Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: MNJF79LcvgOyKPql+wRu2GZBwrb8iIy3jxlRBwAH3QY=
Subject key identifier: 34:4B:CC:F4:C2:EE:3F:4F:57:99:15:AF:BA:8E:6B:57:8D:FF:A1:8C
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 0194BD178923123C333E7F8576393EF637D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: 6CTA7ZX7LTB8gxjkc+CzKD+Q4ureACcHb6pNihQkHaE=)
2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:89:23:12:3c:33:3e:7f:85:76:39:3e:f6:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=344bccf4c2ee3f4f579915afba8e6b578dffa18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:bc:cf:71:1f:c7:96:4d:e4:f6:b0:4f:30:
33:cb:c8:6d:ab:a3:f5:f4:e5:c0:df:f0:33:29:90:
78:dd:cf:d2:22:c2:44:cd:2f:c1:c7:50:7e:f8:39:
77:e5:e9:da:f4:ff:94:b3:85:06:ee:55:8e:e4:ef:
e0:31:a3:a7:58:56:42:e2:79:46:95:be:c6:d2:4a:
e8:36:fc:bd:c9:43:29:78:88:b2:7b:c8:e0:92:de:
93:93:a7:35:bf:47:f6:e4:14:7d:f1:e9:b1:5a:a3:
74:5f:a1:0f:67:ee:b3:bd:a5:f4:99:6a:dd:8d:1e:
1c:d0:33:b9:c2:c6:22:df:1d:a6:58:ca:6b:4f:7b:
d3:bb:0b:ec:dc:4b:cb:e8:e4:cf:2e:20:49:75:d3:
d7:41:58:40:66:e6:54:4b:95:38:79:4d:95:b3:b3:
8e:33:8c:c1:e2:fb:cb:6d:6c:95:6c:6b:11:f9:90:
b3:b8:30:cd:c4:1b:82:88:88:43:9c:0f:73:6a:04:
cb:47:92:8d:32:18:bd:63:aa:a8:47:e9:52:82:76:
77:14:ad:24:92:94:a3:e9:8b:47:2c:de:b6:91:e3:
6c:33:8b:2b:76:af:12:b2:aa:81:50:07:0b:bd:93:
43:04:4a:72:f4:2e:39:e9:ee:99:c1:8d:37:e0:22:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4B:CC:F4:C2:EE:3F:4F:57:99:15:AF:BA:8E:6B:57:8D:FF:A1:8C
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c4:d2:a8:c6:b1:8c:9c:eb:15:de:19:02:36:1c:04:15:4a:
6d:9f:9a:62:63:1a:13:28:37:83:4c:69:fb:9f:c9:b8:65:23:
f0:8e:d6:2a:dd:1a:36:ae:d0:76:b4:5d:c4:6f:eb:3a:64:93:
ab:3f:25:50:fc:67:b5:4e:91:02:bc:a8:3e:86:11:c7:02:dc:
c0:cc:e2:9b:c8:26:d1:75:38:94:8b:e9:e3:fb:12:64:27:79:
d1:ac:f9:c6:db:e9:7f:42:35:81:da:9e:fa:95:35:c8:a6:67:
cd:7e:b4:b3:68:9e:6b:bc:e6:e9:0b:5e:96:80:88:b8:9f:20:
03:57:4e:ed:3e:52:0b:3d:cc:6d:e8:8d:d9:61:36:ca:3b:80:
0e:76:24:c1:84:01:6c:67:83:75:59:b7:f7:b7:0f:63:e9:51:
8a:f2:99:13:74:22:4a:1c:45:2d:eb:e9:61:a5:2a:2e:d9:1c:
3e:0a:ef:42:22:5f:ff:43:1a:a5:33:ae:69:c7:5e:eb:a8:40:
22:26:b1:73:03:a4:01:58:3e:ff:17:1e:62:18:28:37:c0:18:
9d:13:36:cf:48:d4:9b:cb:a3:dc:e6:1c:fd:14:9b:9c:5e:b3:
9b:49:7f:16:d9:ee:62:3b:36:63:60:96:db:86:33:cd:59:b9:
71:43:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:12 2025 by rpki-client