Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: CApF8xvniRwO0A/6y4LrseysCzZguhYdNhc10109c/Y=
Subject key identifier: F0:70:10:7D:E3:58:26:C9:93:AE:4D:5C:75:B7:D6:CB:86:F6:87:4C
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 0194BBCE0146FD03651CBB26F843D8D3FF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0540
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: y03myA4KToVE+BeZrrcUtUhkIcSJnuJMnki+YIVJens=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:01:46:fd:03:65:1c:bb:26:f8:43:d8:d3:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=f070107de35826c993ae4d5c75b7d6cb86f6874c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:4b:a6:d8:41:f3:ab:3e:e8:4d:fa:91:dc:
c5:56:b8:07:9a:29:c6:57:d2:4b:98:7e:6d:4b:97:
8a:12:4b:77:89:5d:79:81:ec:17:0c:fb:b0:67:36:
c4:72:37:4e:23:cc:78:ce:5b:bf:5b:bc:63:4d:6c:
62:04:86:fb:8c:1d:ec:25:bd:42:f4:19:80:bb:60:
94:91:a8:73:1b:a9:cb:34:07:a7:49:e1:cb:c5:4f:
fa:17:9f:fb:c5:ea:e1:21:ca:fa:80:2e:4a:c5:63:
78:4e:85:bb:c6:38:c6:b7:1a:e8:7f:b5:20:87:9a:
8d:27:0b:b4:4d:51:f7:02:71:c2:fe:83:e1:c3:d7:
fe:b0:84:cb:5f:fb:81:de:97:0a:d0:d3:ec:08:de:
97:0b:db:62:86:ec:88:2e:39:4c:4b:67:8e:e2:19:
23:91:24:e0:97:6c:c4:30:dd:47:e8:97:77:3f:87:
c2:6d:ba:0b:c5:70:5a:6d:3c:13:22:cc:c8:de:45:
0e:85:8b:6f:32:4c:f0:f8:d6:36:e0:e1:08:81:ee:
da:f5:47:dd:f3:c5:fa:aa:04:3c:0d:9c:87:83:c9:
cf:7d:62:e0:2c:30:61:51:67:4c:78:b8:08:7f:b5:
a3:4e:54:c5:99:00:98:bc:c1:38:53:86:3d:bd:29:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:10:7D:E3:58:26:C9:93:AE:4D:5C:75:B7:D6:CB:86:F6:87:4C
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6a:f6:b4:9b:f3:bd:11:fd:82:91:c0:cf:e0:0c:95:40:5f:
5d:46:50:ed:0e:f6:69:c2:29:a8:e8:42:eb:7c:ae:2f:1c:19:
76:29:b0:fc:ee:a7:8d:8a:a7:4f:f4:7b:c1:33:ac:83:2d:9f:
da:0d:0d:6a:bc:db:91:57:ad:a7:45:9d:cd:e5:75:a5:9b:db:
ef:da:c5:3a:67:b3:9c:a6:1c:cc:98:46:6d:c3:e6:13:4e:48:
60:d3:5f:1d:17:71:26:cf:6f:1b:7f:7e:0e:e6:9d:09:06:51:
f9:f4:ae:9d:e3:2b:04:c0:87:78:37:2a:e0:27:fd:83:c4:b6:
aa:9d:4d:d4:01:9b:24:5c:5c:0c:7f:8d:3b:37:e7:56:74:d8:
da:a0:9c:66:6d:38:1e:34:45:7e:1b:39:a4:d6:8a:dd:63:e8:
cc:8f:5c:bb:1b:f5:16:5b:47:06:cf:cc:46:ba:f1:96:86:80:
04:48:4f:2d:0c:4c:bf:e4:b1:a3:cd:ac:79:ed:27:a1:60:91:
53:9c:02:0f:7e:b7:d5:45:2c:fb:a4:c0:d5:f6:33:e3:24:71:
56:9b:34:3d:ed:fe:ca:10:b8:8a:80:ae:3c:35:8c:1e:3e:fb:
88:2c:e9:f7:5c:51:4d:15:2a:6f:95:96:a6:ac:70:de:74:8f:
8e:a2:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:57 2025 by rpki-client