Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: bB8F/ejCHM8HR5nFQFsVrxU6wuk/YcfrQucgUYnFBVk=
Subject key identifier: A8:E7:C1:C8:4B:8D:A4:F0:47:5D:81:44:C1:ED:E2:01:4A:3E:28:05
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 0194BCAA199F60CF523C26E3FEB39C48CC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 10EC
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: 0rCm7zm821l5/MCd0BHN1z45Q6SFRX3VsoWhcpTWyAo=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:19:9f:60:cf:52:3c:26:e3:fe:b3:9c:48:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=a8e7c1c84b8da4f0475d8144c1ede2014a3e2805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:27:fd:87:80:93:32:b2:52:cb:0a:4f:21:
be:e6:2f:69:7c:e4:2f:de:fd:f2:3b:a4:92:78:88:
32:04:4d:32:d8:b7:6c:97:ac:42:e3:7c:35:50:da:
9e:10:d4:97:c7:50:47:ce:b0:c9:65:b2:db:c1:e3:
2a:4c:80:ee:78:97:97:c4:99:e7:0d:b9:3d:95:b3:
0a:88:5c:ea:bd:aa:52:d0:18:fa:5c:b2:06:e8:b2:
75:37:e9:5c:0d:80:aa:51:81:22:47:87:c7:df:5f:
a5:3f:9f:18:4d:2d:ad:2c:97:18:e0:91:33:c2:de:
54:a5:6b:9a:22:b9:5f:d3:a2:09:4b:45:70:6f:6a:
a1:6b:9f:08:c7:ad:40:f2:7d:66:f0:f3:da:bd:42:
60:6f:6f:2b:6b:67:54:60:e1:60:7e:9c:c6:c6:a4:
53:c5:34:78:02:f9:f6:29:00:6b:2a:10:1f:f3:15:
d9:16:db:2b:80:cb:fb:43:09:23:16:5b:ba:bd:e6:
10:d2:fb:4a:07:40:99:6c:9c:c7:38:2a:11:25:1a:
b3:f0:16:6c:1a:26:de:ef:db:73:4b:16:9f:d3:3c:
ba:41:2e:0e:9f:20:f7:d7:8e:92:5f:2f:11:28:ef:
b0:c6:70:14:3d:c4:6c:58:c9:9b:fa:5c:68:6b:1a:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E7:C1:C8:4B:8D:A4:F0:47:5D:81:44:C1:ED:E2:01:4A:3E:28:05
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ae:4f:f5:da:26:b7:03:ad:fa:ac:d5:7b:a7:11:d8:fa:a2:
5e:50:88:99:9c:29:ad:09:dc:56:e2:d3:39:c2:69:94:82:33:
2c:80:c7:e8:17:5c:c0:8e:14:42:a6:3a:6c:83:83:6e:6e:4c:
ea:6a:12:f0:3b:8b:0a:34:41:1e:11:55:a3:91:91:8a:3f:ba:
24:f0:88:37:35:cd:85:61:d5:52:65:17:62:f2:6f:b8:03:ca:
7f:fa:2f:70:9e:41:8b:39:cb:e9:0e:7d:c2:03:d1:6d:2b:04:
be:32:9f:71:05:d0:90:20:81:d6:ef:53:ec:9d:bb:3d:87:ec:
83:d3:bf:5d:c3:0d:03:5d:ef:19:a7:3c:11:57:13:cd:9d:0e:
ba:da:8c:f5:4a:ff:bf:ce:ec:e2:f6:10:cc:9d:71:3c:65:9e:
32:59:d9:98:9f:f8:98:ae:36:fe:7d:41:50:61:df:7e:9c:09:
81:4f:20:c7:68:4e:85:98:17:d5:ab:9b:df:a4:c6:b7:44:43:
a2:83:67:38:40:3b:c6:f4:34:34:84:8f:ab:f4:aa:f5:86:3f:
bf:e2:d5:a4:ee:3b:d9:d3:5a:f4:71:3c:fd:85:66:ec:ec:87:
ed:97:b3:26:f0:00:b6:ce:2d:53:15:0a:59:e6:ce:3b:d1:22:
0c:57:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:46 2025 by rpki-client