Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File: V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier: k+dRH46rbjrxiD2uHhZMeXDoel7yLdoWXORphSOWFJ8=
Subject key identifier: DF:CA:1A:A0:90:66:45:80:C0:5B:7B:E4:2C:59:1F:5A:0F:32:B0:E4
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer: /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial: 0194BD4EB1555AA48BE18E9E00CC435D4306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: k/YKvgU2gsw9RjFhWWXscqbd+VZdzOnahrxKdgXnLoA=)
2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b1:55:5a:a4:8b:e1:8e:9e:00:cc:43:5d:43:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=dfca1aa090664580c05b7be42c591f5a0f32b0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:cd:e7:95:dc:b5:18:29:1e:36:8a:e4:d8:
4f:f6:63:dc:d6:20:60:ce:a4:89:c6:70:f4:ea:9d:
b0:a8:a1:ce:e1:f6:b9:27:7e:ec:ea:87:5a:b3:9b:
3b:d8:04:3f:11:6b:46:25:00:78:44:c8:65:30:8a:
50:bb:ff:42:2e:a1:82:d1:46:1e:d1:45:a5:8a:4c:
b2:d8:6d:87:d4:4c:e2:3a:08:2c:79:1a:35:7f:12:
93:55:46:0c:13:86:c8:ef:cf:6b:85:dd:cc:61:88:
c9:ad:80:50:99:4b:ec:0a:47:fc:5f:fd:87:ba:29:
a1:45:9d:05:12:77:9b:7d:a5:21:ab:16:64:3e:d9:
11:0f:1f:d2:05:ef:2f:c7:c8:22:c3:b1:6d:e3:c8:
69:7e:36:89:2d:0d:45:39:39:26:a9:92:9e:0a:51:
a0:48:92:e7:34:70:d4:0a:9d:0f:9e:61:b4:72:25:
11:b3:f2:78:22:00:c0:35:9d:bf:b4:33:93:4e:9e:
5e:fa:07:2b:0c:df:dd:82:21:ea:e3:b3:a1:88:41:
27:a5:d2:16:36:d5:de:95:94:a0:c4:14:f8:96:8f:
dc:e7:cb:52:ff:51:a4:0b:f3:09:88:b1:a4:19:9f:
70:38:06:e6:17:d6:0e:d6:2f:ec:50:25:0e:49:62:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CA:1A:A0:90:66:45:80:C0:5B:7B:E4:2C:59:1F:5A:0F:32:B0:E4
X509v3 Authority Key Identifier:
keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ef:6f:5e:03:fd:02:3e:3c:b6:46:21:fb:7b:a7:3e:1a:2d:
0f:ac:70:32:35:56:99:bd:32:df:2b:46:a8:61:37:08:f9:89:
55:51:bc:b6:3a:91:16:8e:68:ef:00:cb:03:81:46:8d:5b:87:
04:10:61:52:04:83:7d:34:bc:3a:5d:bc:58:78:d2:7f:7b:bf:
87:bf:c0:6a:84:7e:d1:f1:17:8f:1e:f3:ba:96:c0:8f:42:0e:
c7:38:8a:19:3f:f3:71:e9:2d:6f:9e:fc:79:04:e8:d7:90:b2:
ef:1d:d0:c6:56:b8:ba:94:df:54:d4:3a:fe:3b:3d:be:d1:35:
a5:82:3d:c6:f9:d3:28:3c:81:c6:ee:55:8a:cf:55:3f:15:57:
33:5d:d9:1d:94:94:16:71:7a:9d:e5:d6:77:1d:6e:be:3c:57:
3d:6a:3b:55:74:69:9a:d1:46:7a:da:28:50:86:2d:5a:ba:01:
f6:7c:21:13:a7:19:61:35:7c:e4:52:3c:18:22:76:4c:12:a3:
ca:ad:74:a1:02:53:3d:36:80:8f:84:d3:2d:84:de:a7:88:bc:
8e:e7:1e:1a:4f:58:89:79:24:4f:12:e9:51:d6:10:0f:71:aa:
cb:e0:06:cc:d5:7a:04:7a:bf:8f:af:9e:90:41:d0:42:b0:52:
e0:ec:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:40:39 2025 by rpki-client