Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier: BRzCyI0WrXeAo2xW/k7XtmjRvlq3El+BrgrzLCrnqJU=
Subject key identifier: 8D:7B:C3:93:FC:FE:F8:7B:84:54:46:A7:47:5C:EE:D0:DF:E9:19:3A
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial: 0194BCA995532D90C6D95FF1388EB698107C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: vgpdZdOrMCgNKCQ5pnpi0Dsp6azP+nbZL1e8POL9Y+U=)
2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:95:53:2d:90:c6:d9:5f:f1:38:8e:b6:98:10:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=8d7bc393fcfef87b845446a7475ceed0dfe9193a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:27:d9:ed:d9:9a:45:46:23:cc:21:8f:ab:
c9:4e:26:02:c2:77:17:50:47:fc:e7:ef:81:45:5f:
33:02:b9:98:58:99:7c:7b:07:86:1a:d5:9b:36:24:
53:27:dc:de:64:f8:29:38:e9:ab:52:a2:7a:86:64:
82:6f:44:b9:e7:7a:90:49:07:7b:eb:8d:52:89:d8:
b8:d5:89:5f:ce:14:d0:de:41:8b:17:f5:82:04:47:
fb:73:2f:66:c4:9f:84:8c:79:e0:95:e6:22:d3:2b:
ca:50:fb:de:07:74:a4:da:9d:f1:50:b9:59:c8:44:
1a:72:b9:9f:1e:19:c9:b6:51:b0:79:4d:cf:97:a2:
df:d7:b8:e3:b5:fa:83:92:ab:15:87:19:10:97:b3:
27:57:b0:65:a1:15:93:48:4b:00:e1:fa:6a:02:c9:
d7:0f:24:46:35:f9:6d:e9:62:cb:68:dc:77:bb:26:
c9:dd:74:4a:7a:cd:92:28:23:4e:d5:c8:36:fc:c8:
dc:c9:73:83:b0:e4:d9:59:21:09:5b:9f:e6:2b:22:
3a:59:d3:58:aa:e7:4d:47:d7:e6:ef:58:15:7f:39:
58:ff:fb:07:77:16:3f:e0:20:30:fe:35:94:42:e8:
ad:41:74:91:51:e8:1b:ba:2c:e9:ea:a2:58:d8:25:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:C3:93:FC:FE:F8:7B:84:54:46:A7:47:5C:EE:D0:DF:E9:19:3A
X509v3 Authority Key Identifier:
keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2d:6f:28:80:53:6b:13:1c:29:69:b1:63:df:a9:d0:14:91:
9a:4a:61:66:00:d7:14:15:a4:b7:70:8e:38:c3:0e:8f:2c:09:
b2:50:ac:84:e4:7d:94:6c:1c:28:ac:9c:f2:4f:2a:79:3b:e3:
67:a9:0e:eb:96:17:9e:f6:2a:15:3d:5c:25:06:82:40:9c:1e:
aa:b5:d2:c2:05:6e:ba:81:90:2e:53:7a:69:e4:64:56:e5:8f:
88:7a:9c:f1:14:eb:a1:d0:7b:39:2d:1b:56:2a:a7:6b:63:de:
ca:4b:f7:94:c2:38:6a:8f:06:e9:94:4c:69:96:cb:e6:c3:fd:
fd:86:fc:b0:a5:88:f1:31:0e:57:d5:fc:8a:20:06:9e:78:be:
e9:95:a3:b8:d6:02:92:62:78:99:56:76:18:b3:0a:31:e8:3e:
5f:33:96:31:3f:97:34:e1:9d:8c:78:9e:03:71:f4:24:2a:66:
ff:aa:f5:e5:85:78:79:90:44:70:ae:64:79:f7:28:ff:fb:17:
f2:86:06:ba:7b:c8:d6:a5:f1:fe:e1:61:de:31:8e:f5:08:3c:
09:95:cf:c2:ce:3f:aa:d4:0b:ec:3b:ca:c9:2c:02:87:f2:f6:
86:79:42:6b:0b:94:58:3f:31:8e:cd:5e:f8:62:a4:f5:26:2c:
c2:0b:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:07 2025 by rpki-client