Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: czoKa9DgdL9H8RBxSEih5+PrkukCyGunA0tb4rfipm0=
Subject key identifier: D2:21:56:8E:71:BE:0E:D6:EA:19:88:83:5A:A4:02:86:24:91:18:83
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 0194BC3C1F54BD95EBC3A841D350F06AB27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0528
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: KGZd99SHM7bZ1ks7s7iRiXArAIRqQ2gSkcM+SZPeoso=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1f:54:bd:95:eb:c3:a8:41:d3:50:f0:6a:b2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=d221568e71be0ed6ea1988835aa4028624911883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:f8:7a:5f:69:e4:28:93:5c:4b:76:1c:bd:
a1:e0:a6:f4:2d:b8:54:37:11:2a:f8:21:26:d9:a0:
04:be:45:ca:86:dd:c9:a5:8e:f1:9a:a3:9c:20:00:
6a:09:99:d7:85:5f:3a:11:63:90:e9:f2:73:bf:3d:
3c:e3:cf:5e:cb:55:77:ba:b1:a3:56:65:5c:37:02:
41:dd:56:49:0f:88:48:f9:3d:de:9c:6b:99:1a:ae:
e4:24:2b:0d:b2:e8:e5:6b:34:0d:35:7f:fc:3d:ea:
e5:bc:3b:5c:b7:ae:ed:fe:90:4a:d4:d1:d4:3e:b3:
5b:3b:35:31:64:16:f3:10:4b:78:4b:9a:17:71:d7:
e2:06:39:82:e9:85:f7:e8:4c:69:bb:12:22:b2:91:
7e:83:81:06:6a:bc:43:cd:f8:8f:e2:17:cc:09:3f:
5e:62:5e:da:81:c4:1e:10:ee:0a:42:8d:9f:ae:2b:
69:84:42:c4:44:4a:fd:bb:2d:5a:bf:ae:91:b4:2c:
44:a5:d1:8d:7e:8b:37:a9:43:88:bb:18:a0:7a:53:
76:e7:07:12:d5:b0:aa:12:a1:80:f7:4d:0e:fa:3d:
97:35:29:5f:09:07:64:24:a1:d5:bb:12:c4:ca:09:
a8:e5:37:c1:5f:42:cc:38:92:b3:b6:50:64:f7:5e:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:56:8E:71:BE:0E:D6:EA:19:88:83:5A:A4:02:86:24:91:18:83
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:22:1c:83:13:b3:14:88:79:ce:81:fd:06:2e:fe:21:c3:36:
31:d2:29:e1:65:ea:1a:50:bc:fb:de:7c:3e:4b:dc:e6:d0:ae:
33:7f:82:17:6e:76:4b:07:ee:86:21:b8:c5:4e:57:c8:88:ee:
3a:2c:13:f6:d3:b0:2d:09:d1:d7:2a:60:dc:e3:50:df:d3:f1:
7b:76:53:f6:bd:5a:fb:a0:8b:47:92:49:54:11:c7:7e:25:65:
72:11:5a:fb:14:0f:1f:13:c3:82:f7:09:2b:1d:00:e4:08:07:
e7:52:49:75:0b:09:e6:56:f3:0f:ac:de:3a:80:9e:41:a5:74:
e6:20:8e:44:7e:a1:40:f3:bc:b1:46:f1:d4:59:b5:11:1b:09:
64:c8:af:ac:be:36:64:0d:5c:10:f6:6d:e3:9d:25:e2:06:1d:
55:d0:2b:cd:e1:d0:80:f7:cf:21:b8:db:0f:ad:3c:04:33:c4:
b0:ee:3d:a9:c2:40:31:49:16:7e:d2:da:ca:e4:ac:8b:d5:79:
9d:f3:b6:05:48:fc:63:2f:51:ab:e1:7f:9b:76:51:68:19:30:
73:a6:e9:d9:da:48:b2:fb:1c:4c:0e:06:30:86:00:0d:76:9c:
27:dc:a9:e8:1b:1c:f2:a4:65:82:ce:6a:8c:43:7f:0e:76:b8:
15:37:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:26 2025 by rpki-client