Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
File: 1-Wa0UKbR3EL4Td28NLTovztI2E0.mft (raw, json)
Hash identifier: ECxaLaaCFDaaJD7ksatsA3YbcRK4LU0q4uDFPaV1wfA=
Subject key identifier: 8F:F1:59:59:A3:3F:35:0B:06:9E:EB:73:73:B4:E5:B3:E9:34:2D:C5
Authority key identifier: F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
Certificate issuer: /CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Certificate serial: 0194BC3BBEAF707AC5183E112A3F7652E72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
Manifest number: 01DE
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: 1-Wa0UKbR3EL4Td28NLTovztI2E0.crl (hash: WUM3ND4cEdCFLK80W/7rXAAof1hl/lb8ehxmEXdhjW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:be:af:70:7a:c5:18:3e:11:2a:3f:76:52:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=8ff15959a33f350b069eeb7373b4e5b3e9342dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:84:8c:0c:59:19:29:57:61:ad:6d:fb:0a:
c9:4e:30:62:0c:a7:a8:02:24:9e:ad:c8:b1:41:f0:
8b:f6:49:46:58:c7:3a:a0:02:39:be:db:f5:21:d0:
72:7c:67:57:cd:ae:b0:82:42:82:e9:a2:cd:60:b7:
23:16:c4:0e:ec:26:f5:e4:49:cb:bc:7d:30:2b:c1:
07:6e:e0:cc:8e:95:34:0b:86:a7:91:35:b2:03:49:
34:62:3e:94:44:42:72:b4:3b:96:5e:51:78:8a:82:
29:14:36:01:8c:8f:c1:c6:07:be:1f:46:02:64:40:
be:4d:05:f3:83:63:71:5f:07:21:e2:89:79:f3:56:
7f:1f:03:d3:40:59:d9:43:a9:8f:bf:a1:64:bd:d4:
4e:4e:ab:7a:79:23:b8:89:47:99:c6:07:ca:4f:e5:
0e:ab:67:a2:a5:e7:b5:9b:0a:48:ef:57:58:db:e3:
7d:d7:61:aa:f3:54:25:cb:0e:1d:11:00:43:9f:03:
30:e5:0d:b7:c5:33:21:8d:96:3b:61:54:4c:72:c3:
1f:07:51:5f:ce:2d:14:45:e0:e5:a0:c3:90:35:e2:
7c:50:a0:b9:50:8f:88:57:29:ae:0f:c9:af:53:ed:
5a:2a:7e:98:50:b0:37:41:28:a4:98:98:cb:34:dc:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:59:59:A3:3F:35:0B:06:9E:EB:73:73:B4:E5:B3:E9:34:2D:C5
X509v3 Authority Key Identifier:
keyid:F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:5b:06:e5:a4:c2:c4:cf:0f:89:13:a8:5d:5d:18:80:aa:
c3:f4:9d:5c:b9:f2:59:1e:1e:56:eb:2f:b5:e6:73:c9:6b:83:
25:3d:23:7b:09:ff:3e:3a:01:51:98:4c:49:27:36:57:3e:2b:
1e:0c:4b:87:d1:e2:01:f0:c6:81:79:b2:b8:c9:81:f4:c8:e2:
fa:f7:c0:b0:7e:c0:af:5d:ac:9c:11:b1:3d:95:0a:6b:d8:63:
4c:1c:17:48:40:06:dd:4c:ae:33:f1:17:68:1b:ea:76:50:58:
cb:54:8d:b8:5b:e9:1d:0a:c5:31:fb:87:cf:71:82:ed:5d:d2:
ee:e4:a7:23:f6:86:46:87:c3:04:93:a9:ca:d0:39:3e:0b:d5:
e5:61:22:e9:a6:8c:aa:f3:c1:7c:3a:ec:d6:42:cc:4a:cf:0e:
bf:00:c5:14:f2:9f:11:b2:24:5b:d2:3c:65:e7:84:68:81:f7:
a8:43:59:f1:3e:31:14:72:2b:89:16:cf:e4:61:22:63:e9:c4:
7d:b0:e4:2b:44:be:0c:76:29:2e:2f:94:35:86:21:c6:09:48:
37:bc:d0:ea:86:c9:d7:e3:35:4b:5c:ee:99:b7:ad:6b:a4:9e:
ac:1b:a5:f6:fe:63:c5:eb:e1:7a:7a:99:f8:de:4b:b0:b2:28:
a0:80:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:11 2025 by rpki-client