Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: 7/ptPwdnnlHAZvpPzJHMWGdVPcHGbCg6nBc5Y2lrhTY=
Subject key identifier: DA:54:2E:69:36:D5:8D:56:F6:1D:9E:B8:59:91:FA:A9:0C:1C:9F:2F
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 0194BD4EC258C4DFD5785212FD42A0D7427A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 1170
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: 4+C1p5Y0KF81VwsKQ7lemLlsva4Bi/8chSLoSC6ktYI=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c2:58:c4:df:d5:78:52:12:fd:42:a0:d7:42:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=da542e6936d58d56f61d9eb85991faa90c1c9f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:e5:6c:fb:82:51:b8:88:4f:10:78:1a:76:
ff:73:3c:ce:82:5e:05:ac:e9:24:5c:e4:e9:3f:39:
23:17:4c:b1:9b:d4:7e:a5:ed:14:fa:8b:c7:72:c9:
34:ce:87:f9:02:41:a5:c7:06:36:7e:1a:33:40:c0:
ce:06:4a:40:7f:db:85:db:da:6e:08:90:7b:84:89:
9e:76:27:16:92:38:4b:0d:ed:70:b9:a3:64:97:b0:
a3:38:bb:68:a0:e2:10:00:75:55:c7:18:a9:a0:4f:
e9:a1:f1:25:a6:3b:bb:b7:5a:72:d7:3b:9c:0e:80:
83:66:47:cb:6c:70:2e:0b:36:6e:c8:0e:fc:37:b5:
bd:0b:74:2b:7d:1d:48:bd:54:27:81:68:2f:1c:87:
20:bd:cd:9d:0b:1f:5d:bd:54:d5:0c:59:9f:c0:0e:
c6:95:22:18:84:c8:23:0a:8f:da:d3:c4:66:c2:8a:
8e:75:19:70:84:80:92:15:ad:57:ac:f1:5e:c7:36:
1e:2e:fe:e7:16:f3:d4:62:61:04:b0:5f:1f:e8:e6:
4a:4a:ab:01:28:50:c2:7e:8f:cf:37:e1:c5:ad:1d:
49:fb:c5:10:a0:f4:8c:d7:69:4b:09:53:42:90:06:
11:be:fa:e0:e7:19:3f:6e:e6:59:b0:6a:c3:ce:97:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:2E:69:36:D5:8D:56:F6:1D:9E:B8:59:91:FA:A9:0C:1C:9F:2F
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b6:a3:31:9f:a8:04:5d:50:d6:d5:a9:fa:3d:83:54:4d:3a:
c2:31:ab:0d:7b:7e:ff:e7:93:fa:cd:ee:68:20:65:d2:f3:f3:
ae:d8:cf:5c:64:20:d2:09:d6:ea:06:55:d3:4c:ca:90:23:18:
6e:bd:63:cb:00:55:44:fe:a0:fb:7c:bd:69:ed:8c:f7:8f:28:
61:95:a0:5d:83:ab:5e:80:a3:ff:20:1f:fc:b4:c8:8d:b0:07:
16:13:33:75:c3:3b:26:87:d2:6e:b5:2a:49:6e:9e:51:70:c5:
7b:63:c8:80:9b:92:86:31:c9:40:02:98:bb:ce:00:f1:d0:42:
b4:d0:2a:71:90:18:9d:4e:c9:0f:af:0a:f3:84:65:ad:1c:3f:
9d:69:48:37:4d:b8:73:35:2e:99:f8:34:ff:f9:9d:7e:c7:d7:
e9:e8:35:3f:99:1a:90:a7:39:1f:12:c2:55:86:fd:6d:f4:85:
ce:71:5b:da:ea:55:8e:05:b9:ef:ee:1a:44:9a:e0:13:f1:21:
0e:22:00:ee:c3:9d:d6:68:1d:3a:3e:9a:ff:76:13:16:4d:2c:
c1:05:42:25:af:17:84:ac:40:78:df:35:cc:98:d5:8d:6f:19:
87:4d:ce:e1:c3:5c:b6:04:22:e8:53:1e:6e:81:6f:56:ee:75:
4f:ad:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:10 2025 by rpki-client