Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: ptZC364ivnHV3/0X4hFU3/59Dvcl1aZbhLLf4AaXuHA=
Subject key identifier: 58:1B:D8:6A:02:03:28:4C:64:8A:5B:EC:AC:B1:57:D0:73:51:24:96
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 0194BC3C3603CBA6921BD50F668DB16CEBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 06F7
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=)
2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: GxX9PqHRypCwvzQPgc5qMV0Ovu3VvGpfQYEorMpVUmw=)
3: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:36:03:cb:a6:92:1b:d5:0f:66:8d:b1:6c:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=581bd86a0203284c648a5becacb157d073512496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:b9:34:49:ed:1d:94:e7:9d:8f:62:9c:1c:
4d:b7:ac:74:2c:a0:2a:6a:69:70:cd:7e:cc:de:f5:
e4:ee:23:a1:0e:78:43:57:11:59:d0:1d:b4:0f:89:
5e:3b:d4:44:93:9c:0d:ed:dd:a4:a8:eb:7c:e8:1e:
87:df:ff:b1:11:6b:14:98:7b:4c:41:56:be:87:ee:
65:46:21:ce:11:f6:e3:60:2f:50:b4:60:03:7d:3c:
8b:3b:60:6e:15:db:1e:69:9e:8a:50:ad:ca:6c:9f:
5d:ba:1d:cf:f9:96:19:8e:4b:50:06:61:95:b2:1a:
b0:76:93:cf:55:6a:31:a5:f6:8c:fc:2a:35:d6:f1:
a3:36:dc:9f:66:54:d9:02:3d:9f:35:9a:0a:69:65:
cb:a0:75:d5:69:41:3d:a8:75:55:f2:ec:d0:d7:17:
05:0d:a0:b0:a8:e9:6a:d7:a1:6e:24:e4:b0:9a:b8:
0b:94:01:68:b8:85:ad:8f:b9:0c:6c:de:91:5c:c1:
d2:8e:47:59:cb:3d:0c:06:80:55:02:ad:13:e9:cc:
6b:b8:a9:fa:ef:3a:2d:43:f6:32:1a:99:20:04:05:
e0:94:b5:bf:3c:cf:60:77:66:29:ec:dd:fa:8c:ba:
b0:bd:b5:64:39:3a:39:7c:8d:42:21:bc:36:bc:c7:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1B:D8:6A:02:03:28:4C:64:8A:5B:EC:AC:B1:57:D0:73:51:24:96
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9c:0a:e7:1e:ac:bc:78:25:f4:2b:6e:ff:08:69:27:cc:d4:
1d:55:25:b0:d4:6f:28:bb:01:07:d9:35:97:98:23:31:ac:5b:
66:b9:f9:2d:fb:71:93:7c:e9:2d:bd:62:e6:ce:01:41:8a:f0:
9d:67:e8:5a:c2:c1:63:21:7f:dd:7a:80:94:ec:53:26:0b:53:
be:a6:cd:14:26:05:90:18:21:31:99:a1:fc:be:95:83:8b:12:
bd:cb:cc:68:5a:73:bd:fa:e3:65:c1:56:06:6e:ec:dc:a7:2c:
1d:b9:b7:5f:63:d6:56:64:ee:7d:16:2a:7c:94:62:da:ae:19:
65:da:5b:d2:9b:4b:19:9a:b8:44:48:bb:b3:c7:88:28:40:32:
d3:c9:1c:4c:1b:4d:c8:55:2a:47:fc:a7:af:93:36:15:e7:08:
81:3b:e4:40:7a:70:52:5e:05:b0:8b:e0:a6:b2:e8:2f:23:a9:
5e:54:28:f1:26:b4:19:6f:11:7e:2d:4b:42:44:61:00:23:83:
8c:be:0a:41:35:cf:7e:37:c5:7e:75:2d:d9:f7:65:3d:35:d7:
38:c9:3a:2e:dd:ff:3b:62:32:c6:bb:9b:94:9d:c3:a0:3b:14:
38:b0:66:e0:7c:fe:9d:3c:c6:f2:fb:7e:ec:78:b7:bf:53:2d:
e6:60:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:03 2025 by rpki-client