Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
File: 1ehYR8xEuGECJwu9do5MPOuhyYg.mft (raw, json)
Hash identifier: LqN7j07UPHakw8KeVKyY2ecQimobFxh/2ShAQqDVV+E=
Subject key identifier: 37:A5:2B:12:47:DB:07:03:5E:D1:1C:28:28:CF:9A:DB:9F:92:D7:8F
Authority key identifier: D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
Certificate issuer: /CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Certificate serial: 0194BD85686F2308BB3616BC263FFFDCE4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
Manifest number: 02BC
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: 1ehYR8xEuGECJwu9do5MPOuhyYg.crl (hash: rWK2Qk5J1ArfkrYKL+kiWrwZLo04OrIzP+S5uH+bW18=)
2: HP2XU4ErP340JMFJBkwhXt7RSkM.roa (hash: jqU/k+IA4J2nUGc2ePon/4S6+Kq7gFeDjcwyWdzFAK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:68:6f:23:08:bb:36:16:bc:26:3f:ff:dc:e4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=37a52b1247db07035ed11c2828cf9adb9f92d78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:b0:b8:50:1c:85:65:ca:e3:fc:85:28:47:
51:ab:97:97:4b:a0:f4:ec:2b:5e:e4:28:ec:9d:f5:
4f:34:33:d8:9e:f8:43:9c:20:4b:2e:2d:f0:43:3a:
84:a0:42:66:4b:89:9b:1e:36:23:b4:fc:4b:17:38:
b9:c9:70:10:bb:50:46:65:4b:ea:28:55:2f:f7:60:
2f:7f:be:d9:83:09:a4:fe:56:8f:69:5b:61:61:c2:
b9:3b:38:ba:a9:3c:07:9e:bf:8f:76:44:6b:f9:91:
7f:44:f2:56:c1:b7:e9:a8:ce:7d:6f:99:be:5b:8a:
66:d5:ab:33:4b:4f:73:44:bc:85:7c:7b:3f:d8:3a:
d2:99:f2:8a:d3:0e:ed:c4:60:70:8e:a0:c3:21:f1:
00:54:96:9e:39:d3:38:75:81:af:3d:3e:4f:0f:22:
a9:1e:a6:f8:9a:38:af:55:d1:49:ce:2c:8f:ce:12:
a1:df:a0:47:13:81:ff:d8:47:7e:f9:13:ba:9f:9b:
46:20:ce:39:32:38:eb:6f:8f:6a:a6:a4:3e:39:e9:
3b:93:e1:14:09:48:a8:d9:ce:21:04:27:b9:1e:0c:
97:83:85:da:e3:38:0a:c6:8f:19:d4:39:5e:05:d4:
f3:92:75:f1:58:79:e5:7d:83:3c:8e:3d:0b:df:8d:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:2B:12:47:DB:07:03:5E:D1:1C:28:28:CF:9A:DB:9F:92:D7:8F
X509v3 Authority Key Identifier:
keyid:D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dc:01:c3:36:f2:02:1e:c6:0f:9d:ab:12:ee:21:af:8f:86:
4a:62:62:c2:07:46:06:08:af:96:ab:36:a6:95:da:29:1c:0c:
15:df:87:05:98:5a:cf:26:c6:e4:32:0f:5d:22:a2:a8:42:0b:
96:20:3c:84:0a:1a:ce:ea:65:34:f4:e5:72:58:6a:06:11:c9:
36:65:7c:e3:a2:52:dc:fa:b3:bd:4c:2a:25:95:eb:56:9b:71:
8a:ac:d7:8f:f3:8d:70:ab:95:36:9d:9d:11:6f:db:b7:d9:c8:
c3:07:e6:4e:07:a4:58:3a:88:3f:fe:54:58:78:08:56:ef:ef:
de:f5:e7:bb:87:ff:b9:23:75:4d:93:1c:31:8d:aa:4b:21:60:
2a:4c:81:61:5b:14:07:2a:c3:80:7a:5c:c5:d9:8a:02:f8:73:
41:63:0a:f5:e0:4e:95:77:69:50:47:3f:fa:c5:fa:b3:88:cf:
3b:a8:5a:5f:38:ca:2a:d8:9b:04:86:50:11:bc:ea:1f:3e:76:
78:e7:ca:d0:c0:eb:13:06:9b:42:94:d6:38:c1:cf:df:8e:58:
7d:af:72:ad:89:39:d6:22:a2:3a:75:fa:09:10:43:8e:8e:70:
1e:52:a8:20:62:c9:64:30:05:60:17:c3:01:3c:e6:6e:f0:10:
0a:b7:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:38 2025 by rpki-client