Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: WHzMOAN2/+WPqWcGHbc4QHH7FousUOFCrO+dnDJjdbs=
Subject key identifier: 5F:37:57:B9:86:0D:27:A2:2D:A7:FB:66:50:A1:88:DD:29:F3:41:DA
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 0194BC05092F198F1A6D4B48AA9C5FF2892C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: v0zkFtyAy1eEGhI4/s+bGhnYXzDFWy0LYL5Z8IsQDao=)
2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:2f:19:8f:1a:6d:4b:48:aa:9c:5f:f2:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=5f3757b9860d27a22da7fb6650a188dd29f341da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:5a:97:8b:7b:0c:02:56:07:bf:c7:d8:26:
e1:dd:59:f4:a5:d6:ce:e4:0e:e1:13:cc:dc:c2:ab:
7e:38:ee:46:0d:ad:a2:91:f4:60:af:6d:76:8d:5c:
7e:d2:0c:7c:11:66:20:98:9c:20:04:16:39:3b:ce:
47:88:45:ca:45:de:87:2b:e6:f3:90:70:aa:77:be:
4f:9c:ef:d6:a2:eb:82:18:7c:52:4e:a8:36:3b:8b:
d4:b5:08:d0:28:f6:fc:90:29:5c:8d:ae:8a:b1:49:
1c:99:a9:15:ab:a1:bd:a9:dd:e1:45:63:e8:bb:c5:
19:61:c1:fb:db:f0:6d:df:77:df:b3:e4:b0:27:7d:
d3:9c:b5:8c:11:8c:e9:9e:07:f7:bd:09:05:48:54:
e8:bc:34:cb:9a:4b:07:20:23:24:1d:b8:49:1f:ef:
09:96:cd:04:b3:d9:8b:47:0c:57:32:70:b5:bc:a5:
99:b7:da:c4:7d:57:c9:4c:cf:9f:ca:4f:63:1b:30:
e9:32:0e:56:2f:10:be:9b:7d:e0:91:2d:5d:8a:12:
88:7d:6f:33:c3:42:ba:28:ff:36:86:7c:bc:b6:43:
93:f4:6d:75:bb:5b:ba:1f:d1:94:a0:f8:8f:f8:17:
2f:0d:68:07:13:a5:9b:85:44:c4:f8:56:10:04:80:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:37:57:B9:86:0D:27:A2:2D:A7:FB:66:50:A1:88:DD:29:F3:41:DA
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:97:a1:ba:c9:e4:20:09:94:61:36:46:ce:57:6e:b8:32:1a:
7e:66:c1:41:77:40:77:47:4b:ea:4d:4f:a0:6d:bd:b0:39:cb:
7a:76:00:2c:4d:4d:72:4b:ec:47:d9:42:b0:92:5e:20:f6:9b:
2b:74:9b:53:55:9f:0e:75:0b:89:aa:34:06:44:6b:f7:3a:14:
e0:12:45:dd:e0:91:0d:5e:ae:c1:90:bf:60:c6:45:86:0e:28:
39:cc:62:00:e0:56:98:2e:f5:fe:78:f5:76:6b:cb:21:86:6f:
58:8a:14:9a:3b:de:9c:bf:ab:8e:5d:b8:8e:0d:6b:c3:2b:1c:
ba:ce:a7:97:e1:86:b2:09:20:a0:5d:f6:6d:da:c6:03:85:4e:
6b:7f:8f:06:87:92:dd:2c:d7:5e:9b:f9:1d:3a:61:a8:23:5e:
72:50:50:3e:15:06:e8:f8:48:88:68:bc:ed:07:36:69:e7:89:
b0:ee:78:96:1a:03:4e:9a:ae:fd:47:7d:1c:07:58:36:80:04:
91:dc:5c:90:b5:04:d1:34:39:a3:2c:bb:27:47:fd:f2:b6:72:
2f:5a:4e:21:9c:a3:a2:56:d7:ef:4d:d0:c3:92:cc:0c:f3:5e:
67:0d:bb:26:b1:07:eb:63:d5:17:c3:d9:a8:be:e4:a0:42:b7:
05:bc:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:10 2025 by rpki-client