Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier: NPoe4MaR0uiYB/M37LK0YG6fwjYILwv21krvt64AATk=
Subject key identifier: 9F:EF:B3:14:E7:30:AD:5E:8D:24:62:25:F1:39:77:2D:B2:E7:6B:75
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer: /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial: 0194BD4E7A1D2C5644DE0F61A3195D329FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: 2sAECcYLUTJTInRKLHCeqwCZOXRq+4rXQjgSUpPZcEo=)
2: Pgq22PofDYngFneIOCYn3YcILuE.roa (hash: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7a:1d:2c:56:44:de:0f:61:a3:19:5d:32:9f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=9fefb314e730ad5e8d246225f139772db2e76b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:8e:98:e5:2b:23:69:aa:4b:3c:d5:c0:ee:
8e:ec:98:42:41:93:85:ee:df:ee:52:bf:02:47:da:
c2:91:5a:65:f9:0c:f4:74:b1:b0:1e:4e:7f:48:f0:
b8:f8:c6:27:94:1c:28:e1:6f:7e:f4:d5:bb:ac:d5:
45:7a:f9:ab:17:4e:6f:a6:c7:0d:a6:5c:78:e3:96:
d1:7f:54:f5:5b:db:19:7b:ad:83:25:50:99:ce:af:
86:fe:02:ca:6e:52:44:c8:1a:21:cc:1f:9b:77:e3:
05:c8:40:4b:e8:b8:6b:ac:20:b7:c2:7c:9f:3d:81:
cd:f8:c0:98:65:3c:8f:92:fc:0d:4d:cd:d9:f7:ad:
f7:2c:ba:8f:3f:b4:d4:02:61:53:c8:5a:c8:ac:1f:
81:cc:11:3a:d5:9e:3d:d2:11:3f:8b:59:0b:1a:cc:
82:47:0f:43:60:49:5a:3a:f2:86:1e:85:56:3f:ca:
e5:18:d8:f4:d0:6c:03:56:a6:d7:15:34:4b:87:a2:
3b:b6:92:a5:9a:f0:2e:de:cc:2e:43:a5:22:95:37:
2b:79:74:a3:06:d2:f5:02:c3:02:16:b8:6c:b1:50:
e9:51:29:02:7c:04:d4:ce:bb:f3:d6:61:ab:54:76:
12:c4:54:49:87:b9:e0:23:03:35:c2:97:ed:f6:1a:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:B3:14:E7:30:AD:5E:8D:24:62:25:F1:39:77:2D:B2:E7:6B:75
X509v3 Authority Key Identifier:
keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7e:fd:bf:9b:05:13:9d:2b:26:16:d5:fa:0e:79:47:a5:d9:
59:77:f0:b4:89:fa:31:52:c1:7b:31:06:4c:56:4a:4d:cc:6d:
99:38:6e:f5:7c:69:2e:74:d0:24:da:18:65:65:99:69:58:2b:
a5:83:de:58:4b:b9:f3:54:a4:4d:29:87:88:a5:93:a6:a9:12:
8f:e8:04:14:46:33:43:e5:1b:63:42:2c:1b:b4:48:1d:61:33:
c0:e8:35:38:2b:8a:89:f3:2c:8b:b1:69:0e:d2:f9:66:0c:41:
aa:9d:27:36:a5:e0:15:67:69:36:6d:6e:e7:3d:b1:46:cb:3b:
60:08:7c:c1:be:c3:56:c0:f0:dd:3d:e6:42:25:77:d7:a2:42:
d9:02:c9:58:b1:a5:c4:73:73:67:0d:6a:4c:f8:99:d5:f4:0c:
29:eb:25:ab:c8:a3:8c:6b:92:d9:48:52:c1:c5:66:79:83:c3:
76:97:26:08:6e:df:71:ec:87:11:46:56:57:f2:36:cf:d3:c1:
0a:4c:d0:da:11:d8:f8:9d:50:e4:a9:27:a6:e0:08:87:e6:0a:
0e:ec:32:aa:42:e4:dc:6f:de:aa:56:78:a7:97:99:68:44:d9:
39:b2:b4:43:ce:68:64:5c:db:bb:1a:a8:01:54:52:5a:fe:6f:
26:22:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:03 2025 by rpki-client