Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: cb0WqtdlPhzgZiV4s0IJSb/PudCZ36d5PTr30Z8QPwQ=
Subject key identifier: 0F:8E:DF:BA:B9:40:FA:86:6F:16:85:CD:39:AA:00:B7:8B:44:AE:A8
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 0194BC3C59FE186BD507C592BC0CC5133F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 087A
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: asMKNZWXReBPndaldzbM34OyIBZfIBK3d1t1YhTFm1g=)
2: axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa (hash: L++63wCXKAgo0Nta63++qRFUhLIAbDFglc5Q/4n9sQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:59:fe:18:6b:d5:07:c5:92:bc:0c:c5:13:3f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=0f8edfbab940fa866f1685cd39aa00b78b44aea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:49:93:ff:9a:bf:44:e1:78:77:09:65:33:
2a:54:30:c5:b3:41:f3:04:4c:b4:4c:1f:75:14:b6:
16:0e:c9:f6:83:53:72:6c:d6:f5:a5:12:ce:b2:3a:
72:28:32:26:1f:17:f6:eb:1a:98:1e:74:1c:a7:03:
69:50:83:9a:d9:20:a1:83:eb:ea:0c:cc:d6:0a:c1:
32:cb:f7:7f:b9:74:5b:a6:0f:14:94:9e:34:3c:05:
4a:c7:3b:36:7b:70:81:06:1f:9e:9c:1f:46:7a:b3:
d3:98:a7:22:aa:bf:fc:11:53:cd:d8:bf:4c:61:97:
8c:79:a2:28:e0:21:6c:6b:fa:e9:45:8f:52:69:68:
61:93:c8:15:12:41:46:24:6f:23:30:48:15:1b:0f:
8e:12:14:1d:e3:0b:d6:61:f2:47:f4:bd:31:ba:da:
c9:19:ab:e5:33:a3:65:99:c3:5e:8f:af:6e:dd:d6:
74:99:38:6c:11:f1:04:f6:b0:71:f9:70:33:ef:77:
19:0c:77:a9:b8:ca:9e:1f:57:91:a6:ae:9d:ce:29:
f3:d0:2d:88:4a:0a:b4:e4:05:2f:f7:3f:6f:44:18:
cf:d4:1e:4a:03:b4:fd:6c:a0:5b:e3:65:91:ba:d4:
a3:d2:25:b1:c8:f5:9d:b9:be:5e:33:03:9d:35:fb:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:DF:BA:B9:40:FA:86:6F:16:85:CD:39:AA:00:B7:8B:44:AE:A8
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:37:dc:88:66:20:2b:4e:19:dd:4f:bf:02:a4:d4:a6:d9:
03:c6:f5:9f:35:d3:38:00:47:2e:e1:b9:60:60:ee:1e:b0:a9:
b6:6c:25:a0:6f:e5:a3:9b:28:67:44:e2:dd:b4:cc:e1:4e:f1:
c9:e2:a7:15:60:c6:39:02:58:a9:42:72:ec:be:ed:f5:ff:8b:
ee:05:8b:c5:aa:34:13:60:b3:f6:bc:7b:a2:2a:d1:53:38:74:
87:de:ae:53:3e:52:5d:59:21:95:2a:2c:6d:c3:35:49:f0:5f:
7e:1d:1d:1e:05:4e:13:13:e3:a8:fd:ae:68:84:c1:d7:0b:e0:
b4:c6:46:6d:ac:f2:cb:44:90:b0:b9:26:c4:3a:27:3b:3e:b9:
56:fb:c9:08:95:7f:97:79:99:13:bb:bc:ef:76:c9:51:12:cc:
d2:73:34:37:f8:27:df:cc:e5:91:61:af:05:ad:c2:c9:92:8e:
b7:d9:d3:a0:c7:98:65:ed:a0:25:7f:8e:ee:7a:cc:b0:3a:2f:
ce:bd:ab:ba:51:be:3d:c2:7c:cc:0d:60:9c:b5:14:50:06:48:
89:f2:86:58:f4:7d:c1:ed:a5:cd:97:28:99:d6:4a:96:9b:89:
e7:38:62:73:32:59:12:22:63:b1:35:93:ef:b5:56:f1:9c:f7:
50:e4:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:29 2025 by rpki-client