Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: gtD7s0mI7NRBEMBhwVcdQzPoKttwyw6yCDY3olCP+sc=
Subject key identifier: 13:45:42:7D:7C:2E:40:5B:34:4F:66:35:26:45:7A:9D:54:5C:7D:EA
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 0194BD4EBA2BA973F8F52C372ECD01BC0EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 0CB1
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: sl1F9Awx1r3PtREZt0IteaOU8xSRkqHlsVdp6Ck/kvE=)
2: qLyAKu_2PDAXrscrHieNXa-2Fks.roa (hash: sx29e0ryPNtNIWgM8krgPuDCpK/7fZ2C/FcnTspPL0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ba:2b:a9:73:f8:f5:2c:37:2e:cd:01:bc:0e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=1345427d7c2e405b344f663526457a9d545c7dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:37:24:93:3f:59:f0:b3:b5:eb:d2:c2:aa:
3a:03:b2:2d:63:13:fd:df:9b:41:7c:9b:94:4a:00:
72:70:46:ec:3f:95:8b:21:7d:c1:7f:95:16:87:a3:
72:8d:6d:d1:b7:c6:d4:8f:8f:71:59:a7:83:6b:c8:
71:50:6f:6b:fc:6d:63:b3:59:40:4a:4b:5d:6b:9d:
3a:79:a1:75:ef:a2:03:3f:f8:4f:8f:16:11:56:d3:
78:e1:f0:5e:7f:17:1a:40:53:7e:17:98:c9:53:21:
56:90:c1:7d:c5:60:ab:03:35:5c:64:5e:db:cd:72:
a4:f7:3e:9a:4d:12:01:49:53:76:7e:3c:35:96:3c:
95:f7:02:36:24:7c:fd:62:1d:c7:75:69:92:10:d0:
96:74:31:27:70:cf:3f:c0:73:b0:ce:a3:2f:c3:d6:
3c:99:57:84:c2:4e:ef:27:c1:bd:34:d7:cc:70:e7:
74:29:07:ae:59:d1:91:b1:6b:53:4d:60:81:79:7a:
7f:7c:fa:f8:33:4c:bd:eb:52:46:0a:ec:4a:13:63:
a8:4b:22:ae:67:dc:e9:da:7b:c5:1d:cd:9c:10:70:
89:47:59:38:3d:db:22:7c:49:10:b9:ba:6f:e0:62:
92:fa:c5:4a:3d:27:ab:f6:10:6b:b1:07:b0:a5:e3:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:42:7D:7C:2E:40:5B:34:4F:66:35:26:45:7A:9D:54:5C:7D:EA
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0e:4a:a3:d5:28:8d:60:57:4e:d8:13:62:24:5b:23:64:39:
81:c0:4a:e1:2c:b2:c1:72:48:02:a2:00:e8:1f:5d:69:76:fc:
02:11:96:c8:c5:b0:4a:86:1a:4d:8b:ea:f9:9b:82:c0:87:18:
c6:ce:07:29:cd:06:2d:69:72:be:0b:d8:4f:09:10:b5:3e:7c:
1c:d5:5d:32:b5:d5:2e:83:fd:a5:8f:eb:32:b4:c3:cd:1c:37:
6d:65:7a:71:84:9a:de:0d:99:c5:d4:30:c3:d9:31:f9:df:24:
f3:e3:18:75:a6:02:2e:a3:95:7c:aa:ea:44:6a:ef:99:d2:3d:
31:a0:06:c8:aa:57:07:17:9b:6c:48:27:6c:9c:d6:11:1e:fd:
fc:81:58:3f:0c:ba:1e:87:f7:2c:d0:e4:ee:da:3e:75:c2:c8:
79:d0:42:48:d4:2f:54:df:d1:79:b8:5f:b8:bc:8c:08:05:53:
60:75:3f:d9:42:c5:d4:60:cf:c6:a6:51:5c:2f:5f:14:a0:81:
c1:98:51:01:9a:91:1c:1c:27:2b:bf:1e:9c:31:fe:d1:f9:24:
22:a1:43:8a:98:1f:32:78:ee:ab:cb:d1:7b:27:93:90:82:d4:
ca:a5:bb:7d:a3:7f:57:5d:c9:a4:be:28:0f:4f:53:e4:05:35:
4b:3e:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:17 2025 by rpki-client