Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: 09JbOUKl1eU4H7lFWfrKG1LAq1D5Qw7P//vaGUgDm84=
Subject key identifier: C9:D3:91:9D:F9:2D:E3:86:A1:0B:92:F8:55:3D:EC:13:3B:AA:A4:86
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 0194BBCE20BE8D34760C52B17CE8BDD8B294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 07D4
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: z7SpYs2xK9VEXHcAfTgNdHLofj3UyWl6rcgc9ToV7LI=)
2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:20:be:8d:34:76:0c:52:b1:7c:e8:bd:d8:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=c9d3919df92de386a10b92f8553dec133baaa486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:b2:31:05:37:cf:4c:23:5a:18:d0:c7:70:
97:05:15:69:79:19:7c:d0:78:33:ba:34:c5:5f:86:
ad:32:8d:da:93:33:7f:89:2e:35:9f:d8:ae:45:8c:
6c:84:1a:ec:91:5b:e2:49:6f:3a:6b:43:0a:fc:51:
00:47:1e:bc:e7:5c:00:1a:f4:8e:a3:c4:8d:2e:30:
cb:bb:a8:96:40:82:b0:19:90:82:84:58:d3:ab:eb:
b4:23:bc:a2:93:be:4f:e8:3f:90:6e:58:69:2d:cf:
b3:0c:76:39:04:ed:33:59:65:09:84:40:3e:46:a0:
5e:4e:2c:cf:fd:26:57:f6:88:11:17:68:6d:62:42:
e7:3f:c4:0e:84:2b:f4:dd:66:51:9b:bf:bd:67:9c:
ce:1d:22:f1:a0:a3:7a:2e:b7:35:82:4c:03:01:34:
63:1f:6e:a5:e5:04:d7:4e:f3:54:31:42:13:f6:40:
49:b1:c7:ac:9d:4d:59:c4:a3:3b:73:e1:4a:49:c2:
d0:40:49:3d:64:1e:be:86:06:a8:82:55:33:a5:c3:
39:f0:b0:20:09:cb:9a:fc:43:71:4f:f5:1d:1e:aa:
94:eb:9c:73:9d:2c:c4:f0:13:e0:d1:61:2b:e4:b0:
60:3b:b5:a1:d3:dc:7f:4f:15:14:43:57:ab:e0:c3:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:91:9D:F9:2D:E3:86:A1:0B:92:F8:55:3D:EC:13:3B:AA:A4:86
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e0:ad:75:29:3c:14:53:fd:63:14:3b:6e:e1:20:ff:92:8a:
8d:4b:70:a1:05:00:a3:26:77:5a:da:65:94:9f:b3:f1:79:66:
bb:43:b0:3c:56:8a:b1:5d:20:1f:60:68:3f:50:de:6f:8b:ef:
22:fe:e0:36:91:2f:42:e2:e9:cc:ca:c2:0a:eb:3b:5d:cb:c9:
a1:b5:9d:45:9b:82:f0:15:66:23:e5:a1:2b:6d:ac:30:ae:fa:
44:e1:5c:f4:8d:1b:09:6b:96:73:ed:87:58:b3:8e:66:30:4e:
4f:ff:8d:e4:33:2c:21:76:ae:eb:07:39:95:c8:7f:45:4c:1b:
89:12:49:68:34:c3:d6:a5:cb:f9:e4:e4:ba:87:3f:f4:1e:5f:
1c:c6:7c:39:22:79:a5:eb:5b:2b:5b:ed:4c:17:a6:5a:c4:a0:
47:36:4b:7c:71:85:ed:0e:80:0a:96:31:34:f4:1a:5d:d7:51:
d2:ab:07:5b:db:b3:6b:48:f0:e5:c8:84:cb:16:4b:5d:02:12:
1f:51:d8:0e:a1:99:a9:c7:df:f8:ef:1d:eb:c0:b0:c6:77:93:
cc:87:5c:30:5a:5d:ea:ea:d6:90:7d:b2:0e:85:e3:d2:d8:83:
31:00:36:d6:41:e5:14:15:73:4b:df:3f:ac:a5:a0:78:04:b7:
2e:8e:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:45 2025 by rpki-client