Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File: 1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier: hJceserAXg7JfjlNYfM5svBkWXSIOF+rq8DvBQvdlpY=
Subject key identifier: 57:36:00:97:C9:DC:40:36:BB:C2:B4:E3:D4:94:0F:BC:EE:21:F2:78
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer: /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial: 0194BC3C412E2C85DD4D02FA9B32D318A5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number: 8D
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (hash: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=)
2: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: BLGJhWUm8EKR7+Izx0UQ6Bsr+fpoxDjrHhRxEcZpfFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:2e:2c:85:dd:4d:02:fa:9b:32:d3:18:a5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=57360097c9dc4036bbc2b4e3d4940fbcee21f278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:82:d2:e8:1b:e2:ec:1e:6b:6c:9b:35:48:
76:89:8c:75:41:77:51:a1:71:5c:94:c2:0e:3e:74:
5a:9c:3a:cd:44:c7:d8:74:50:7a:3a:fc:8b:13:17:
af:ff:40:6c:e7:d4:e9:b7:29:ee:1f:b1:3f:60:0e:
7c:3e:f9:b2:bf:b6:c1:d8:9e:1e:34:7e:f4:ae:ea:
d7:eb:54:bf:f6:46:83:60:e1:76:9e:f3:de:7d:67:
d5:1c:da:39:7e:3c:c3:5a:ef:ae:41:9e:21:fb:f2:
ba:be:1f:b1:0e:7d:d0:d7:46:fc:6d:d5:eb:a7:cf:
1f:03:21:a0:59:3d:64:f8:1b:02:ae:b9:d2:5e:78:
d1:73:13:86:17:90:bf:06:ac:7c:d2:d5:91:3c:c1:
dc:8b:fc:9e:7b:f8:45:3f:2c:48:ba:a1:a5:77:b9:
96:9e:2d:76:da:12:6e:93:b7:0c:cc:2b:a3:fb:0e:
ea:a6:35:99:e2:16:e1:e7:58:52:16:0a:ee:b3:03:
1a:31:22:a9:60:4a:2d:4a:0c:86:2a:20:81:e5:4b:
a4:95:65:ed:89:2d:ce:82:1b:36:95:45:8b:c3:ec:
0d:fe:16:77:2f:b8:36:47:47:16:b9:0a:67:f1:db:
7b:7f:23:8e:3e:16:00:6c:72:58:75:e1:82:05:ff:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:00:97:C9:DC:40:36:BB:C2:B4:E3:D4:94:0F:BC:EE:21:F2:78
X509v3 Authority Key Identifier:
keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:db:9b:cc:14:1d:1b:70:1b:26:22:91:e6:a4:12:2d:cd:54:
30:43:a0:cd:71:b8:d0:54:69:e3:12:ba:c4:6b:b5:0e:80:ae:
89:1a:5a:87:a9:83:c1:48:1d:36:d6:91:7d:5e:9b:e6:a5:69:
39:8d:f2:d3:5f:a0:5a:5f:08:13:bf:0d:13:3a:ce:ca:c1:54:
64:06:13:05:c7:43:8d:df:58:27:86:47:76:8f:ec:42:47:60:
1b:74:dc:56:c6:2c:22:0d:1b:22:59:d6:30:8c:36:0c:d6:d0:
97:ca:bf:b1:8d:c8:aa:f3:fa:f5:cf:e1:6b:06:75:6b:51:22:
50:b8:f4:1e:46:35:fc:75:2a:5c:61:4f:7b:3c:d3:2c:87:b7:
32:5d:41:9d:32:9e:67:e1:a8:69:8e:fc:53:c7:43:3d:67:c7:
df:41:8b:70:78:60:64:21:d5:a7:7b:da:b2:e8:0c:07:72:63:
cd:38:83:a4:cc:5c:00:0a:69:a8:e2:19:6a:9c:2b:4c:01:ea:
3e:8f:ed:3f:c9:40:ff:80:bd:cf:7a:0f:70:e5:01:df:76:64:
c6:85:ec:05:17:8f:be:c8:fe:89:00:72:aa:d4:a7:54:7d:e3:
f2:a7:6c:74:3d:d7:c1:3d:83:a8:39:e9:7a:fb:f0:15:55:04:
f4:fa:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:40:04 2025 by rpki-client