Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: EMUeW9/zFE7ybldc/W3clIkfMBOBo4DP4T2Ib/2tiWg=
Subject key identifier: A7:97:97:25:56:9B:26:E7:34:95:52:B2:01:B5:70:48:45:B2:E0:CA
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 0194BCA9B8ADF9F2003E3D0E39ED140FF6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 10CC
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: HlGf8CJaYKrnB8Wqp4hISgYEeQlFLuCrDRhkwmvWj3I=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b8:ad:f9:f2:00:3e:3d:0e:39:ed:14:0f:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=a7979725569b26e7349552b201b5704845b2e0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:56:76:74:a9:57:84:3b:42:7b:35:5b:01:
93:f1:99:ba:97:a2:25:71:c4:e2:94:2a:3b:20:ad:
af:0f:fd:29:32:c4:90:74:d3:3d:cd:72:d7:fc:5b:
10:c6:74:0d:4c:88:ba:07:57:33:b4:11:b5:7c:81:
58:e6:61:98:c7:92:1b:07:55:66:8f:c2:25:6d:71:
39:93:9e:15:b6:a4:ec:85:48:59:e5:c4:ac:fd:1d:
c7:1a:03:dd:36:70:54:8d:be:b1:b5:f0:df:df:50:
5d:2e:3d:ed:d0:64:f6:cc:18:a2:25:12:f3:c6:ef:
bd:a7:15:b6:62:36:00:6f:39:20:11:c3:6f:53:9b:
9a:a1:bd:3d:10:7f:21:9b:9e:89:60:ee:79:8c:e1:
cd:91:88:d7:5a:e4:9d:f3:be:cb:be:55:56:9a:36:
0f:42:c3:17:9b:aa:fe:c2:eb:ec:f0:c6:8c:c7:9c:
35:77:63:95:15:a2:d5:ce:50:60:f5:32:91:08:b5:
12:be:ed:da:b8:67:30:1f:a7:1c:ac:a0:63:f5:9f:
a9:6c:33:d9:9f:de:1f:f4:71:49:a6:44:56:be:ee:
77:ee:be:f4:9f:94:2b:b1:0e:55:76:a0:80:c2:d6:
f2:1e:c8:46:4a:04:75:dc:d8:38:7e:46:99:60:50:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:97:25:56:9B:26:E7:34:95:52:B2:01:B5:70:48:45:B2:E0:CA
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8f:17:55:97:bc:25:dd:4d:35:f8:5c:d2:33:ef:5f:4c:98:
29:2d:14:f5:90:17:c5:c1:0f:f6:c9:f7:04:a0:db:2a:e8:53:
2b:e6:e4:3b:b4:98:f7:7c:6e:3c:eb:d9:78:8c:eb:c4:c7:ad:
83:0d:07:a8:a3:a3:c8:50:24:b8:e1:92:82:a1:c3:a5:cd:b9:
d3:43:83:21:a4:09:b3:a5:da:82:34:c8:52:c3:27:99:e9:4b:
93:24:12:d5:e6:e7:24:ee:23:d0:d6:9d:ca:d7:ec:9a:4e:3c:
ae:db:59:da:f7:b1:3e:b6:b5:a9:bd:91:6b:20:cb:cb:1f:92:
93:a4:6e:c9:2a:e3:fe:bc:b1:d5:f3:40:c1:e3:0e:fa:c0:59:
91:67:6a:f2:bd:11:4b:de:b6:6d:c6:65:9d:43:71:13:92:03:
e7:bd:98:a2:be:b3:c0:3e:8c:18:5e:1c:44:a6:0c:a4:5a:ab:
08:bb:a5:e9:56:14:41:58:e7:fe:f9:a0:73:eb:32:f4:58:5e:
f1:b7:e7:8e:ec:1a:e5:bd:4a:2e:2b:12:c4:d6:7b:86:61:53:
40:ee:6f:4c:fb:f4:60:12:ec:99:d4:3c:15:66:39:83:44:b1:
2b:87:ea:37:39:aa:bb:63:01:f9:73:d0:5a:f3:b4:e6:ea:80:
e1:a8:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:25 2025 by rpki-client