Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: sRF3abLaD466XTEE9/QXd0AvgHPJpkONUhHHN8CbEPU=
Subject key identifier: 5F:A1:43:2B:5E:BE:4F:C0:83:97:A5:F8:32:51:EE:27:8F:B8:C0:A7
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 0194BD17FB78A0F8101C8C913EDC66823031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0BCB
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: ggcfrtLSPgdnWBtIuTW/86X2lT6Ci4JEEE5sW6JBVyE=)
2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fb:78:a0:f8:10:1c:8c:91:3e:dc:66:82:30:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=5fa1432b5ebe4fc08397a5f83251ee278fb8c0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:21:d3:17:b7:2c:50:99:64:7e:be:67:c5:
85:26:18:aa:b1:e0:f3:27:f2:3d:a3:41:b8:28:19:
cf:15:44:b2:f7:77:50:76:e0:31:6e:50:22:bc:02:
71:c0:dd:3d:90:ec:19:c3:08:29:d9:d1:f9:2f:39:
10:5e:09:ad:33:34:81:54:76:f3:b4:fa:00:27:e2:
18:c8:94:18:19:b5:d9:09:9f:72:b6:9e:ff:b2:1d:
fe:0d:4b:60:4c:43:e8:21:e4:83:2b:14:c8:94:fd:
71:44:f8:0b:5d:3a:0a:95:aa:1b:f8:d9:6d:6f:b7:
f8:b4:17:15:46:71:27:95:21:2b:4e:73:d4:70:10:
55:c2:3a:a0:b4:b3:1a:66:7d:08:97:9d:14:ce:9e:
1a:a1:f9:41:85:c8:8b:27:b9:e4:67:e6:3c:55:4d:
80:1a:10:82:fa:3c:23:ea:27:e0:6b:d0:a4:a1:31:
80:6b:14:47:50:a1:f0:6a:31:4d:31:6b:4e:a6:99:
92:81:3b:07:18:b5:29:e9:f7:90:aa:e3:08:65:c3:
2d:87:40:72:73:89:7d:df:82:6b:b1:6a:43:ac:b7:
e9:d4:ca:2a:4f:2e:7e:af:f0:6b:17:7d:81:7a:14:
1d:a8:58:25:24:3f:42:66:e2:39:73:78:0a:18:25:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:43:2B:5E:BE:4F:C0:83:97:A5:F8:32:51:EE:27:8F:B8:C0:A7
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a5:2f:da:a2:04:96:8d:b8:ba:bf:87:13:bb:85:4f:7e:e0:
b6:94:71:46:41:a8:e7:9f:2d:60:ec:b7:cc:76:4d:ff:1f:0d:
ab:0a:c4:6e:29:7d:bc:d4:46:69:9f:94:13:ee:85:67:0a:76:
a5:32:41:7c:6b:f8:6f:13:a1:8f:93:da:13:cd:43:d9:13:b1:
c1:5f:b0:65:fc:bc:9b:77:36:c4:54:67:1f:6e:58:85:29:a8:
dc:61:33:45:a3:6a:bb:ae:ac:35:6d:ee:02:8c:01:a6:8c:c3:
de:a2:d0:77:4c:cc:8c:44:f6:f7:6f:b9:a7:69:6a:33:1e:b3:
b2:fa:7f:64:cd:50:e2:fe:ba:9b:de:06:19:5b:31:cf:c6:5b:
12:bd:8d:0e:ef:7a:a4:90:98:d2:1f:ce:ed:0d:c4:34:4f:cf:
34:b0:fe:2b:0f:d7:77:0c:b7:30:fe:b1:38:44:76:b4:8d:75:
eb:b3:db:be:e2:6a:d5:d2:fc:3a:ed:9d:10:9c:79:37:93:de:
7a:32:bb:6e:93:8c:0f:92:79:5e:bb:8f:4a:ce:6e:13:17:64:
98:8e:0d:e8:c3:55:86:b8:8a:49:cf:48:1c:b8:7d:58:ff:8a:
e0:5f:91:33:8a:db:64:c1:65:30:75:d3:38:95:61:9b:1d:7b:
d9:ce:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:28 2025 by rpki-client