Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File: 1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier: juZJJlVuxw82iRbP99YC/haXV8zHyM7ulzcaPSrzliU=
Subject key identifier: AE:F7:D4:BA:10:26:03:CE:DD:85:56:B8:FC:60:E4:5D:9D:29:74:5D
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer: /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial: 0194BBCE94B4A2A392E501B053444E263828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: MtuQqSXHX+UxMyePWA76G+M6luBkWd8M7gdNjm0lm/E=)
2: _mz1bO9qw-mR0ZWQodW0gDxX-XU.roa (hash: EIXfCvhzf7KTxjdRcM1VzT/2S7P1xIG9PsfWTukoty4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:b4:a2:a3:92:e5:01:b0:53:44:4e:26:38:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=aef7d4ba102603cedd8556b8fc60e45d9d29745d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:f8:6d:5b:cd:0d:df:ea:b7:04:04:74:20:
8b:c3:74:10:6f:33:50:13:58:b6:f5:b3:e8:82:39:
97:77:f5:3f:9f:2d:44:f6:37:7a:5b:53:76:64:9b:
cd:b7:ef:d1:c8:08:d7:db:10:a8:f6:67:d4:8b:1a:
3f:6f:cd:ba:66:3f:59:64:5e:f2:59:7d:a7:95:3b:
85:02:b8:e4:df:81:e0:ef:68:b6:8b:ab:f2:fb:ce:
dc:a8:e8:97:34:a5:c4:f1:33:6c:4e:26:ce:1e:1d:
b8:bc:19:2b:58:d7:15:0b:56:49:3e:44:12:88:0d:
29:72:e6:2f:d3:cc:87:ec:fc:fa:20:ef:45:4f:be:
a5:56:f7:4d:f2:9e:02:bd:63:f3:9b:22:8b:a4:a2:
9a:37:d3:36:16:d7:dd:f3:ff:5c:7c:2d:21:4f:4e:
85:0b:7e:c4:cc:e7:34:a0:61:f7:06:de:e9:76:39:
f3:b6:62:bd:14:08:83:b8:76:cd:96:09:d3:f9:18:
99:1f:74:17:a2:3e:55:78:79:86:d3:75:3d:b1:cc:
22:8e:63:e0:d3:ed:f1:3a:0b:f6:70:e4:19:90:2b:
e7:7a:91:f7:76:78:23:f2:37:a1:c5:fa:68:63:94:
a1:df:93:2d:b3:b0:d0:c7:66:41:2e:2a:b8:1e:31:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F7:D4:BA:10:26:03:CE:DD:85:56:B8:FC:60:E4:5D:9D:29:74:5D
X509v3 Authority Key Identifier:
keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9b:54:e9:d7:20:cd:83:c2:7a:b2:4f:4a:25:55:42:c6:f1:
00:a0:37:3a:50:4a:78:98:13:8e:6e:cb:14:1a:e6:eb:22:61:
2c:4f:4e:8d:c1:7a:30:ea:af:32:69:5f:20:4e:4b:64:b7:72:
22:56:25:73:11:6c:40:2b:9d:95:7c:6e:c0:0c:a6:b2:a9:31:
46:33:8a:10:0c:82:ee:f6:83:b3:c3:ec:39:4e:02:ec:44:58:
38:83:63:a4:29:63:08:8b:da:8c:a5:41:54:73:aa:2a:24:e1:
de:e4:90:72:2a:29:e6:15:f3:69:0a:a7:9b:14:60:f1:89:3c:
d1:90:85:f2:94:47:4f:89:bd:d8:8b:ab:c9:02:71:92:20:eb:
3b:16:1b:b2:ba:57:73:c0:5d:c8:e2:44:d2:ae:73:ff:54:23:
8b:7e:dd:32:75:47:21:b9:a9:8e:64:ad:35:00:9b:a0:c1:f0:
7e:b2:bf:c1:54:d3:f0:0c:d6:ba:2e:4c:4d:d8:26:ac:29:1d:
bd:2d:2d:d7:ca:64:66:1b:09:06:5e:c0:86:4f:bd:16:03:f2:
ea:b1:3a:4f:0c:f7:c7:93:01:c8:8e:ba:f9:93:f4:ad:00:ac:
64:29:50:e9:aa:02:17:b0:41:f3:6f:26:34:78:5a:8f:46:02:
65:de:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:47 2025 by rpki-client