Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier: YGyu5kAxwSJl7KiXyzbiWz996BfyqyXbOE0k4RA7TTg=
Subject key identifier: 49:70:BC:42:98:B7:42:DD:73:97:5E:F4:13:FD:75:6E:E3:A5:FF:D9
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 0194BCA9F07A6429DFBC4C8737A14149F3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number: 0D19
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: qv4kjn2V9se4MAccM7gbRDde0ESe4OcpmklgUV/DvsE=)
2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f0:7a:64:29:df:bc:4c:87:37:a1:41:49:f3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=4970bc4298b742dd73975ef413fd756ee3a5ffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:ea:63:14:a4:e2:be:cf:68:73:26:9c:fe:
62:2c:25:35:e5:56:8d:88:39:d3:ba:94:bb:6f:98:
60:8d:56:1e:b8:ca:05:35:88:23:53:c4:cd:c5:41:
c7:4a:8e:ea:d4:67:8b:b2:77:38:eb:c8:f5:7f:6a:
88:45:19:69:4b:4b:a8:e6:77:e1:01:44:0d:72:96:
fc:15:4f:ea:2e:fa:44:f4:03:e4:71:8e:f1:b5:3c:
ee:58:f1:bd:72:89:5e:5e:8d:20:4b:85:28:f5:4b:
5d:72:37:cc:4e:f6:bc:0a:b6:87:b2:fc:6a:25:7b:
b4:fb:01:4b:f1:7e:4f:3b:05:0c:82:8a:f4:64:91:
da:c2:90:9b:55:44:fc:dc:a1:3c:ca:f2:62:2c:ea:
56:e6:a3:e1:bf:81:fc:11:32:90:d1:b9:ef:35:cc:
c5:d1:d3:3b:ca:bf:83:4b:f9:34:79:ec:2c:2a:c8:
9b:11:67:3d:7d:b9:69:8e:06:0b:41:11:c3:7e:32:
bb:ff:35:11:96:04:02:04:d7:0e:f4:56:af:8d:68:
25:32:eb:dc:ca:17:e5:14:9f:93:b7:ac:06:47:c6:
7e:5a:98:a2:66:62:1e:99:4b:a2:f6:66:e4:c0:00:
65:35:86:e0:b7:42:30:92:f1:38:c5:d3:0a:01:e5:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:BC:42:98:B7:42:DD:73:97:5E:F4:13:FD:75:6E:E3:A5:FF:D9
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:db:04:3c:fa:7d:60:db:de:84:2b:49:8f:b9:2f:33:ba:3a:
ec:56:5a:63:78:42:44:4d:7d:d6:b3:59:c2:43:9d:9a:03:a1:
fc:6c:4f:2a:62:76:bf:2d:38:98:6e:88:d7:9c:29:c0:0b:fe:
14:7d:30:84:fb:39:90:c4:ea:52:3b:e0:db:db:f2:e4:2a:ab:
5b:84:5e:61:29:48:c3:eb:b1:05:85:cb:dc:4d:a3:d5:ac:3f:
55:21:86:80:7e:da:92:18:20:c9:28:a5:2f:d1:13:9a:ad:60:
d2:53:85:cf:56:8d:00:52:21:f1:c4:b8:f6:9e:19:41:8d:d7:
1b:8c:bb:dc:4a:88:ff:23:33:8a:8f:7d:09:aa:87:f1:18:da:
10:0c:58:03:3e:12:7f:2c:8b:ec:14:f2:74:89:54:4b:09:3f:
a4:33:3f:1d:86:85:99:20:16:ad:55:26:94:81:ef:98:3e:b2:
c2:d8:d5:00:e0:77:84:59:0b:86:2a:52:6f:b6:4d:3d:5a:91:
16:20:a9:31:77:7d:60:82:cd:36:65:e7:d4:b7:da:d6:15:b5:
76:6a:43:d4:0d:19:5f:9c:ed:d5:22:b9:d8:e5:95:32:be:38:
f6:49:fd:a5:c6:54:10:a3:73:58:01:81:4a:41:7e:7a:b8:80:
69:ea:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:29 2025 by rpki-client