Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: oCfT48ZXu6NTeRdJI6VwmcOj0tY2o1xiIx8jKcxqo+I=
Subject key identifier: 42:F3:BB:8A:7B:3C:04:07:CC:FD:DD:7A:A3:A7:B0:35:3B:FD:10:E1
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 0194BD85B141F62CB9F2D4BDDBBD7736BAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: koUhWBaAW6K9G/UbCm0/hNqLtYyqwZh1PKRwCYgsnwQ=)
2: ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa (hash: 3E2wFt0mctq9eZeC5gr+9q8G9wNZ7Xmn3ppu8VejkKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b1:41:f6:2c:b9:f2:d4:bd:db:bd:77:36:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=42f3bb8a7b3c0407ccfddd7aa3a7b0353bfd10e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:40:39:95:90:30:75:61:f5:a3:09:fa:b9:
7c:c7:fe:58:ae:31:e9:54:54:d6:37:f4:0c:57:a0:
8b:00:37:f5:ed:9a:4c:82:b9:ab:10:42:2e:86:72:
13:cd:30:8d:32:89:87:07:c0:c2:71:3d:92:3c:f0:
48:95:7e:51:7a:d8:12:13:fa:ba:c9:9b:6f:6a:84:
e7:68:73:3b:47:46:0e:e4:e8:d8:d3:d4:58:b8:d0:
42:c0:e5:1f:9c:b9:12:81:58:d1:05:2a:b3:df:71:
f6:2a:45:8d:06:d6:43:e8:6d:9d:12:77:fb:f4:a9:
fe:41:75:06:e0:7a:bc:6b:0d:1b:39:cc:6d:c2:24:
27:99:34:fe:b6:69:49:8c:af:f1:bc:17:41:a9:e4:
db:8d:2d:12:16:af:5b:3e:42:8a:bb:0a:f1:45:c4:
5b:27:7b:2c:a4:ef:5f:0c:84:0f:d0:79:8d:e8:c6:
7d:4b:d8:0f:e0:3c:e4:64:c0:4d:53:fb:0b:b0:71:
6b:6a:ee:1a:f8:ea:48:f2:08:1d:b6:0f:ab:3e:9d:
eb:b9:e3:49:12:65:6f:85:15:cf:02:e9:4b:20:3e:
64:43:99:e6:a8:0b:84:d6:11:ad:27:14:60:f6:fb:
c1:a6:47:b3:8d:a0:bb:19:d7:5f:20:88:80:bb:df:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:BB:8A:7B:3C:04:07:CC:FD:DD:7A:A3:A7:B0:35:3B:FD:10:E1
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dd:fd:08:59:fc:d2:d6:1d:7a:40:6c:3e:f1:8a:70:62:6a:
da:cc:df:75:c9:92:86:e5:94:5a:12:b1:57:41:18:c2:0f:14:
10:05:1f:79:6a:da:0f:f0:f2:18:44:5f:92:32:92:f5:97:f2:
0c:e4:86:c9:02:d5:fb:fc:82:9f:3d:d9:22:80:21:7a:73:2c:
fd:e9:7f:94:87:c2:8e:6a:09:39:72:2e:c3:5d:d9:5d:70:83:
4d:a5:3d:64:99:83:5c:96:6d:fa:10:5a:59:ee:c7:61:4d:23:
8e:49:54:11:e8:b9:d3:f4:e5:b5:88:e5:88:b9:05:f3:cd:0e:
26:07:cf:f5:95:da:6a:2e:6d:ef:78:98:1f:5e:bb:e7:41:01:
46:39:a5:48:48:73:67:6a:97:c9:49:9c:cb:23:e0:74:e9:dd:
17:bc:44:53:de:8a:18:86:09:5d:23:ac:45:ab:ae:5b:f9:9d:
db:ca:1c:b3:70:46:0b:bc:5f:1e:3b:e1:6a:8c:4f:15:2a:05:
2a:71:15:c2:e9:45:e5:51:48:a6:e7:48:dd:95:ab:02:27:61:
d2:67:36:1c:ef:13:12:02:ba:58:60:61:1f:b8:33:53:ec:a5:
bf:9b:51:56:f0:25:44:fd:a9:4b:f7:26:e9:b1:58:61:f9:bd:
31:e7:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:43 2025 by rpki-client