Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: m5CnIpyUTc5x+3DsvGMkH4OosYb1X+XLpbospGY076U=
Subject key identifier: 37:3A:CA:EE:65:E7:BC:2F:28:08:C8:04:69:05:51:9B:C8:6F:18:C3
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 0194BD1764FEBC58F9CC97CD0CEB4674F6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0679
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: Ns07r6C+DeOapRm2rj08r5q7r0MH+piE26aUQZIHrQI=)
2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=)
3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:64:fe:bc:58:f9:cc:97:cd:0c:eb:46:74:f6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=373acaee65e7bc2f2808c8046905519bc86f18c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:9d:42:e9:30:37:21:58:64:ba:b7:2a:2a:
71:d1:da:f5:23:da:b8:cf:e8:69:0e:28:b0:90:c4:
3a:1a:a8:71:b5:a9:2a:cb:96:fb:26:f6:f5:b7:cf:
d9:db:9f:7e:a3:79:aa:4b:e4:54:80:23:44:e7:f0:
25:bf:7b:20:ce:59:fb:57:25:9e:a4:4b:3a:41:ac:
d2:69:42:50:d4:6f:44:bc:2c:30:bf:6c:32:0c:fe:
46:ad:b5:8b:11:92:12:11:f9:31:0f:8e:de:15:5f:
56:22:5c:c9:cc:20:0f:a1:f0:23:82:d7:7c:49:23:
58:62:32:90:27:16:54:93:72:a3:93:5e:f1:83:ac:
e0:5d:e5:61:02:2f:c9:63:7c:b9:84:e2:ba:78:3f:
60:1b:00:6a:92:97:1c:87:3c:88:63:28:68:18:04:
9e:fb:44:6b:8c:f2:3b:53:61:22:ec:fc:d7:5d:92:
06:0d:eb:44:21:bf:e4:78:e1:53:f5:ce:ba:6b:cb:
8b:e4:3b:22:0c:78:7f:3f:46:7e:f5:c7:4a:eb:41:
aa:90:cf:72:90:5c:23:da:06:6b:f2:ee:7b:25:3b:
5b:7e:3a:c8:cd:bc:8c:c6:e0:60:4c:ab:6a:72:c5:
50:45:5d:d5:29:42:c5:10:98:b6:8d:15:9d:34:ad:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:CA:EE:65:E7:BC:2F:28:08:C8:04:69:05:51:9B:C8:6F:18:C3
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:65:a8:c5:c4:0c:5e:39:0d:7c:04:f6:82:11:34:d6:75:83:
5f:82:28:23:af:cb:e0:68:4d:15:04:c6:7c:d5:5e:25:f6:9c:
a2:d1:86:df:67:65:d5:e5:08:be:27:e7:0c:18:54:79:2a:b6:
23:88:9d:56:f0:cd:3d:db:56:4e:c1:a3:60:ae:29:3f:5a:74:
9d:a0:d1:30:88:90:ce:b0:7e:8d:e5:86:60:3f:02:68:e9:de:
17:1e:a0:48:a6:2b:ac:e1:25:97:f8:39:4c:c2:e8:61:88:5d:
e7:8a:f1:43:5f:1f:58:8e:ab:70:8d:58:a2:5a:a7:16:d8:c4:
fe:43:2f:de:a4:9f:1b:b9:cb:b6:ff:35:5b:96:a9:f6:91:b2:
49:bd:52:56:a0:25:27:2b:2d:6c:7a:85:3f:e3:f2:d4:3a:24:
32:1e:8f:1e:03:7b:bf:8b:72:e8:f4:27:97:a3:3c:67:e0:b8:
2b:a1:3a:45:43:4f:4f:1e:f6:8a:44:2d:c1:f1:4d:ae:4f:b9:
9f:51:b5:b1:8d:e2:b8:44:49:42:b7:2e:af:fd:71:a7:fc:25:
2e:4c:cc:d6:99:95:43:4c:2a:0e:b4:ce:7c:86:1d:2e:00:ea:
43:75:c0:c0:43:da:9f:87:1e:e6:61:82:c4:94:e4:ce:36:80:
5c:a2:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:09 2025 by rpki-client