Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File: 1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier: b9SRmqSXU4ComN+ijFAe+2DaohTZTTzyYg5OQOqrs7k=
Subject key identifier: C6:3E:C0:85:FE:2D:41:FA:22:E0:67:05:46:97:F9:1E:6C:FC:0C:D0
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer: /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial: 0194BD17C65F61D617BA6B2D28F0D5A1387C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number: 112C
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: Bul4vrhlbbPExl/hyS2LzbkXWLetHQnrsjJ9O3FCkhA=)
2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:5f:61:d6:17:ba:6b:2d:28:f0:d5:a1:38:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=c63ec085fe2d41fa22e067054697f91e6cfc0cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:a7:78:90:f4:c1:fd:38:86:4f:61:94:0b:
a5:b6:6f:55:27:c0:a9:ae:45:48:87:e8:e3:2a:95:
fe:9a:4d:dc:56:76:ea:75:82:71:35:b5:d7:48:79:
74:76:3a:72:e3:bb:41:5d:0e:b1:ff:5d:3a:15:97:
87:be:bd:55:db:e7:85:a9:f6:cd:9f:f4:9e:79:c2:
ee:5e:2b:fb:d0:d6:fb:4b:4a:01:9a:96:e7:f5:65:
f7:2a:39:25:36:78:15:29:e8:22:30:c2:60:cc:05:
0a:1d:d8:ba:82:ae:c2:a8:72:12:96:34:20:55:f5:
74:1a:c0:cf:39:53:d4:52:64:7b:17:38:93:63:4f:
4c:87:d8:7a:0a:87:6b:95:0d:2d:7d:ec:f9:53:d9:
e1:fb:37:9b:d0:c6:29:25:67:d0:57:40:00:1c:d8:
38:a0:81:6c:d7:91:af:7d:b3:df:b4:9c:77:b3:a5:
2f:81:74:33:4a:a7:c4:63:ac:1a:54:27:5e:13:43:
25:90:7a:f7:81:82:c3:b4:cd:b1:b6:ff:94:32:08:
71:e0:cf:85:b4:4c:9a:9e:bd:c8:33:9f:30:e3:a5:
e7:3f:4f:e2:3a:c2:04:d2:43:14:0a:6a:05:68:4a:
4e:35:20:8c:83:69:d6:01:35:b9:44:0b:74:b5:61:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3E:C0:85:FE:2D:41:FA:22:E0:67:05:46:97:F9:1E:6C:FC:0C:D0
X509v3 Authority Key Identifier:
keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a0:63:e6:b0:b9:ec:81:36:7f:ae:78:de:df:9d:b0:f3:44:
41:7a:97:51:63:14:ad:0f:2c:60:f4:2b:86:e7:02:3e:cf:2d:
71:e6:79:e7:b0:92:ab:8c:d1:91:fd:8f:62:a2:1b:1a:08:c0:
6c:b4:74:4d:7d:23:57:1b:70:6b:19:29:57:e7:2c:64:c9:67:
6d:a1:65:6a:64:04:72:d6:1a:a7:6e:62:b3:01:31:ad:3e:4a:
7a:2f:01:76:ff:16:c8:d3:4d:a6:bf:9d:fa:0d:67:50:81:a7:
27:71:7a:29:36:fe:79:ce:57:f7:7b:2d:f3:48:39:90:90:61:
5a:c1:b2:e1:b4:76:d6:e9:97:ca:2d:21:1e:b1:15:e6:b1:26:
d6:e6:76:07:e3:ef:77:82:0f:32:c8:33:08:61:a1:14:00:94:
14:35:9c:b8:0f:e4:d1:3d:1a:76:e8:25:a9:61:39:21:32:97:
28:e5:fe:89:e3:58:aa:51:54:8b:73:c1:a1:98:7e:d7:0f:e5:
3b:42:5b:5f:a4:e5:07:43:53:19:50:d3:a2:23:3d:54:cc:d6:
d5:cb:97:29:04:b4:35:84:0d:f8:a8:4d:d8:59:aa:c0:72:b5:
09:2f:18:e5:ef:c9:bb:04:52:ec:29:1e:3c:4d:eb:84:cf:7e:
97:50:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:10 2025 by rpki-client