Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: JtmdxskVwkY+HmuLl80FAgW0Um9SiJfHN0ufhUynTJs=
Subject key identifier: CD:43:92:9F:6D:2C:4D:8D:DA:69:85:3E:D3:66:82:E4:FB:65:EA:68
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 0194BCAA1806CACD74CEEE86DA95E9B638B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 09D7
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: /MngQgfABec7j7/7vo+fiDixjBc092ypoarkQC1oOyk=)
2: IWr6TuTrJyjayPLvTxSMqZtzabw.roa (hash: rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:18:06:ca:cd:74:ce:ee:86:da:95:e9:b6:38:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=cd43929f6d2c4d8dda69853ed36682e4fb65ea68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:05:b7:90:ff:de:79:5b:45:45:e0:77:b1:
a5:ad:91:0e:fe:66:f2:21:86:5c:e2:19:4e:7a:56:
69:ee:09:7d:6e:a7:93:3b:24:86:29:9b:d5:5f:d4:
06:c1:de:38:92:81:f9:4b:24:7a:db:e3:85:82:a2:
f3:b7:3e:d1:a0:9b:a2:72:b8:99:be:e5:2e:9c:d5:
eb:49:44:bb:a8:60:10:55:7b:69:21:dc:fc:ae:b9:
83:1d:7a:e6:c5:46:ca:6d:f1:a6:83:63:5b:5f:36:
5a:50:38:2e:86:82:59:e9:46:54:be:f9:76:1b:e5:
06:94:7b:1a:70:29:2d:f1:41:17:75:dc:14:59:4c:
47:38:63:f4:ec:ab:89:ca:86:0c:7b:8c:b7:ac:bb:
05:9f:92:a8:73:90:bc:e6:ad:40:b2:db:c6:20:49:
1f:63:2c:da:27:31:45:3a:d8:b7:e0:cc:0c:ff:44:
d6:61:1f:db:5b:6a:be:f0:db:5c:27:5a:45:8f:ed:
a8:98:af:81:02:38:5a:1e:56:ca:a8:d5:fa:c0:9c:
e2:9a:ba:b2:8f:21:96:25:d4:32:dc:e9:88:de:19:
a8:95:28:8b:9e:c6:8c:4b:3e:1e:9b:99:b3:37:73:
f6:02:a8:76:86:6b:93:8b:a0:1f:e7:2a:51:a1:4d:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:92:9F:6D:2C:4D:8D:DA:69:85:3E:D3:66:82:E4:FB:65:EA:68
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c6:c1:a7:43:68:6a:52:ff:43:47:11:ba:11:c2:de:4b:e0:
41:56:bb:39:df:e7:f6:52:8d:f2:a4:74:2e:aa:ac:10:7a:00:
39:e9:2c:1f:0b:20:78:c9:51:56:c5:3e:96:b1:1d:25:e5:42:
20:b7:ff:82:a1:cb:cb:af:fa:b0:fd:6b:4b:dc:2b:fb:52:73:
2d:9c:2a:0b:dd:1c:e1:c3:f9:1e:14:06:d9:14:e8:1b:fc:46:
b5:71:a0:7a:f3:ae:a4:ce:33:61:1f:1c:bd:34:eb:e9:a4:bd:
48:7f:22:9a:48:19:62:2e:9e:40:9b:22:7d:bf:5f:b2:9d:fd:
2a:d6:a6:bf:fb:32:3d:ef:13:bb:ab:f0:88:56:44:63:b2:29:
be:90:51:72:68:5b:b3:f3:2b:43:d8:2b:91:a2:7a:e1:05:76:
19:1e:e2:7a:fb:b8:52:64:a0:62:30:db:d2:b9:cd:cd:3c:0a:
79:1d:68:1a:4e:14:6e:c7:b2:ee:26:ec:7e:87:02:fe:ef:30:
be:8b:23:1b:ee:3d:78:7d:e3:39:f8:7a:5f:94:d6:21:a3:e8:
64:ee:f3:bd:c5:1f:54:ba:f4:23:db:44:3d:ae:64:bb:46:b4:
fb:1c:65:e2:47:39:d7:a2:e5:59:e5:24:48:c2:1e:a7:88:f3:
9e:2e:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:53 2025 by rpki-client