Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: 8PYbsroDwo2FNGy6hkBCx+zdl3+3I1SepR9pZBDolNU=
Subject key identifier: 23:AB:0B:F2:36:53:75:DF:24:03:AF:49:B0:30:FC:1E:0A:3F:05:89
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 0194BD175BFA620C9A0F8296BEED8C13576B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 04B5
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: OEv2knzSzPi7QR1HQcOkBoYkzmKvbz+ZAueJA7s2GdY=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5b:fa:62:0c:9a:0f:82:96:be:ed:8c:13:57:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=23ab0bf2365375df2403af49b030fc1e0a3f0589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:f5:2e:5d:df:c6:ee:2f:f3:13:61:7a:d4:
e5:6b:ee:06:37:7b:a1:8a:d1:fb:21:d8:16:b4:8f:
1e:2e:b0:8e:30:28:5d:da:26:b8:65:ed:1d:77:60:
ef:b6:4d:af:cd:5a:1b:47:37:b4:27:9d:d6:44:53:
d6:b6:be:ee:bc:21:60:c2:f2:25:09:33:fd:ab:36:
c0:b0:fd:7b:34:cc:1d:d1:74:88:ac:33:82:f5:74:
b4:f6:2f:98:26:3c:27:49:fe:6e:f7:8e:e5:26:94:
69:ed:6d:de:60:46:df:1b:a8:31:94:af:41:19:4d:
d3:bf:ef:03:f4:03:9f:dc:02:36:13:b7:9c:a2:44:
30:0e:27:08:08:c9:55:62:2b:70:81:f3:fd:f0:a8:
ea:99:58:67:98:0f:ee:9e:fc:b2:d1:88:7e:4e:11:
a3:f1:67:fc:cf:95:7f:e7:12:55:6f:34:4c:3e:c6:
53:da:3e:55:5c:b6:41:d7:af:1d:50:e7:f7:fc:de:
4d:81:8d:e6:af:e0:f2:3c:44:eb:c4:9d:77:82:27:
6a:7d:20:92:c1:a9:d7:dd:83:92:5b:86:5c:98:74:
f1:c3:c7:68:eb:56:0b:6b:c0:a1:bc:bf:c5:79:6f:
85:63:12:ed:a6:46:a0:4f:00:ec:0b:86:33:4e:72:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:0B:F2:36:53:75:DF:24:03:AF:49:B0:30:FC:1E:0A:3F:05:89
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:97:12:f9:14:5b:3e:be:bb:7b:13:d4:6e:10:90:fb:7c:b4:
ab:33:54:7f:4b:c8:83:bd:82:31:be:c8:00:05:1c:86:4d:c1:
1e:53:52:9a:d0:da:c0:a8:18:aa:be:0b:f1:25:1a:a9:2e:81:
6a:64:87:c5:8c:ed:2b:52:43:c2:26:d0:37:7b:a3:75:94:ce:
7f:92:37:30:ea:c0:4b:b9:54:84:73:11:b4:b4:9e:24:51:4a:
a3:29:3d:35:11:56:87:bf:4d:2d:c1:e9:f3:ac:2e:2c:2e:78:
8a:79:55:2f:fe:a6:d2:48:2a:11:ca:29:e0:79:18:da:01:19:
77:da:85:f1:4c:38:32:45:97:52:e8:a8:16:0c:96:db:48:50:
1c:c4:c5:a4:01:c3:2a:0d:d0:18:03:3b:4f:d3:01:f4:96:73:
0b:61:5d:ce:b3:dd:d9:33:8c:06:c0:38:6f:99:5e:30:7e:94:
b9:45:02:d5:d2:de:30:50:f3:21:40:6c:41:f4:e2:21:bf:ca:
26:c1:17:e7:c3:26:96:51:61:d2:ff:d2:f9:5f:11:99:19:a8:
a3:43:8a:79:10:6b:6e:09:f1:56:30:77:6e:3f:5f:ea:7b:fb:
fe:1f:21:71:58:51:3a:f0:7e:3d:ca:5b:52:3e:a9:30:e8:d4:
d0:eb:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:02 2025 by rpki-client