Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: v/TP9JZEx/m3PZqHJCPM9H8chR9sZf0BBnfbC+6xQsQ=
Subject key identifier: F1:19:3D:59:58:99:83:BE:DB:B3:16:B4:10:8D:3F:D7:2E:DC:B6:79
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 0194BD857452021C8A9232EF6879C3F5EF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: 14aU+pk+w/uguLWkn0FVTNK1sVQmuGxvuE6AuEQZ00k=)
2: s1SLHtKOtkgq5r5rHF__j6OHoGY.roa (hash: KY4xp5ySp/G6GnIfRT4waP6fnoRJIDEZEgF7zNS/QEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:52:02:1c:8a:92:32:ef:68:79:c3:f5:ef:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=f1193d59589983bedbb316b4108d3fd72edcb679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:b9:1c:25:9b:a7:77:cc:4b:fb:0a:7c:0b:
e5:e0:31:e7:e8:8c:99:13:57:48:95:69:6b:85:3d:
43:4a:86:3d:00:0c:ea:30:83:49:14:d5:1b:11:3d:
37:e8:3c:c4:92:3b:47:b5:70:4b:b0:a0:b3:df:69:
63:45:d1:5b:cc:d0:bf:25:3c:87:24:a2:4f:39:7c:
25:6f:8d:77:d6:b0:1a:8d:09:0b:9e:2e:b1:6b:61:
80:b1:a1:b8:eb:ab:6a:91:6e:fc:9e:7c:cc:a4:81:
55:89:e5:7b:5b:2c:b7:7d:47:17:7c:65:ef:3c:2a:
e3:1e:00:ab:c8:e7:ec:63:b5:47:00:6a:81:8d:3e:
48:a3:09:3e:33:6e:92:46:db:23:17:f7:f5:dc:12:
9f:79:12:83:aa:e0:b3:07:65:ea:86:c8:01:15:5a:
da:b5:fc:47:c9:f2:7a:6e:c6:86:75:b6:6f:09:b1:
4d:de:d7:d0:a6:d7:34:66:52:12:90:fc:9b:2e:c8:
2e:ab:f4:25:d8:0e:94:9b:9d:0e:8c:6f:5a:c5:8d:
84:61:31:83:81:8c:23:e6:a9:cb:7b:29:2f:36:2c:
d5:41:fd:91:7c:a2:88:c1:92:c9:ec:62:2b:59:99:
6c:7a:06:44:d1:f9:90:23:80:bd:60:7f:f0:ad:88:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:3D:59:58:99:83:BE:DB:B3:16:B4:10:8D:3F:D7:2E:DC:B6:79
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:04:0c:13:b5:d9:f7:d0:cd:3f:aa:24:fb:3f:8b:21:59:d8:
56:f4:e1:11:2d:00:94:c2:d3:ff:84:bd:ea:3b:7a:87:b6:11:
dc:01:6e:76:ac:be:ac:c3:3e:a3:60:50:ab:91:23:e9:23:98:
f3:23:72:17:95:af:29:f9:e1:2e:c0:cd:6a:8d:99:2f:0a:d4:
b6:bc:54:f7:e0:86:81:0c:b8:c1:3d:52:66:e2:be:43:73:74:
cf:9b:9c:03:e3:d1:79:c9:6c:3a:cd:ed:59:ed:fd:7c:41:0d:
4c:e7:4d:9d:cc:6c:82:ba:5c:d8:08:ab:39:ef:e1:cb:8d:8c:
71:a2:d3:be:0a:10:54:51:ee:c2:34:fc:52:97:fa:dc:fc:b9:
7d:a8:fb:4d:82:25:1c:4f:30:f8:7d:1e:85:4c:e2:44:c8:01:
38:d3:f7:b1:d7:6e:ce:f0:8b:38:90:21:93:a6:fb:b4:e2:98:
ab:5e:c7:77:c2:5c:8e:f7:c3:ae:57:1b:8c:e3:61:e2:bc:95:
a5:65:b9:cc:1d:e2:19:81:6b:86:13:47:df:15:25:dd:4b:37:
95:04:88:4a:e1:b8:33:4c:58:71:fa:ad:92:ef:30:68:90:d3:
28:89:2c:ca:3b:03:c1:f9:20:15:36:c9:66:52:02:ed:f0:0b:
d1:46:12:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:21 2025 by rpki-client