Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: fjGYG8CMQNcKHs6CR+B6IBdrhbcSDlxmU/SEPVCEHtg=
Subject key identifier: D1:AA:90:E0:FF:F0:AA:41:7F:82:3C:73:6C:3A:02:26:36:CC:73:3D
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 0194BC728B689717E812815CFD82D8794C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: IIio4lIcOgdjfewFDDUGx4b6BXlc16neLHUGk9geOvQ=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8b:68:97:17:e8:12:81:5c:fd:82:d8:79:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=d1aa90e0fff0aa417f823c736c3a022636cc733d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:70:82:9a:6d:95:ec:6b:d7:ed:2a:ed:53:
ec:9a:c2:15:be:a1:0a:d5:5f:22:a4:8d:d3:69:8d:
4d:d2:9f:bd:63:ca:f8:85:ad:fc:20:8c:24:36:ac:
b6:89:fc:72:f5:77:9d:36:5b:e9:ea:b9:d1:c2:0e:
13:87:c4:24:c6:f0:fb:18:4e:83:3a:b6:0e:1a:c1:
45:fd:e6:df:10:c8:d8:75:bf:9b:85:ab:fc:de:91:
22:69:e2:9a:ba:3c:a0:34:99:d2:60:8c:b0:c7:33:
1c:ff:ac:e6:b2:12:29:a6:74:3a:2a:b4:78:16:8c:
23:bd:8a:86:27:33:31:2d:63:f0:9f:40:0c:9a:d1:
2d:25:6e:22:39:ae:9c:9d:0b:b8:bc:78:81:26:26:
8d:9b:81:5f:08:33:67:6c:99:0f:e5:48:6c:54:77:
0c:10:21:7e:14:51:c0:8b:db:78:f4:37:69:f5:d7:
88:cd:30:dd:8d:81:cf:e5:50:97:7b:ad:60:12:68:
b6:86:40:90:77:1c:08:28:f3:16:46:67:b1:c9:c7:
a2:4c:3a:4a:46:72:a5:94:8f:37:8c:c9:b4:f0:25:
50:d1:92:9e:a1:bf:e8:bf:30:15:48:16:c9:97:0e:
cc:33:cc:3c:f8:09:d9:ac:d3:8a:0e:cc:35:a3:ec:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:90:E0:FF:F0:AA:41:7F:82:3C:73:6C:3A:02:26:36:CC:73:3D
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:78:22:9f:dd:a0:a4:e4:00:5b:a7:9e:d1:7e:db:72:a3:8e:
a5:d5:76:4f:19:d3:c9:09:62:6d:96:c6:39:10:5a:31:ae:19:
82:4c:ce:0c:55:76:50:a9:df:cd:e3:af:c4:c2:ff:29:2b:61:
eb:bd:b1:d5:91:13:bd:e3:3c:7e:21:d4:f4:a1:4a:32:d1:5a:
15:a6:18:da:e8:cb:be:21:00:fe:64:36:c8:db:53:27:40:a1:
cf:a5:ae:f1:12:cb:9a:8e:9e:23:66:27:58:ae:fa:9f:4a:43:
4b:38:46:ea:b7:6e:6d:71:a5:29:42:fe:60:99:d0:d2:74:68:
7b:df:59:63:3a:73:f2:24:31:ef:16:cf:c5:79:a7:a8:d2:93:
5c:f5:bd:b5:23:61:36:25:22:fe:c4:31:db:fa:63:27:e1:8f:
c5:09:50:fb:10:0d:dd:a7:83:c4:5d:05:0b:78:9d:c6:b7:e3:
2a:c6:58:97:3f:48:27:56:cf:ae:e4:a9:e8:a4:d6:5c:12:d0:
91:7c:ef:f6:7c:e4:38:e7:89:38:4d:53:04:8e:e7:fd:59:df:
a6:bc:be:54:e8:25:00:84:f5:fd:72:e6:fd:ff:33:ef:9d:9b:
cf:40:f0:a9:33:47:34:3c:f2:c6:c4:2c:f4:67:96:1e:b5:20:
c3:b0:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:08 2025 by rpki-client