Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File: 1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier: h1W6LNHN5xVGE3GHpzRgO1C7y1D09e9tUaKLLkqZGZw=
Subject key identifier: F3:BD:FA:8A:06:0B:FB:55:89:F0:61:FE:37:15:DE:B6:D3:EF:0F:AD
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 0194BC049D823F911C1876D67290971BE17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number: 0933
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: QTRyJlGc8g0cuv1gD8j2bTAIiSpXKhmKlIQJdUiDhTg=)
2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9d:82:3f:91:1c:18:76:d6:72:90:97:1b:e1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=f3bdfa8a060bfb5589f061fe3715deb6d3ef0fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:a3:d7:62:5d:29:a7:42:a1:0d:d5:5f:d7:
a1:c0:08:33:09:4a:dd:29:a7:22:23:0d:17:43:03:
d8:43:8e:53:31:7d:67:b5:30:39:37:34:a2:70:d9:
bf:f9:fe:7f:7f:62:ad:c6:ec:43:fe:29:f9:bf:12:
14:5b:1a:17:e1:79:a5:90:94:43:23:f2:5a:02:1c:
d8:6a:1f:ac:7d:52:ac:89:71:88:22:c5:17:7e:57:
ca:a2:34:1b:fb:37:89:ef:ef:32:d8:c5:ac:70:67:
70:ab:d5:bd:5e:de:35:5d:a4:4c:87:30:f2:81:35:
20:ae:14:09:01:43:6d:08:ec:34:cf:e5:13:46:81:
1a:77:05:d5:e3:39:93:2b:f0:92:50:de:6a:d5:00:
31:ed:9f:ec:25:8f:e0:38:e6:22:46:f2:2d:6a:95:
ce:4d:76:a4:68:ad:e3:9f:5c:33:19:bb:39:43:24:
5c:0c:21:e3:c7:f6:8e:ca:84:ab:2c:aa:a6:94:2e:
ec:e9:a7:4f:c2:f0:6b:3e:a7:6f:14:47:69:c8:45:
fe:23:92:52:5d:98:41:0d:ce:87:93:13:38:e4:68:
2b:ef:d1:73:b1:a2:e6:05:55:9d:ef:b1:d5:23:52:
84:fd:0d:b6:9c:6f:50:a3:08:95:9d:d2:3a:f3:8a:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BD:FA:8A:06:0B:FB:55:89:F0:61:FE:37:15:DE:B6:D3:EF:0F:AD
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:46:3a:7e:a6:53:7b:a5:87:f4:28:d0:0e:3d:5a:31:60:
d4:38:53:ee:f1:32:62:50:50:9a:1a:17:e8:c9:bd:d1:ab:3f:
c9:d9:5d:53:87:e0:49:28:e4:a3:91:a0:1a:bc:09:2d:20:02:
69:56:d5:a2:fc:cd:b7:c7:ea:a0:85:ea:74:02:65:b7:aa:f8:
ce:a8:03:df:a5:ec:fa:6c:96:0c:37:7c:de:d8:2e:54:45:67:
64:ef:0e:92:d7:56:fe:b7:50:b0:04:1a:1a:99:bc:e9:0e:a3:
45:b7:7a:b6:e4:a4:f8:f8:e5:ba:be:13:7a:98:1b:98:96:3f:
ff:5a:45:4c:18:a5:3e:a5:f7:e1:14:8c:84:88:42:3c:f6:fb:
f1:84:8b:3b:1a:dd:27:95:70:9e:d7:9d:23:46:4e:81:6d:dd:
6a:f8:c9:f3:31:eb:e9:63:da:14:94:5c:ae:ff:0a:47:cb:48:
1c:5e:93:eb:ec:43:40:16:5c:49:d3:a5:a4:78:93:0c:55:21:
74:68:4d:f2:c0:c2:d6:78:2b:25:bd:58:75:84:ea:bc:ce:6c:
e6:2e:de:97:fc:56:15:83:a9:b4:a2:42:cd:d8:c9:02:fd:43:
23:27:d0:b0:21:e9:be:42:65:f8:8e:54:2c:4a:1e:29:4f:7d:
51:50:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:30 2025 by rpki-client