Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
File: C_t1KSifiPtLuHs5577cnZ8n1fo.mft (raw, json)
Hash identifier: bECFzIu38IC23NsjbWBFwIfdOU7QulHTTgTfNY294sI=
Subject key identifier: A7:15:7D:65:E4:D2:33:EB:4A:3F:6A:79:8D:D8:C1:4D:B6:23:39:0D
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Certificate issuer: /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial: 0194BD17D9FA9C7CB10B9945AA0ACB8759DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
Manifest number: 0A15
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: C_t1KSifiPtLuHs5577cnZ8n1fo.crl (hash: EYCB5NepDeFgjCo3cUhvSKCanitDhT+4iWtG3W8ElT0=)
2: whyZk-eGgLM_RCz6JHmHxo6hnC4.roa (hash: JprlHVW3ts3bvDOmnO+99r6acv/rg1V894NDodBDkxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d9:fa:9c:7c:b1:0b:99:45:aa:0a:cb:87:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=a7157d65e4d233eb4a3f6a798dd8c14db623390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:78:24:4e:fc:5c:38:35:de:7e:cf:25:60:
d4:76:70:ac:99:23:42:af:8e:b1:95:03:53:5f:85:
24:47:ca:a6:5b:20:61:fe:ca:58:00:2b:7f:a4:22:
7e:7b:19:96:1b:32:54:e5:70:58:07:bd:88:a5:16:
65:38:3b:9b:4a:6f:9e:f0:7a:16:1b:93:04:8e:a3:
15:7e:ea:f1:b9:19:f0:0a:a5:70:98:79:49:a3:5d:
d6:83:c1:da:2c:38:ba:5a:ca:23:4c:bc:21:19:5b:
a1:41:9f:2c:9c:c5:37:bc:0f:14:83:85:dd:7c:dd:
f6:20:dd:ee:ba:52:4c:76:b1:be:38:9a:c9:22:aa:
4c:5e:e4:29:19:65:3b:13:fb:13:65:34:12:70:fb:
3a:ed:d2:5b:21:6a:35:08:55:20:3e:b6:f7:bb:f7:
e6:cb:26:5a:b5:c3:0c:5e:d4:7f:76:a5:8d:e2:98:
33:a3:8f:04:7d:e5:1a:0a:7e:de:c3:2e:1c:da:f8:
bc:23:4c:4a:0d:3e:94:fc:2f:f8:40:b7:5a:f2:5c:
e4:82:df:78:31:48:84:1c:1b:35:5c:6d:8c:f5:09:
82:ff:e2:39:8f:1e:87:6b:70:1b:7e:41:52:32:27:
30:38:ae:82:b0:85:54:25:7e:89:f2:14:de:58:16:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:7D:65:E4:D2:33:EB:4A:3F:6A:79:8D:D8:C1:4D:B6:23:39:0D
X509v3 Authority Key Identifier:
keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:67:89:1a:4f:a6:c2:39:16:44:41:e1:22:c1:f7:9e:9d:34:
82:7d:7e:ee:3d:f4:6f:58:dd:7f:9f:de:16:be:38:12:64:95:
0a:39:3c:e2:46:0b:c0:9d:a2:3e:40:7f:ff:8d:6b:63:61:3f:
e7:b1:be:e8:b5:d7:e5:63:c2:07:88:32:ab:07:4c:e1:db:88:
44:2d:86:88:2b:35:6c:d1:be:b2:81:22:14:59:85:f2:56:da:
fa:a1:6d:c9:a7:bd:e8:c2:2e:ba:61:51:d5:6f:07:b0:50:4b:
69:dd:08:9d:71:cb:b8:3a:e6:a8:b3:e0:34:eb:db:dc:2b:65:
87:db:97:c7:3c:46:27:77:d7:55:7e:d5:1a:fa:2a:84:09:2d:
6e:a1:d5:d6:5a:45:c5:49:19:e6:cf:cd:27:74:54:b2:c3:ae:
16:f2:57:44:90:7d:d7:eb:c8:1a:cc:59:6a:be:a4:47:06:ef:
70:8e:8f:9f:ab:41:cc:72:4b:a0:a8:6b:97:fa:50:6c:58:c0:
7d:cd:73:16:4f:e5:8d:36:1b:7d:2e:58:50:8b:f7:04:1a:78:
f5:a6:c5:0d:5a:b1:16:2c:f0:fd:a3:1b:ab:6d:9b:79:95:04:
71:7c:96:8f:69:77:e4:71:f9:31:89:40:24:eb:e1:c9:2e:6d:
0e:1e:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:13 2025 by rpki-client