Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft (raw, json)
Hash identifier: Bhx+AVLVcLf+Jzm9NQWdNpkdIv8BmvZMVNvyswVX1tw=
Subject key identifier: 35:CA:3F:4F:EB:17:F3:4E:3C:2B:3E:E8:46:BE:3F:18:CB:D5:23:EA
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial: 0194BD17F5B1A7D132868D21E48FAD0D6AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl (hash: cjEyOFEYJJLJs49FxC5AJaVBPqZySq0ZtNir7oA0jZI=)
2: rJdrJhQQmpxY59M8JPVpH2s71pI.roa (hash: xxb6VYq/XoyduiRjX57bX/HD20WZN47aVhzULOuwKsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f5:b1:a7:d1:32:86:8d:21:e4:8f:ad:0d:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=35ca3f4feb17f34e3c2b3ee846be3f18cbd523ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:4e:96:80:61:82:1b:8f:ad:47:af:59:3f:
f3:06:b7:ff:0a:27:4e:4f:e8:10:f8:49:56:35:20:
fa:41:b8:fe:00:bd:bb:80:7e:7f:5e:ef:1a:25:a6:
91:ca:c3:01:2a:17:48:f1:a9:64:18:dd:7e:08:13:
e9:1b:ba:dd:38:4c:cb:a2:43:df:51:4f:12:98:4d:
d5:86:99:a1:70:f6:80:9d:0e:25:3c:f7:26:47:a8:
1f:d8:3e:70:28:b9:88:0e:b8:00:47:44:14:d5:27:
95:0d:b0:12:46:68:43:b1:1f:8b:e9:5e:8c:a9:35:
19:5a:4c:dd:a9:49:3f:71:cd:d0:d4:0e:f2:81:96:
a9:d6:58:31:83:d5:d3:c4:05:d9:85:81:3a:d0:02:
66:36:f8:52:e5:c8:0d:7b:ef:83:2e:96:cb:10:ba:
b1:39:11:ff:e8:e6:7a:48:9a:98:fd:8b:b4:cc:f4:
b8:b3:24:7d:84:47:d6:82:d6:3e:74:00:a6:90:a8:
e6:65:96:ae:a7:27:42:1d:43:08:a9:36:ed:22:11:
3e:8d:a8:50:24:b0:42:f3:9d:29:44:4d:a0:8b:64:
4d:70:a0:3a:ff:d8:f0:3f:0f:b8:ff:f8:49:d2:1a:
5a:37:b1:98:a3:f3:30:72:56:8e:c5:96:06:6f:58:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:3F:4F:EB:17:F3:4E:3C:2B:3E:E8:46:BE:3F:18:CB:D5:23:EA
X509v3 Authority Key Identifier:
keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:ab:47:8e:fe:43:01:b9:59:7a:f6:f0:fa:a5:35:c2:83:
9a:c3:63:8d:8b:94:4c:74:d3:b4:3b:48:38:0e:94:08:f1:db:
63:5e:15:71:c1:25:d8:d5:28:0d:e1:bc:08:58:b3:b9:09:dc:
00:f6:18:f7:42:57:6d:7a:d6:10:ba:21:a2:78:24:08:65:cb:
6b:87:53:7d:f3:b3:9a:d3:89:96:6d:4e:ef:f5:3a:5f:ae:e5:
85:f9:b0:db:60:10:68:ce:fc:08:a4:b4:16:07:77:4b:26:1a:
4b:16:b8:11:fc:36:aa:0c:35:0e:05:ac:05:ae:93:c4:f5:ae:
43:9e:79:24:15:1e:ea:61:99:9c:ed:f0:38:41:87:2d:e7:d2:
7f:a3:dc:09:a1:00:cb:0b:5a:ab:3c:b8:18:b1:88:25:f4:cc:
3d:2d:bc:6e:3d:81:44:a2:7e:6e:a5:40:2d:38:92:da:51:15:
5d:3b:de:6b:dd:fe:70:4f:d6:6f:0b:38:8d:d0:e0:e1:0a:e2:
e6:fc:35:e4:59:75:d4:03:7c:94:ff:0d:ce:b0:42:6e:4b:47:
cf:2f:e2:91:ea:43:1c:4e:94:23:1d:5a:60:17:b6:e5:2f:0f:
19:04:94:25:8e:a4:39:d8:a0:19:ae:0a:dc:d3:1c:27:eb:b0:
2a:36:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:53 2025 by rpki-client