Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: JA8ywb7G4UnjkrWJOHMtHDXAEG918lV2Ppl5RK8nyUk=
Subject key identifier: BE:9E:1C:AD:13:89:B7:30:AA:50:10:0B:06:D2:3E:DF:4A:DF:A8:7F
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 0194BD8529ABE4929913CAC96A78E0179298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 0F03
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: tNA4/lQnSzxQKUEuHReusIfBm6j/lXWs6y46kfZiDFc=)
2: gGx-x2iRamyRfnlhx5me1YxCw6s.roa (hash: JLnMtxeLdoGYGRa/pvkNkIdX/aY0zlXxd7zsjwME0tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:29:ab:e4:92:99:13:ca:c9:6a:78:e0:17:92:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=be9e1cad1389b730aa50100b06d23edf4adfa87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:54:ad:c3:48:e4:12:71:4b:b9:eb:2a:92:
1b:fd:2b:64:a0:8f:5b:5e:5b:0b:fe:77:e9:25:33:
e1:0f:51:de:ee:a7:60:c5:6c:8a:35:b9:69:2c:67:
8c:51:c7:41:8d:75:6e:05:a9:3b:d7:9e:c9:47:bf:
11:37:24:49:2d:94:e9:8e:89:87:95:69:eb:1f:c4:
32:d3:e2:0e:a4:7e:cc:0f:87:2a:b3:57:cd:1f:14:
96:5e:8b:b5:01:0a:b3:b2:9e:c1:f6:4b:e6:47:30:
3c:1c:f7:17:b7:33:4f:1d:2b:22:76:89:aa:76:07:
ac:6a:33:cd:a9:47:b7:b2:8a:51:a5:61:c9:23:a6:
0d:13:8a:cd:00:ed:8c:fc:47:30:d5:4b:16:b0:d4:
ce:8a:16:3f:a0:23:47:b0:a0:d2:5e:d1:3d:9c:8b:
29:8e:3d:b6:8c:b2:3f:35:52:c9:bb:3d:8e:91:52:
c3:1a:d6:1e:6e:d1:39:f6:61:e2:86:e2:7d:34:8a:
bf:28:6c:85:45:4e:46:1e:1c:71:a1:ee:41:cb:06:
32:0d:76:58:d2:ad:2b:1a:8c:da:c2:11:42:87:01:
89:98:1a:36:f3:63:28:c1:5b:96:fd:c4:c4:f5:c2:
d9:50:d6:bf:77:da:8e:e3:b4:99:0a:68:d0:b8:09:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:1C:AD:13:89:B7:30:AA:50:10:0B:06:D2:3E:DF:4A:DF:A8:7F
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e1:cf:99:08:59:ed:4e:f7:85:d3:f1:8e:50:87:1a:66:2e:
8b:ff:55:3a:e3:fd:d2:bb:1c:c3:7c:bc:a7:a1:d5:c1:90:6f:
3a:c4:a4:63:0f:79:0a:40:b3:86:bc:3c:0c:9f:ac:92:80:10:
11:bb:67:b1:d5:6e:68:bc:b3:6d:a5:49:61:85:c6:93:84:37:
c0:b1:ba:f1:34:53:0e:48:d5:09:50:31:cf:3a:c7:01:48:82:
02:2e:04:f6:73:0a:19:cf:b2:e7:b7:f3:b0:64:ce:2e:8a:31:
e1:f5:fb:01:19:e5:8b:00:ed:f4:d8:97:21:f4:f7:1b:46:17:
c3:96:59:c9:40:44:3d:8f:d0:f4:18:55:28:5d:71:72:2a:9d:
5c:af:ac:d1:6d:29:4e:ef:49:20:c5:59:65:b3:5e:9f:5e:ab:
e1:e1:5c:89:5d:d6:f6:56:f2:14:de:08:b5:90:7b:b8:52:82:
f7:2e:65:7b:7f:50:88:92:79:0a:c8:f2:4d:b2:38:30:9e:ce:
e4:7c:5c:38:c7:31:df:6f:e6:84:a3:32:d1:87:88:00:cf:d9:
90:2b:98:76:2a:49:cd:9c:eb:c7:de:fb:ff:d5:6f:08:17:e8:
10:03:a1:72:38:51:a1:02:88:cd:58:96:63:19:8f:2e:ab:72:
b1:2c:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:00 2025 by rpki-client