Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: mmrJKtVM2g295/HeKylsrnL7fQw1P42KUYYTyik7giM=
Subject key identifier: 7A:FA:9B:34:10:86:72:B5:D8:22:BB:C4:30:D2:56:11:A9:B7:2E:4A
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 0194BC04B8E438E1F62363BE8FF8B01BE836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 040B
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: 3owUsmweTDONG+X4f/lYQHZ7GMxAVERB9zfDgNIezIs=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:e4:38:e1:f6:23:63:be:8f:f8:b0:1b:e8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=7afa9b34108672b5d822bbc430d25611a9b72e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:0a:c5:60:78:79:e1:fc:99:53:15:63:cc:
6a:f4:3e:46:39:81:e8:ba:cb:b0:f0:a6:0f:93:39:
a4:f9:0e:8f:8a:fa:6c:50:ec:91:e9:82:9d:58:6d:
ad:60:c4:f0:e9:70:2b:bd:6e:c6:5e:82:28:6a:9e:
b5:82:42:3d:fb:b7:c0:b5:d8:74:47:9d:e8:dd:b8:
80:fd:64:5a:33:d6:be:89:2c:ef:59:31:ee:a7:92:
46:c2:5e:da:1f:3b:03:1b:16:5d:25:c4:ff:1b:e8:
6d:54:69:da:73:68:17:29:36:bc:0e:06:3b:bf:ec:
57:55:8c:ab:86:fe:b1:ac:26:ec:a6:46:a6:23:00:
52:b1:a0:c2:35:6c:2c:17:62:12:c3:28:73:ef:b4:
b4:11:bc:9e:f8:16:b9:b6:04:06:19:c0:03:8a:38:
af:3d:13:1c:ed:8a:fb:e7:73:c5:9e:ad:4f:16:5f:
0b:1c:db:e2:72:3e:c3:61:13:b4:54:5d:f4:71:1f:
56:cf:78:d1:e1:cc:6b:39:89:38:61:65:6f:70:c9:
4f:84:2f:3e:8b:b9:15:96:63:da:eb:4f:88:f9:98:
7d:17:da:0f:f2:d8:20:10:38:03:70:91:7a:4a:6c:
0a:67:a1:93:43:64:44:9f:c6:d6:75:0c:af:77:f7:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:9B:34:10:86:72:B5:D8:22:BB:C4:30:D2:56:11:A9:B7:2E:4A
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e1:98:e5:65:89:a9:e3:41:1c:4b:75:33:77:b0:08:ef:3b:
96:c3:1b:c5:3f:4c:31:59:63:17:94:f1:51:a1:3b:2d:16:3d:
d1:c0:5d:80:4f:59:a3:b6:f2:63:c8:e5:49:4e:d6:69:83:46:
bc:de:60:03:85:12:a0:57:21:28:5f:83:fa:8f:42:98:89:fb:
9a:d6:8a:3a:29:64:0a:fc:b6:54:a4:bd:dd:64:e8:1d:69:d7:
7b:b2:cf:df:31:dd:6c:11:ab:94:93:57:71:92:10:ca:ed:04:
67:9b:8e:aa:ed:5e:a8:1a:7b:0a:bc:84:b6:88:3f:51:81:dd:
33:9e:59:6e:fb:bb:fa:9b:ec:16:0c:b4:19:be:10:04:66:3b:
3d:21:12:06:cc:6f:9c:88:75:98:88:2c:17:3e:be:f6:b7:dc:
64:8b:45:00:3b:3e:ec:6f:b7:4f:13:47:a8:fe:a1:a8:86:1e:
fd:69:64:76:63:b2:ff:d6:49:08:22:08:5a:6d:bd:b7:88:04:
05:dd:67:16:a3:7c:32:09:a9:87:17:86:24:ff:a5:11:19:0a:
33:a8:fc:bd:78:2a:85:b1:4a:d3:73:4e:7d:94:d6:7f:fb:78:
87:76:86:b9:e7:2b:ce:56:97:4e:53:fa:02:b7:23:93:fb:f9:
91:8f:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:47 2025 by rpki-client