Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json)
Hash identifier: hVMi6fIFZQ7IPaz9dbQYxz+Ssl0xfS/gy/gWR1akgQc=
Subject key identifier: 25:61:F8:D2:CD:13:D5:40:62:92:4B:80:44:45:8B:AB:63:3A:E3:69
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial: 0194BD4E6521AA1A450D5160D78BAF6D080F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
Manifest number: 05BE
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 0TM8RaOIPFOpyp7Wz-Yo2ky-FH4.roa (hash: XeQkg3QeFHikM/cwWNNdphRvfPZiBaMh4xO56QjpXcM=)
2: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: ACYbKhoFP58sQhGOBmjSFTJd2p9HNh1pUxVKLERr7Ig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:21:aa:1a:45:0d:51:60:d7:8b:af:6d:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=2561f8d2cd13d54062924b8044458bab633ae369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:d0:d9:ba:cf:19:7c:5a:ed:ad:a0:27:a3:
bc:9c:25:df:72:94:f7:a4:b4:2e:fa:e8:2a:6d:6d:
7e:c9:b3:b4:7f:fc:85:c4:18:e7:21:db:86:0f:cc:
ce:2e:2f:ae:2c:a6:0f:76:10:15:11:24:db:f1:82:
e4:0d:a2:26:77:29:20:28:8a:26:1e:8d:e0:fb:d7:
f9:33:55:a7:83:20:8f:8d:3d:81:21:6c:d0:f5:99:
9a:19:8a:99:0f:d9:9b:1e:be:55:89:cd:89:d7:3f:
78:ab:5b:a8:05:49:e9:8a:52:95:67:26:35:ec:cc:
65:10:fb:c8:0a:19:b7:9b:f4:3a:eb:08:41:df:58:
42:8f:89:4d:04:f9:6c:50:c0:40:df:f0:03:3e:71:
c2:85:df:04:2d:09:4b:5e:51:a9:4d:65:28:e2:78:
81:5b:6b:90:97:0f:a8:a8:77:ac:4f:81:ce:1b:aa:
4b:e7:d6:99:57:d3:90:2c:fe:f0:9f:95:c2:20:25:
ac:18:b2:cc:fd:7c:e5:62:43:17:2b:49:3a:b0:d4:
a6:ab:79:0f:36:71:48:cb:e4:ec:bb:7b:5e:87:2f:
12:7c:47:28:01:0a:f1:aa:d6:71:20:c8:f9:8f:ff:
29:43:33:57:77:88:ae:7b:d8:e6:6b:3b:8b:18:ee:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:F8:D2:CD:13:D5:40:62:92:4B:80:44:45:8B:AB:63:3A:E3:69
X509v3 Authority Key Identifier:
keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f0:d5:5a:b9:f2:77:1f:c1:51:46:b3:7e:1a:5e:c8:04:82:
23:8d:73:cf:79:be:d7:8b:d9:68:eb:39:c5:ab:a2:90:21:95:
dc:58:87:5b:77:10:b5:35:b6:59:13:47:a3:72:e6:62:17:55:
cb:46:35:03:c5:1b:c3:89:7e:bb:3d:51:d1:cb:0e:87:2e:78:
f3:34:bb:17:c8:f3:44:0b:9d:db:74:26:e4:13:86:87:10:ce:
fe:1c:3a:c0:ba:7c:c4:03:8d:19:23:93:d1:c8:ed:0b:7a:93:
06:97:09:88:ee:23:ad:6d:43:c8:a5:88:23:03:2f:4c:c7:1d:
3c:9a:2c:9f:31:76:3d:8f:5c:45:64:48:a7:e2:13:fd:b4:19:
42:73:34:e9:b1:f4:95:71:85:f3:69:2a:68:dc:d0:04:13:ed:
0d:dc:b1:35:1b:0c:fe:61:47:72:ac:3f:0e:a2:f8:07:59:a0:
33:95:1f:0f:72:31:67:b6:c8:7f:4a:53:83:34:da:68:99:87:
72:b0:5b:c4:6d:06:10:89:b9:7a:f6:8d:80:ab:45:64:fc:4a:
b1:37:69:09:43:fc:9d:7c:fa:6c:02:a2:56:52:e9:cc:5f:4d:
9c:a3:cb:be:15:b3:ae:7b:3b:01:96:a5:fb:b2:be:a4:40:ae:
d4:c0:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:42 2025 by rpki-client