f9:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:7B:43:F3:A0:85:49:4F:09:2C:0A:AC:6F:F4:8C:14:1A:A3:E1
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:2d:b4:57:b1:1a:9e:84:e8:09:86:ce:30:de:29:21:96:
f9:c8:96:f3:83:54:7a:e6:0e:92:8d:50:a8:b8:ed:24:d6:24:
6a:be:71:1f:ee:23:93:67:0d:b8:24:84:a7:d6:4e:b6:79:75:
4c:db:dc:b2:72:f3:ad:4e:fa:19:82:be:27:29:04:60:f2:df:
ca:e0:db:df:36:a5:cb:6b:49:d5:b8:76:08:80:1d:a6:f6:30:
d6:b6:51:12:13:b3:db:73:50:d8:ab:1c:8c:84:fd:c5:bb:70:
c8:3c:43:8c:f8:5d:a7:d7:11:90:80:54:51:41:bc:c3:bc:e8:
68:91:39:fe:02:9c:9e:c8:2d:a2:a0:15:98:4e:90:a0:f6:f7:
17:cb:14:20:76:8d:59:32:23:5a:15:79:08:c5:81:e7:57:50:
7e:6d:03:b0:57:31:8b:30:21:ec:d2:2c:31:a3:e0:85:85:14:
5a:e9:55:51:8d:e3:3a:34:5a:fd:a6:1a:93:b8:58:1b:29:d3:
76:ad:d3:62:a6:c2:5b:a7:11:1c:28:5e:8b:c8:4b:14:71:6e:
83:d9:52:cb:2e:51:d8:00:af:3d:cc:35:0e:df:9e:cc:07:4a:
8d:f2:b8:8e:b5:36:ec:06:42:a0:a3:9b:91:4f:bd:03:7d:04:
4f:b6:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:51 2025 by rpki-client