Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: vEICsNT06xReIUvfQkcZTRNQzd91NeKZT++VD/a0+0o=
Subject key identifier: F5:3E:E5:A5:7C:63:B2:57:90:4C:67:77:64:C0:F9:2F:A9:E0:EB:73
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 0194BBCE6D48155ADFAED9E301C41505C717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 1253
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: brp5m9+dScqKbHP7ydEExwekpP/ZXYmF9vAg0GKRMao=)
2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6d:48:15:5a:df:ae:d9:e3:01:c4:15:05:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=f53ee5a57c63b257904c677764c0f92fa9e0eb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:44:41:f4:f8:fe:9c:0e:fb:31:15:15:92:
9c:1d:9b:c7:2b:c0:a8:3d:a1:99:37:56:14:19:da:
d2:57:68:29:89:04:2f:70:df:50:10:37:51:ce:6c:
48:ee:f3:a4:0b:b7:6a:a2:ac:89:ea:b4:75:45:fd:
66:db:e6:b4:11:1e:09:ee:ae:c8:4a:f8:a1:56:63:
8e:ef:e6:54:59:cb:fa:d8:0d:56:c1:0c:6b:b4:a8:
f9:ad:3e:68:cb:77:75:7b:c4:e2:83:83:de:cb:ab:
6f:8d:90:a3:10:50:6e:43:d6:f6:4f:f1:d0:38:96:
c8:30:c1:2b:7e:ce:33:0c:f5:09:85:35:16:a8:63:
e2:7f:91:9d:01:a8:45:65:8d:76:3f:26:89:05:cb:
20:11:02:04:c6:4a:0d:f7:31:5d:83:2f:7d:65:dd:
fd:9f:be:03:66:17:22:f5:08:3f:48:5d:75:82:9f:
72:b1:4b:2d:b2:d5:7b:c6:8b:0f:ec:9c:d0:d0:43:
af:7c:4a:ea:47:28:b3:d8:c5:59:df:a5:8a:35:14:
06:56:88:b4:cf:ee:4a:fc:8c:e6:c4:ca:fa:50:e7:
e3:b3:42:a4:fd:93:d7:41:db:a0:5b:8a:86:5c:48:
9a:93:2c:12:d1:16:23:1b:fd:06:6b:e9:75:24:93:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:E5:A5:7C:63:B2:57:90:4C:67:77:64:C0:F9:2F:A9:E0:EB:73
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:58:be:1f:ac:05:75:84:9f:c2:5e:5c:15:2e:43:f6:2c:be:
b8:14:ad:17:34:e4:50:78:e1:0d:34:e5:a6:65:e6:34:71:3e:
7e:a4:f6:51:d0:0a:8f:a6:24:91:ec:5e:92:ab:33:59:53:8e:
5d:53:7b:a2:cb:6d:f6:90:88:dd:6b:a9:12:ea:61:bb:8b:ee:
53:50:95:85:e9:bd:61:8b:a3:26:09:40:ba:c2:a9:b7:46:b0:
1c:60:22:47:a2:6a:60:99:91:bf:5a:bd:e0:05:c9:c9:4a:9f:
55:cb:a2:fb:5e:90:54:ba:08:d0:60:2f:42:5e:e7:62:37:85:
02:7a:11:16:9e:da:b8:b2:ad:24:95:18:17:ce:04:54:1e:59:
e7:0e:62:52:e8:9e:8b:51:1f:ad:b0:7c:4f:57:8c:5a:d3:3e:
d1:f1:93:7c:f5:0e:03:fe:d1:af:88:5b:97:e1:f1:85:8e:ae:
f9:eb:c1:25:c9:b9:46:ad:8d:0b:d1:fe:28:59:a0:10:40:05:
26:49:c0:b1:ec:3c:9d:15:eb:b3:9b:3a:f9:1a:f4:7d:f8:13:
be:1e:02:7a:50:17:ee:40:64:01:13:ca:a2:f6:0d:9f:4e:dd:
1d:52:57:c8:67:da:5b:99:d4:08:2b:5c:35:0e:72:99:20:61:
2c:22:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:15 2025 by rpki-client