Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: PdrrzOdeFDYBK49eP0jjoj8+ZI7VCu/0623ZZKvfOck=
Subject key identifier: 86:55:9F:13:E4:84:50:4D:59:E1:EB:6D:33:07:A2:24:DD:29:67:D0
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 0194BC7334B37A2DE8B843F6124DEA6545A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 7E
Signing time: Fri 31 Jan 2025 13:00:54 +0000
Manifest this update: Fri 31 Jan 2025 13:00:54 +0000
Manifest next update: Sat 01 Feb 2025 13:00:54 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: qPLh+P88Ey8vd0niewyT+MJyNELY+IlEiZGQwqcw36E=)
2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:34:b3:7a:2d:e8:b8:43:f6:12:4d:ea:65:45:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Jan 31 13:00:54 2025 GMT
Not After : Feb 1 13:00:54 2025 GMT
Subject: CN=86559f13e484504d59e1eb6d3307a224dd2967d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:d0:95:3b:40:1b:d4:82:1b:2d:90:ed:d7:
4d:ed:f2:6d:e0:9a:e3:91:6e:7c:01:dd:b8:ce:ee:
20:ce:7c:9c:73:be:38:95:f2:d3:bc:3c:60:b8:07:
97:4a:5c:0e:42:b8:89:0e:d8:d2:50:35:eb:82:2c:
b9:dd:97:c9:bb:31:1a:55:f3:24:38:28:10:0e:ac:
2b:e2:a9:4c:cd:f1:ea:85:65:4e:ef:23:b1:2d:9a:
0a:45:07:22:2d:d9:af:8f:3f:81:53:f0:3f:16:08:
8d:a6:f5:5a:8d:38:e5:9e:ec:a8:7f:03:45:53:34:
7c:f4:bd:e0:e0:05:bd:22:e4:05:c1:a0:2b:a7:86:
f7:3b:48:fe:42:59:13:fc:14:04:67:7d:ed:32:a4:
09:24:6c:15:ff:9d:57:92:0e:b5:91:b2:ca:07:93:
9c:6a:65:8b:f4:79:c0:e2:28:28:21:88:33:09:5a:
c4:c1:9b:a4:b7:12:e9:b2:c9:5d:3f:d1:e2:a4:f5:
2f:a7:67:7b:cb:5d:f0:e5:b8:c6:c8:43:a2:87:44:
3a:4f:d5:6b:16:79:74:17:06:d2:27:93:c8:b5:f7:
c2:bb:0a:46:4b:c8:bc:d7:1f:4a:59:40:b7:fd:74:
ce:15:d2:28:33:1e:c6:d5:dc:a3:03:69:3f:0d:01:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:9F:13:E4:84:50:4D:59:E1:EB:6D:33:07:A2:24:DD:29:67:D0
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:70:3f:49:f4:7f:8f:0b:74:cd:c3:fc:6e:04:9e:70:4a:85:
8b:1f:a1:3c:12:57:03:ba:33:a5:55:20:44:4f:d4:7b:83:c0:
59:54:05:75:17:0e:0e:07:c9:9e:68:fc:eb:f5:0b:82:fa:b6:
b3:6a:c4:63:e6:31:65:cf:4c:cb:f2:2b:56:80:b4:48:57:aa:
b0:95:90:0d:88:37:23:8a:9e:c4:10:d0:c7:5e:08:5e:75:96:
ff:99:52:34:72:a6:d1:54:df:e9:5e:a9:85:b1:66:7e:b4:13:
21:7a:a3:d1:b7:df:d4:60:30:ad:00:8e:f7:98:aa:99:87:44:
d0:db:9f:be:c5:c3:77:10:61:ee:14:f8:cf:c6:ee:e7:36:60:
7b:31:78:56:80:2a:90:ca:11:1f:c6:ce:d9:9d:5c:25:6a:4a:
fd:24:65:01:10:a2:16:0f:0a:da:dc:f8:f9:ba:80:0b:e2:c3:
2f:87:ba:ad:c6:75:c4:20:ff:8d:99:d1:40:ca:da:ed:46:de:
48:c0:8b:d1:6a:1b:cf:de:4b:17:fb:a8:c2:a4:11:03:7a:3b:
a1:f3:c6:e1:08:ae:a9:16:ae:3a:85:db:5e:e8:89:e1:57:83:
f9:f3:1f:a7:ca:5c:54:dd:d1:1d:2b:3c:a1:81:62:2f:aa:05:
1f:07:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:05 2025 by rpki-client