Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: CmnIg6a7RQ49B1WgNu0i7OK0CWxoh32K+UukpVpiliY=
Subject key identifier: 27:07:37:A9:AA:99:EE:30:55:AA:21:7E:DC:02:87:CC:5D:51:94:96
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 0194BCAA2BE2CABEB19C02291D61286C08F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0DD0
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: lgwUGZPSZShaztR1s+qFSz01Q4gcFVbmnAaVShF0qeQ=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:e2:ca:be:b1:9c:02:29:1d:61:28:6c:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=270737a9aa99ee3055aa217edc0287cc5d519496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:f1:5a:c5:7c:5e:f9:6d:b9:c9:20:1d:f8:
9e:1c:ec:b3:07:0f:5e:a2:9e:12:f3:71:5e:49:75:
26:1e:97:69:81:9f:2e:60:3f:bd:46:65:4b:5d:93:
58:ab:2d:4f:82:70:4b:de:16:ed:f8:2b:82:1e:e1:
a5:ad:cd:d2:ca:4d:02:ce:99:92:03:02:a5:e5:e6:
97:ae:e4:28:c0:4c:61:5b:fb:b6:7f:63:87:8f:f9:
0f:53:31:09:0f:52:4e:a2:4d:c6:7e:28:8a:26:a0:
46:33:33:a0:ac:49:be:99:42:d7:e5:88:ab:b9:52:
5f:10:21:5b:a1:5d:d0:06:e2:58:43:f6:51:a2:42:
36:c7:35:46:b6:a1:fa:34:cc:3d:5b:30:6b:d9:4e:
73:4a:02:58:4a:02:aa:e9:22:25:cb:55:ba:04:2b:
eb:a2:b1:cc:94:c8:ef:4a:df:ec:00:b9:5b:01:48:
3f:e5:eb:16:71:35:27:65:48:10:59:52:0f:63:a9:
d5:80:e7:c1:19:db:a1:ea:f8:69:bd:48:21:35:da:
75:e6:f7:31:dc:9d:b4:64:02:3f:97:7b:51:50:8c:
82:49:92:be:a8:41:c2:17:c8:f5:cd:01:3b:65:f5:
ed:42:8b:01:05:0c:65:ba:c6:ca:13:45:c1:be:4f:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:37:A9:AA:99:EE:30:55:AA:21:7E:DC:02:87:CC:5D:51:94:96
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:f8:63:12:1f:d7:04:66:14:2a:90:98:bd:3b:f0:be:db:
a9:dc:b5:7b:32:e7:10:56:b3:6d:d7:a8:45:3f:f7:07:9c:c9:
4c:24:d1:fa:5b:e5:17:fc:cc:b0:39:37:f3:1c:e9:90:77:01:
e0:21:cb:6f:f5:5c:61:30:a2:8f:ae:2a:e5:3c:d9:39:02:5d:
8f:07:15:87:8f:f7:a9:b9:25:99:47:f1:25:31:80:bc:76:9e:
3c:8e:2f:3d:96:4e:87:08:53:a4:04:c2:0d:ef:1e:1e:ec:52:
eb:ac:93:e2:5e:c6:5a:59:28:e4:61:e0:67:26:74:80:70:df:
48:0c:5b:78:44:b7:ec:76:86:d7:d7:73:9b:bb:85:90:18:b3:
32:99:b4:de:68:77:05:d2:37:0f:48:61:ff:84:ac:82:86:71:
cb:7a:7c:a3:d5:a0:c7:5c:0e:fa:1d:15:c3:54:12:fe:79:e2:
e2:d1:eb:d4:f9:81:4d:e4:82:24:cb:99:56:4f:c1:4e:70:39:
12:44:d0:4d:31:e1:b4:43:e7:1c:5a:91:af:0f:ec:cc:58:4c:
15:89:b4:4e:c3:01:6b:4c:1c:0a:39:ae:e2:67:d6:00:1b:1a:
b7:a8:15:2b:f3:eb:35:a8:3e:cf:38:ac:29:e4:d2:d0:aa:67:
e7:08:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:02 2025 by rpki-client