Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier: mx4/K5ncuYRaROHXn7I60bk4IyLrV9aaOX/9hBTo/oA=
Subject key identifier: 32:D4:BA:CE:F1:0F:5E:0E:C2:6F:75:BD:04:2E:69:11:86:18:C9:31
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 0194BC0532FB74A2A47FE03AA72430C2F272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: 6M7wtWTyOJyK4+9gxwY/3kiLOz6OHQpaL03fE/YPZtE=)
2: 1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa (hash: 3XCfpEftkyfw/udAWZHLu6olWarQDCfoueNYZe4wmqM=)
3: FhFUjekMVWfVPctfHBmU9kdduwM.roa (hash: s0ZtrXHoDYQCJuRB3A3OULhctvS9KTrLARbUgNO49OE=)
4: g9Xis0X9LNCOyDX1kA4xgId4bUU.roa (hash: eAC0STaybazrwMkwNWuW4cD5J/cTK9sETsg7k83JaD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:32:fb:74:a2:a4:7f:e0:3a:a7:24:30:c2:f2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=32d4bacef10f5e0ec26f75bd042e69118618c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:a6:50:a0:dd:42:e3:b1:5b:f8:40:38:4b:
0f:ac:31:d8:6f:55:37:53:af:52:3a:7c:b5:09:e4:
8d:f5:1a:dd:c9:2f:48:e3:a2:39:7e:38:2d:7a:5b:
9a:2f:31:c8:3f:b8:72:31:81:05:b7:75:df:c0:e5:
ec:bb:60:f8:e3:a4:e2:8c:10:ba:58:95:e0:b0:dd:
b1:dd:01:56:2e:35:1a:e7:53:73:b5:b3:fa:1c:b3:
b1:49:7e:60:44:f1:44:b4:12:a1:ff:21:d1:b3:b6:
9a:75:03:c2:4b:d2:68:b0:8f:cf:2c:83:2e:c8:f2:
25:73:db:fb:57:4b:ab:4f:84:ad:d7:67:be:28:e3:
b6:be:4e:47:be:3e:4d:2a:96:9c:29:d7:29:5e:3b:
00:9a:64:b6:80:64:c1:c8:e1:ae:83:ca:fc:d7:6c:
56:9f:4e:35:49:11:04:2e:f4:35:17:95:40:98:5e:
8b:00:21:f1:74:55:08:91:01:67:03:8b:c4:3e:52:
02:10:3e:68:20:58:7d:9e:91:d4:5f:3f:11:38:6e:
86:b4:ca:8f:05:a1:58:05:ca:10:29:5d:f6:eb:c6:
fa:7f:05:97:c5:92:f2:95:d8:78:62:cc:fb:d7:a6:
b9:fd:50:4f:b9:69:d6:4a:99:87:7a:09:d3:0f:29:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:BA:CE:F1:0F:5E:0E:C2:6F:75:BD:04:2E:69:11:86:18:C9:31
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d6:0d:ad:58:18:a6:75:5f:c1:83:ff:aa:79:54:78:01:d6:
0c:76:b1:be:e5:68:ab:e4:9f:a0:5d:fe:4d:95:cd:d8:e1:70:
1f:c1:af:cb:25:82:95:3b:97:a9:fd:a9:8f:fc:9f:aa:70:5f:
b3:49:b0:3f:bb:9a:bd:42:f5:0b:2d:89:3f:7c:dc:cb:40:0e:
fe:f9:3c:57:28:9d:e1:0d:0e:00:a4:f9:4d:60:84:e5:67:60:
ec:f4:31:73:4a:22:c5:63:97:b1:92:b1:a5:3d:13:af:62:b5:
b2:9e:0b:f9:fd:0c:0a:ae:e5:ce:92:bc:48:df:98:18:36:ac:
43:7d:9c:ea:4b:10:80:d4:cb:0c:59:18:c9:2b:8f:6e:8a:59:
1c:3c:82:f4:bc:fa:8a:dc:3b:80:fa:30:dc:76:61:1b:c3:75:
6e:e7:60:3a:e2:8b:40:eb:84:84:75:33:d9:cc:02:06:5b:14:
9b:b8:f1:70:c2:e2:16:b4:bc:11:36:a5:fc:5e:99:dc:46:60:
cc:cc:79:ce:da:f3:c3:3a:f1:c9:92:21:f2:9f:3f:c2:39:30:
0b:5b:77:1b:2e:6f:fc:4b:6e:e8:d1:07:3c:25:43:2c:ae:ae:
f7:2e:42:ff:6b:5a:c4:40:c6:20:7e:76:e9:fc:87:7d:5e:28:
95:30:a2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:28 2025 by rpki-client