Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier: HwBkW2y5loz6FAGY8TErkELmJdN7HRUOucEzChSIV0A=
Subject key identifier: FA:1F:4E:B1:A7:BC:8C:57:D5:5E:C5:0D:9F:CA:09:34:A7:19:90:32
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 0194BC72C210DD436AFD9F2A1E15D0C7CF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number: 0A7C
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: qx/naApnlKNzuvc0tf9H6G3pOfv8sk+KFzCJ6Vpp5vA=)
2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c2:10:dd:43:6a:fd:9f:2a:1e:15:d0:c7:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=fa1f4eb1a7bc8c57d55ec50d9fca0934a7199032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:44:69:dd:24:0f:2c:da:49:61:a0:e2:ce:
c3:7f:6d:a0:02:85:79:c0:c4:bf:6d:15:99:5a:31:
dc:79:f9:d8:68:ce:34:1a:39:33:37:da:be:a7:67:
af:83:a0:f6:59:81:2d:74:f0:d6:ef:82:e9:c7:11:
f5:6b:77:09:e2:6c:12:e5:b9:4c:4b:a0:66:09:34:
a9:65:1e:ed:8b:3a:28:03:aa:c7:90:cc:75:07:f1:
19:ab:db:7f:1c:1e:50:6e:f8:1d:36:41:e0:aa:c3:
74:ec:92:d4:83:c0:1c:53:1f:a4:6b:f3:fd:34:82:
89:33:17:22:81:1a:20:05:79:2f:90:cb:66:ce:02:
5d:6c:c3:cc:ab:ed:b8:69:2f:7a:86:d3:10:f7:28:
f8:cf:11:15:53:c2:e3:25:6e:d3:fe:9a:9b:33:1a:
24:58:0f:2c:59:9f:b9:d5:6f:17:4c:0e:ff:6a:65:
28:c5:49:b0:29:e0:69:84:be:39:5c:56:53:47:08:
3c:7b:b7:c6:bd:07:de:76:de:62:83:5e:a6:cb:31:
a6:a9:24:dc:6f:54:c6:fd:01:d8:09:43:d5:21:13:
00:cb:5c:b0:6a:cf:36:9e:4e:d5:bb:be:45:48:92:
99:7d:72:54:cd:09:13:44:67:41:51:82:d8:d0:bd:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:4E:B1:A7:BC:8C:57:D5:5E:C5:0D:9F:CA:09:34:A7:19:90:32
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0e:b4:9f:5f:da:a3:92:4c:3c:b5:20:ff:0b:ad:fc:07:68:
64:7c:d9:8b:94:ed:6c:75:36:51:a0:15:22:68:28:ba:73:eb:
eb:e0:15:0b:e9:1c:b9:27:24:e2:b0:bd:cb:ec:14:3b:f5:0a:
56:2b:91:ce:42:c7:7a:4c:2f:43:77:a1:5f:7b:1f:98:3f:ef:
c4:51:a9:d6:a6:71:26:bb:24:7d:4f:36:99:ca:70:83:f5:2f:
de:aa:96:fb:2c:16:9a:00:5e:d7:fe:fc:94:f4:1b:a1:c5:ee:
38:79:bc:dd:88:92:c9:5d:2e:42:87:a9:a6:4d:24:4e:51:57:
86:87:77:ab:d9:cf:71:d6:01:62:2b:35:0c:13:32:c6:87:bc:
aa:4b:74:73:59:34:31:75:42:c6:08:c0:8c:ec:e0:31:df:06:
aa:c0:67:d0:f5:75:c9:3b:9c:f8:73:ab:94:22:71:99:dc:5e:
3c:a2:ab:62:e2:d7:d2:7c:81:ce:32:03:46:73:c6:47:b2:e9:
9e:e0:5e:d0:97:7c:04:41:d5:01:c8:ed:4d:e4:7c:45:a6:b2:
e6:20:76:d2:8e:53:23:83:4f:f4:e1:dc:5a:b6:5a:17:41:a0:
28:98:24:65:09:a0:04:ea:fa:e1:77:77:1e:2e:ad:9d:b6:fa:
18:20:a3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:48 2025 by rpki-client