Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: w6JDI1efCy0c+kLU1RHtzcNd3vTSSQ7lWiDdS0NVtvo=
Subject key identifier: 5F:F0:37:CC:D4:B0:21:73:9C:40:DE:DA:D9:26:77:25:AF:21:16:8D
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 0194BBCE8F3CCAFFD86E593D49E52BF8C820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: BSTJM4rfxICJvoWwK8dH7TKJnFw+x/6RkWcskVmFmIw=)
2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=)
3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8f:3c:ca:ff:d8:6e:59:3d:49:e5:2b:f8:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=5ff037ccd4b021739c40dedad9267725af21168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:24:5b:9e:dd:d9:0e:cd:2a:e1:dd:48:d3:
62:97:92:b5:62:df:bd:52:40:71:70:a9:64:f3:53:
d7:67:3d:7f:12:b8:d2:20:8d:eb:78:34:13:0e:15:
19:84:ba:2e:84:6b:af:2b:6a:04:7b:62:e2:aa:bc:
28:72:15:99:89:f4:36:2a:7e:8c:71:2d:6a:d8:ad:
c8:e5:ea:08:6f:e9:18:2b:da:57:e6:ac:d2:65:d3:
77:5d:6c:46:ba:db:25:0c:3a:54:e2:00:58:5d:46:
c6:98:52:4a:95:c5:81:51:5f:64:7a:2b:f2:f2:d5:
73:c9:fe:03:90:5b:5c:fb:36:2e:e2:96:d5:91:11:
0e:0b:21:d3:e1:52:85:26:a5:c3:64:df:98:e1:7c:
98:f1:71:b7:fe:2b:5b:2c:bb:76:24:21:2d:42:63:
0f:3c:ad:99:4a:44:0e:8a:38:5b:b3:0f:c7:13:a0:
8d:4c:8f:0a:f9:db:2d:b3:5f:51:8f:0b:21:47:d7:
d3:6a:2c:81:1f:71:f0:d6:d0:32:f4:8a:95:36:2d:
ee:70:13:da:c3:19:03:ff:ed:3b:9b:53:59:28:a3:
1e:5d:fd:a5:8f:33:ed:f7:37:a1:75:9c:5a:c3:49:
ed:79:d8:72:07:69:de:b6:99:2b:38:bc:78:e1:96:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F0:37:CC:D4:B0:21:73:9C:40:DE:DA:D9:26:77:25:AF:21:16:8D
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e0:bf:d0:37:52:7f:7a:f0:ba:f6:f8:13:11:ad:29:9e:13:
c3:ec:bc:7a:85:11:46:fd:83:10:eb:72:5a:69:bd:25:17:87:
aa:13:9d:cc:f3:db:20:30:fa:18:5c:d6:2d:e8:63:8d:ed:d4:
25:26:c5:19:83:76:b9:61:a9:a1:be:7e:5c:8e:bf:77:21:25:
5f:68:62:7f:09:54:ba:6d:82:fa:5f:19:39:47:ba:17:ea:5a:
38:1c:2d:3b:5a:80:f5:9c:76:3b:3b:9f:7f:8e:81:28:18:c3:
ba:e7:95:b0:16:90:ed:44:d2:69:05:b2:57:ea:5b:7e:a6:69:
39:0e:74:66:1f:47:3b:0a:82:df:10:f4:a7:2e:ed:63:1f:42:
24:1d:b2:3d:55:3a:20:02:93:d4:78:ef:07:07:f7:00:24:48:
0e:c0:d4:a0:16:b3:7e:e0:00:b1:1d:4b:22:91:81:e9:ba:b1:
e9:a0:d5:d0:32:de:42:c7:15:e7:9c:e6:1f:99:91:a9:58:83:
fb:1d:ed:75:2b:9a:80:bd:c3:48:09:c7:16:65:ba:8f:97:f7:
80:2d:40:aa:3b:da:7a:9f:e8:5e:a9:be:be:9c:db:74:b4:01:
c3:96:89:57:51:f6:fc:77:ed:82:6d:13:8f:0c:4b:79:e5:82:
8e:5c:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:05 2025 by rpki-client