Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: yToc6Rk5kLravfvztOE6ZzUhENlgZCiEVVheSlfzfyY=
Subject key identifier: 14:57:6C:1D:6F:FB:64:A3:56:86:5C:12:28:D6:17:68:04:73:D1:F0
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 0194BBCE0C914653185727515B63CA16D913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 0478
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: sj2GnT6jYHyrm3VUrOaMp3lvs94X5Iu7MnOWtQm7tqo=)
2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:91:46:53:18:57:27:51:5b:63:ca:16:d9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=14576c1d6ffb64a356865c1228d617680473d1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:ac:d6:d8:98:1f:da:6e:6b:a2:09:d0:de:
b9:6d:4b:9d:75:83:d4:64:0e:32:42:09:62:ef:37:
02:80:2c:42:f6:0b:1a:a2:23:b5:54:4c:14:fd:c2:
d4:d3:7c:3c:57:b3:5b:78:b8:6e:db:9f:1b:52:06:
01:16:4d:0b:24:eb:f2:4d:81:f6:55:ff:d9:dc:ae:
7e:80:9b:b2:9a:e1:42:20:74:58:02:76:b8:a7:d2:
92:6c:b0:ab:09:22:e2:c7:86:16:e4:19:94:75:c7:
69:82:d7:5f:7d:ff:74:80:d8:a9:1e:c3:b9:77:5b:
3c:3e:03:71:f3:d1:eb:54:ff:8d:5a:e7:30:74:79:
f2:88:ed:fd:35:89:b4:1b:62:23:15:0c:00:24:9d:
d7:54:5e:8a:2d:cb:09:09:1b:86:cb:95:5d:93:47:
c7:a5:cb:7d:a5:b2:17:f8:94:b8:cf:50:32:c8:63:
b0:3b:97:50:d3:eb:27:cd:04:d0:b3:bb:3e:92:1c:
66:0a:bb:15:d2:86:48:e7:94:69:c8:31:06:43:29:
c3:d8:6e:8a:47:29:8d:d6:bf:a2:48:61:91:26:70:
8d:73:98:09:49:ef:fc:e5:ea:64:09:4c:1e:e7:e5:
99:82:1e:36:5c:47:d0:44:89:0f:21:03:f8:34:4b:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:57:6C:1D:6F:FB:64:A3:56:86:5C:12:28:D6:17:68:04:73:D1:F0
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cc:2f:7a:8c:b7:e3:22:fc:b1:e1:52:b6:17:57:ea:a5:01:
8b:b7:cd:22:81:81:3c:72:d2:d6:12:55:c4:3a:f2:ad:22:d3:
6a:aa:3b:31:5f:83:49:7a:6f:e3:37:59:2a:d4:cd:01:33:51:
a8:b6:59:96:b8:ab:d5:64:7f:c6:08:bf:17:f8:13:bc:62:20:
68:7c:8e:a0:5d:52:b6:79:8c:6c:0e:55:a3:a3:0f:72:56:a3:
be:67:73:0d:c4:48:56:06:9f:c2:f9:fd:b2:9a:c8:0d:f8:97:
15:e9:b1:58:01:b4:9e:8c:eb:a1:c9:37:94:85:b2:70:56:e0:
40:97:33:ba:ba:ac:62:21:8f:3c:57:62:47:00:31:3e:b4:e6:
de:9f:7c:5c:2e:a0:6b:8d:44:d9:10:aa:bf:b5:5b:ed:83:4f:
f7:92:d1:28:24:85:82:3a:8d:e5:45:d2:86:6f:58:bc:3a:0b:
77:75:22:ed:48:61:ab:12:e8:42:3a:34:f1:8f:2c:3c:6d:9d:
25:34:4d:d3:f9:13:fe:61:e0:9a:a7:7a:46:e3:0b:c8:3a:04:
9b:ef:be:13:b9:95:bb:8f:14:66:fe:cd:92:03:e9:1f:6f:7b:
f1:4a:8d:e5:b5:f0:d9:28:76:6f:1d:17:c0:20:15:6b:5d:fd:
5e:76:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:05 2025 by rpki-client