Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: A64W/6Lchl5lxCfqOroWJWvZym5956vMqe1gwux5j/Y=
Subject key identifier: 7E:97:15:96:07:A4:0A:D4:35:5B:65:F6:81:C7:F1:9C:3F:51:AD:1F
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 0194BC3C94E21BDEF4C104AE8CE21E1030B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 0272
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: K3524AZoF55a05CaN7I6ut3S2pCoAHe/5irVLMRJCCY=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:e2:1b:de:f4:c1:04:ae:8c:e2:1e:10:30:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=7e97159607a40ad4355b65f681c7f19c3f51ad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:63:e6:17:6a:43:ac:84:78:61:6f:d8:4f:
28:bc:c5:ab:4d:cf:40:85:25:f6:ef:34:df:5e:2b:
40:b7:e2:f9:03:86:17:0d:64:ce:34:f7:c3:ad:7c:
23:ec:c4:18:a4:24:bb:0b:0d:4f:1f:62:9c:73:9a:
b4:68:83:b7:d1:07:e1:57:2b:41:a6:7d:d6:36:c9:
d2:21:b0:39:80:43:31:eb:ad:60:0f:bc:86:ac:69:
38:a2:ac:89:39:93:85:ab:db:ec:88:a5:d9:9a:37:
b5:e7:c3:03:67:96:23:e0:ac:89:90:26:dc:ab:58:
5f:6b:c9:e5:f1:d4:6e:7f:db:f9:51:2b:8a:d3:a4:
75:78:45:60:c3:46:b0:d4:76:b0:a0:f2:7b:2a:36:
f6:94:e6:87:76:ee:f6:5a:11:89:cd:fe:c5:74:6e:
ae:88:e2:1d:3e:56:7d:f1:d8:48:73:90:03:c8:49:
7b:d0:d1:67:e0:84:1a:cf:d4:25:10:34:e1:7b:db:
9d:7f:b0:fe:31:67:2d:81:a2:f9:2c:63:67:5a:e6:
74:2e:bd:7b:b6:41:b2:e2:f0:16:98:15:b5:03:ad:
d0:3e:56:3c:6b:25:1b:69:0b:94:93:7e:7a:af:6c:
2a:97:3a:de:6b:28:39:38:42:ee:68:b8:3a:dc:c0:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:97:15:96:07:A4:0A:D4:35:5B:65:F6:81:C7:F1:9C:3F:51:AD:1F
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8b:69:8a:53:1a:47:c5:91:dd:34:41:e7:28:73:d0:81:f7:
3b:e8:31:fd:fd:95:b0:22:fd:a4:10:0e:2b:12:f1:6b:b3:08:
95:e9:d1:78:f4:01:bd:df:f1:7e:cb:f4:36:9a:42:f4:46:68:
71:4a:7f:c2:b4:02:4e:e8:6a:c4:83:56:54:e0:23:5c:7f:14:
3a:6c:da:32:27:2e:33:45:23:e5:dd:fd:dd:b7:00:d1:41:0f:
01:72:ed:d5:35:17:70:df:94:56:54:f1:5d:2b:cc:71:a5:5f:
5a:06:81:92:e9:66:ab:b8:e8:aa:f5:5e:70:6b:35:37:3b:4f:
71:c7:ee:37:5d:bb:e0:e8:5f:06:ca:b3:3e:c2:e1:5c:f9:e1:
ca:de:f4:70:cf:79:9d:0d:7e:25:c0:c5:6e:39:07:84:3e:08:
66:74:6d:c5:39:9c:86:f2:4b:72:f5:2e:02:ac:7c:02:9a:5a:
86:ca:61:19:f2:26:84:71:e7:4e:db:3a:66:72:6d:c4:37:fa:
cc:fc:a4:fa:ee:c0:df:23:d8:d7:a8:fd:76:23:b2:72:fc:26:
ff:3a:46:37:51:54:35:eb:40:a7:08:f5:36:f2:45:56:38:b8:
be:5b:8e:a5:71:97:b1:c5:4e:ff:fa:50:75:22:fc:d0:4f:e0:
73:b9:00:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:26 2025 by rpki-client