Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json)
Hash identifier: MLPtJ1LZPxzhtUh15ylqYGnV6JVIzfNgEgryY2Fj0T8=
Subject key identifier: 1F:C2:A9:5E:E0:29:CE:12:3C:34:49:DE:F6:81:15:BA:FF:38:F6:AB
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 0194BD4E39EC60DA6E63BCDD448E8685C238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
Manifest number: 0482
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: 1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa (hash: LqNoYMeIHUvi7e8ZqSiPD8gSQPNLvRqFi/MU8NW82NY=)
2: 6WgYdehy91JaGiXTQ4-mtet9hKA.roa (hash: k18cYqD3ZZMZ5W+a0Kjw8aqcJhfy210LAE8xFma2X2Y=)
3: TI__S_5wBSs76T2sPdddnNR3NI4.roa (hash: 1cgm9AfaKeKcFrBAUFYpRgSienV4cq0Pog28Pn4vsBo=)
4: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: GSFaU1Soq2WUdXE7z973zWmcVKpLrMRqasX01FmH/Ms=)
5: nhO9A91HdrVQ0-G0JjqRd38eqVA.roa (hash: avC+LXLIgEXyqvhm20I4EMQc2gx8ZfjitcH+kS2hh1g=)
6: t3F8K-eKkpIig0xnri8gdWPYoUc.roa (hash: 0LMmNIPY61uLEOsd/F4vx4OEiYbCbnmZs1SeTx2VOHc=)
7: xCwC0ruPjNW76bEQ25__qiX8bTI.roa (hash: /PNuMEC0HX9r4nNg0Hwe56qDotvTcrptdJE+VRq+wv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:ec:60:da:6e:63:bc:dd:44:8e:86:85:c2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=1fc2a95ee029ce123c3449def68115baff38f6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:15:d7:6a:38:6c:78:00:4d:35:c8:6f:73:2c:
09:d4:ad:ca:46:b5:28:2a:1e:5c:62:6c:b4:94:25:
dd:d8:31:80:5d:44:df:b6:95:f0:6d:1c:94:c3:4c:
5a:4e:9c:a3:1b:40:01:78:ef:8f:c8:1c:0b:2a:a7:
49:83:a2:69:d0:6e:f3:1b:20:c7:17:05:5e:f0:af:
eb:97:79:f3:16:e9:4c:83:40:3c:e8:83:fb:0d:22:
c4:38:dd:ef:cc:c1:3d:27:a3:77:eb:a6:c1:5f:a1:
19:a3:c5:44:e9:79:0b:7f:18:20:db:b6:16:9e:8e:
31:40:15:ad:14:72:7b:ce:7e:32:2e:c6:18:59:d9:
e6:f7:d8:2f:88:1e:e8:60:9c:46:7d:33:ad:17:4a:
31:5c:b2:c7:ac:3c:45:b9:e6:0e:28:7b:6f:44:7b:
f2:7b:59:a5:b0:bf:74:cd:9d:1a:31:92:eb:b1:21:
ec:a9:e6:22:5c:75:01:9f:22:48:5e:27:7c:65:2a:
83:8b:00:7d:07:0a:7d:d3:4f:1b:04:e3:06:6c:e4:
cb:55:85:2f:b7:3a:4d:d4:6f:91:1d:5f:32:a0:7b:
d3:fe:7b:37:b6:cd:e8:48:45:b0:99:5d:b6:2f:70:
03:3b:3a:a1:90:1c:17:aa:08:3e:0c:b4:2b:23:68:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:A9:5E:E0:29:CE:12:3C:34:49:DE:F6:81:15:BA:FF:38:F6:AB
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3d:a3:d9:50:80:51:a0:bb:71:ac:bd:92:ba:34:a6:dd:f1:
79:67:05:1e:1d:83:c2:c2:ab:49:06:24:04:0d:87:e1:54:bb:
01:b1:97:de:2f:14:c0:d0:08:49:c5:dd:93:68:d6:00:75:03:
35:47:4f:ac:9b:18:9b:54:e1:77:a7:1f:eb:b9:2d:80:9b:76:
38:fd:dd:64:c6:13:04:5d:c6:f8:d7:1d:26:21:d7:36:3c:24:
29:72:92:52:67:a9:ee:b8:4c:97:fa:78:74:a3:45:a9:62:11:
04:c8:ba:f4:d0:f3:3e:b2:ed:ba:f4:78:19:ef:b7:fe:ff:bb:
1d:5a:4d:95:5f:1a:25:2b:dc:cf:22:cc:86:64:be:59:d5:55:
f0:14:91:dd:23:ea:56:71:66:6d:0d:2f:7e:87:84:e5:21:6d:
80:92:85:f3:05:ec:27:3a:53:7c:cc:a6:68:93:19:9d:f1:2f:
dd:53:47:e3:42:c5:2f:2b:09:ff:4b:f6:91:85:59:b5:e5:4b:
16:01:fa:94:db:98:56:5f:e9:80:80:d4:47:1d:63:9d:aa:49:
9a:e8:f6:24:b9:78:aa:f0:81:48:fd:99:de:65:2d:2b:e3:e4:
a9:3d:07:fa:02:98:ca:82:39:67:2f:dc:67:ee:b4:68:82:fc:
45:2e:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:27 2025 by rpki-client