Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: R0IIuto+21Xk2NR2hQtPdqGqlsOVi3s8YBCPZ84V14w=
Subject key identifier: 28:52:EC:CD:C7:40:E3:CB:C4:C4:53:8B:39:CD:67:75:4F:CE:83:FE
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0194BD4EA0D3132F5C4F9C6DCA7267F2840E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: +gUg6irOtqWomnfFv3i9DZqrZsknH8/Yj2BM+lBA9hs=)
2: _kWvdqNfB5Qi_pth9OeMu1E5uoI.roa (hash: NWHqYOJDwR6XeYKKHls7B7q+f2asHmCl+FEc/+iucHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:d3:13:2f:5c:4f:9c:6d:ca:72:67:f2:84:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=2852eccdc740e3cbc4c4538b39cd67754fce83fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:fa:da:48:5b:bb:43:ab:6c:0b:92:36:6d:
1f:20:4f:09:49:a6:32:36:b3:1b:78:5f:d6:cc:e3:
42:7d:76:7e:d0:8b:93:3a:39:db:24:4d:24:53:16:
6d:c6:75:ed:a3:74:c5:0f:cc:c1:0f:b9:4f:d4:0d:
0f:ea:3f:4e:47:8f:9a:78:43:d7:df:99:3d:a2:98:
15:b2:67:cf:94:68:bc:65:fd:f0:ad:e8:6e:96:5e:
4d:7e:fe:9a:ca:0f:f9:db:65:15:04:fa:a7:e6:20:
31:91:43:95:8d:43:00:44:76:b1:4e:1c:29:80:56:
ff:47:8c:00:f9:d7:f6:04:f7:f5:2c:4e:f9:f2:26:
c3:db:25:ed:6f:ed:d6:37:e8:ab:26:51:29:c5:0a:
97:ba:fa:75:a1:6f:1f:12:1e:dd:33:2e:76:cc:47:
12:2b:2b:1a:5d:ff:ce:98:c3:3f:57:69:e9:9e:67:
f2:64:1e:82:d8:fd:d2:c3:1d:90:27:b3:e0:c5:00:
8d:b5:62:30:f3:d4:5e:c5:ba:10:d9:f7:ac:ca:c3:
d8:49:40:ba:98:17:0f:ba:81:73:53:ba:c9:e9:1a:
c6:5d:8b:26:a1:1b:92:d3:d1:30:38:ff:9c:c4:8d:
1e:e9:d6:0d:e3:8f:68:91:38:e8:76:94:13:22:05:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:52:EC:CD:C7:40:E3:CB:C4:C4:53:8B:39:CD:67:75:4F:CE:83:FE
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:78:3d:8c:b1:8a:59:46:37:51:72:9f:31:e7:93:48:f7:a5:
55:f9:e0:57:e3:60:b9:8a:2e:3a:a1:51:e4:67:7e:da:69:71:
0c:f7:12:d3:ef:b4:b9:37:2f:cf:51:ae:bb:20:c3:90:a9:d3:
a1:c3:f8:17:58:69:d7:84:69:42:3b:27:5c:fc:e7:c4:43:25:
6b:81:32:f2:54:2b:b6:d8:dc:55:3a:cd:78:a6:80:9a:77:54:
c5:15:23:dc:e6:e8:3f:51:e8:a4:8f:13:0c:d5:6d:af:d6:23:
32:1a:6b:53:a1:1b:78:c5:26:04:e8:f3:59:90:90:57:14:9b:
76:8e:e5:02:64:b7:d8:ea:d1:b9:21:81:a8:c8:c7:9c:f2:88:
e0:be:98:15:53:8d:af:73:0b:25:9c:a1:91:dd:12:07:ef:01:
2d:df:c3:d9:39:93:5a:04:da:cd:ab:43:1b:3c:2b:f5:80:4c:
3e:df:b5:2e:af:cf:e7:38:69:23:9c:84:a9:87:3e:dd:f1:cc:
db:e9:5b:19:11:5e:4b:9f:24:c0:b2:59:bf:df:71:a2:37:22:
5c:ad:5b:83:1a:4e:9a:10:97:9d:f9:c6:6b:bb:22:cb:ec:6f:
95:af:c9:32:01:6a:56:09:04:0e:21:32:37:46:e2:e8:9f:63:
73:b0:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:05 2025 by rpki-client