Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: yRGHMQ/eOiQACsilgYBGijPtfwvPVW/nf6JdklOgCrs=
Subject key identifier: C1:81:87:08:7E:D0:B3:C2:2F:24:52:57:35:31:7A:81:80:2E:D3:38
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 0194BBCE24DEACAC85E7885634179A52895C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: wHzhXRX8SoVcHcs9dLm8iHTdAdnU6Yrkm/D4Qi6Da0Q=)
2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=)
3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:de:ac:ac:85:e7:88:56:34:17:9a:52:89:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=c18187087ed0b3c22f24525735317a81802ed338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:99:4e:05:3d:cd:c9:55:20:d4:a7:2b:61:
13:0c:49:c0:c0:0a:54:59:42:cc:2a:4f:4c:c6:ca:
c9:1e:a4:22:b4:ee:21:f9:fd:ce:17:bb:5f:99:ba:
fb:15:0b:30:2c:b1:0e:c6:4c:ed:70:66:8a:74:5a:
17:d5:cd:9e:e3:f3:90:9d:32:32:8f:07:cd:cb:5b:
4c:ca:9d:c0:a5:b3:51:86:8f:b7:f0:7c:0e:26:db:
ea:ed:37:ca:5a:b1:d0:df:8e:de:86:4d:09:33:2f:
37:fc:99:5f:ed:78:e8:7a:63:a9:ce:f8:e3:02:80:
39:79:13:96:96:74:51:5b:55:38:6c:5f:79:bf:58:
d9:8a:4e:56:d2:30:23:7c:fb:b8:7c:db:04:ad:4e:
89:8a:14:07:f7:e4:b5:4d:02:77:df:01:7e:d9:1a:
80:a8:3a:39:80:0d:ac:60:e1:ed:65:57:94:b3:7d:
4e:13:d3:32:55:67:1a:fc:47:71:cb:c8:7c:38:07:
e8:53:91:94:78:ca:08:a9:4c:de:f6:16:56:34:a5:
87:db:3d:48:a9:5d:71:3c:24:37:25:f5:1a:00:2e:
47:15:a6:0f:b4:93:1a:9d:45:8d:42:06:2c:92:7b:
15:fb:75:77:32:a7:cf:57:58:63:17:b3:17:f6:ae:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:87:08:7E:D0:B3:C2:2F:24:52:57:35:31:7A:81:80:2E:D3:38
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:65:34:00:3a:f1:c4:6f:1e:84:c6:f2:61:f8:d4:20:3e:12:
ed:63:91:af:e0:12:3c:3a:94:74:91:75:80:6f:68:3c:be:39:
29:54:b2:17:f0:04:5b:ee:8a:ba:a2:79:da:60:79:c8:2a:76:
d6:e5:1a:6e:69:71:61:93:18:51:00:ea:19:02:e8:f9:b4:4f:
f9:1e:05:be:bc:2b:01:96:22:39:be:99:a1:e3:53:cb:88:0d:
88:e8:3b:d2:9f:ab:9e:fc:8f:b2:91:35:0c:21:30:02:80:74:
84:02:54:93:6d:b1:f6:d2:a1:91:73:0b:3e:85:3f:4b:b6:db:
a1:10:42:7b:5d:d0:29:40:56:47:d3:3a:a4:5a:0e:44:ee:c6:
55:38:5b:78:dc:aa:c5:91:61:07:27:51:df:3f:01:0e:1d:d5:
eb:10:d0:33:b3:82:db:6f:af:9e:44:98:24:2b:97:73:94:5c:
36:98:c6:d2:78:e3:58:16:1d:8d:9d:49:d3:1e:a6:e9:1c:8b:
d4:02:0c:41:a4:66:ab:f7:a0:54:f3:a2:b6:2a:b2:5f:bb:2c:
d5:6c:19:dc:59:6e:9e:09:91:8b:03:2c:f0:e9:ca:04:d9:6e:
c5:de:96:eb:82:92:3a:02:9f:85:eb:30:27:40:e4:ec:5c:59:
29:53:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:19 2025 by rpki-client