Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier: Osr5PU8me/m5aoTBTWqO7HOqFU+bh9JSBaQPkBlSRKQ=
Subject key identifier: C9:16:12:0D:41:FB:89:84:7F:9B:59:83:11:B2:FD:2E:C2:77:FC:4D
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 0194BC3BF829E3396FD0FE2631315CBA0577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number: 0B00
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: dnaZLq7YZcMkrJy9Ihx5YcMO7k9/JX1zJU8o439th5k=)
2: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (hash: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f8:29:e3:39:6f:d0:fe:26:31:31:5c:ba:05:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=c916120d41fb89847f9b598311b2fd2ec277fc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:3d:bd:db:82:46:13:5b:13:0a:56:0e:36:
ff:54:7d:08:13:21:a1:13:db:49:13:e1:04:fa:ca:
bc:47:b3:d1:5b:85:3e:3f:c3:91:d8:c3:7f:b3:2b:
b8:50:58:4a:d3:93:ad:86:ab:94:7f:2c:82:86:44:
1f:6f:a2:13:02:80:e9:30:df:18:2e:f8:36:e5:5e:
d2:d2:b0:3e:f7:da:aa:12:c0:12:16:5d:63:4c:dc:
bb:77:b0:76:cf:26:83:94:68:ef:24:c9:de:58:2b:
2b:2a:bf:8f:f1:18:b5:09:45:e6:67:3a:33:ab:c1:
4d:6d:57:55:80:4b:05:74:2a:af:d4:cf:e4:b1:29:
ec:d3:a7:e6:90:fc:6e:46:25:63:55:eb:25:0c:a8:
02:e7:8e:d3:01:6a:05:c2:b8:3b:d0:1c:a4:ee:6b:
9b:ff:62:20:b8:ab:d7:29:dd:0d:11:69:ea:88:0d:
15:cf:d2:54:17:6c:5e:5c:f8:f4:f0:89:72:ff:7a:
92:99:8b:05:9d:e5:73:45:5e:04:ab:8a:0e:f4:d1:
fa:db:45:52:b1:19:48:97:72:bb:bf:46:08:77:87:
1f:84:b9:da:b9:95:08:4b:8d:d8:9d:9f:27:82:c4:
97:74:91:0f:ff:61:01:7f:78:b6:81:a0:2a:d9:9a:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:12:0D:41:FB:89:84:7F:9B:59:83:11:B2:FD:2E:C2:77:FC:4D
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:e3:7a:d3:46:c3:b8:b0:0f:2a:14:ac:64:01:ad:43:dd:
44:d5:ae:ca:01:92:9c:3b:8d:90:2e:be:77:11:25:9c:a2:67:
cc:81:17:8f:15:8b:69:e9:f9:fa:50:e0:19:28:d9:a1:b8:02:
fd:9a:fb:eb:53:4d:fc:96:9f:bb:92:32:4a:53:10:f8:ae:de:
92:11:62:1a:cb:3e:cc:52:56:48:db:db:03:ca:04:76:30:f1:
92:75:d1:36:f4:79:0c:1a:e9:b4:fe:04:19:a7:d8:9b:e6:e8:
ea:d1:a6:97:9d:4b:55:4a:9f:40:33:63:fc:73:3e:f0:f7:df:
8c:ec:9c:bb:21:67:56:77:2a:9c:eb:a6:f6:e4:ba:7c:e4:4f:
73:e5:85:3e:50:cd:65:8e:15:a2:e7:f7:ea:63:fa:b4:23:b8:
50:d6:9e:33:86:c1:58:cb:c8:a4:7b:07:08:4e:ae:97:a0:f6:
bd:4c:b0:82:d9:ce:e3:ee:6b:25:b3:e4:85:33:da:61:5f:1a:
2b:67:ce:94:21:00:c2:a8:8a:c0:ee:5d:4e:53:c2:61:d1:83:
45:4f:8b:8c:8b:46:21:2d:b1:e9:75:e3:86:91:29:95:90:93:
07:93:94:51:10:17:4e:6c:ec:4a:27:8f:49:4e:ed:10:1c:66:
12:ea:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:50 2025 by rpki-client