Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File: 1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier: XvWfNjw87hbuUUJO6yZQCrq23UMlOxvklHBGzS05VXo=
Subject key identifier: B6:6C:64:02:FF:1D:43:00:FE:84:46:F4:28:4B:E7:41:64:73:E7:1A
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 0194BBCE1A88CB9EC2BADEE95C3AA7400E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number: 0FFB
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: mOILOb3YUOKvVQCl2X5oGgaGdLpFA+78+JECHgD2sk0=)
2: 2D1qbKqg1aMbhujEEzuTNDixF54.roa (hash: FQeWKlzAEoHuli1c0603JOEroZJ5JfkEJLXdkGhgOCw=)
3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1a:88:cb:9e:c2:ba:de:e9:5c:3a:a7:40:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=b66c6402ff1d4300fe8446f4284be7416473e71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:c1:c3:44:f3:14:0a:2b:15:d3:63:1d:d3:
78:0a:ea:cc:8b:6d:7c:ef:d3:10:5c:53:2f:71:68:
73:ad:f4:4f:0a:0e:e2:fb:21:7c:d2:4a:f2:3c:39:
f1:b7:de:be:cd:5b:7e:57:af:0d:af:e8:a1:4e:08:
c3:9d:14:6d:f7:28:92:65:07:95:13:43:48:b0:c2:
a9:52:5a:65:e7:cc:2f:44:e6:e7:97:a6:27:d2:09:
de:3f:e6:ab:78:80:05:78:25:87:3b:24:2f:c5:ca:
ed:bd:07:5c:c8:1c:4b:f9:47:11:33:df:fb:81:09:
5f:3a:19:ad:1f:97:a8:d2:85:65:8e:69:f7:75:bf:
57:96:92:46:be:67:8a:e8:a3:77:0f:08:a1:e7:0f:
ac:d9:a4:f6:46:61:c5:c4:d3:cf:15:c1:ab:18:40:
a4:85:62:20:33:17:3a:46:22:0a:19:3f:ab:35:04:
b9:28:f8:bc:3d:40:87:90:38:9a:f5:c9:b0:66:1f:
fb:b7:eb:25:9f:db:3a:f4:ee:6d:95:a4:d0:df:33:
5e:a7:4c:7a:42:1a:e4:12:d3:25:a4:9a:ee:97:1f:
76:b6:a3:7f:22:ca:1f:f3:f7:f4:57:ee:21:c5:50:
18:0c:df:8f:9d:ca:e9:f3:fb:ea:6c:89:e3:0e:54:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:64:02:FF:1D:43:00:FE:84:46:F4:28:4B:E7:41:64:73:E7:1A
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:88:19:31:2a:98:f5:3d:42:58:67:7a:95:ba:b8:fc:18:d4:
fb:03:e1:48:db:f9:d3:7b:5f:80:c1:71:30:50:73:4a:80:b2:
b5:8d:04:8c:44:d3:b2:dd:ce:fe:18:c5:96:a3:bc:70:05:bc:
7d:d5:6e:74:d9:82:e1:e8:dc:08:74:92:08:4e:f8:c5:64:07:
52:9e:2f:e8:51:50:89:ec:54:ca:5b:28:84:f2:ac:5a:ce:e2:
bd:dc:28:fe:92:fe:e5:6c:a8:68:1f:6d:82:0f:ed:20:1f:fa:
42:2d:cf:74:a9:ac:2b:9c:48:f4:dc:98:0d:87:eb:dd:0b:24:
8c:c6:1c:a3:a8:02:21:3f:42:75:56:4d:90:03:68:9a:f9:12:
d0:9d:c2:1a:7b:97:96:90:48:5b:70:16:be:ff:51:7a:4b:0e:
c7:59:99:76:ac:33:89:bb:90:db:f1:9a:57:15:8c:03:e7:69:
4c:c1:70:e9:0a:26:2c:f7:4d:07:75:bb:20:37:59:83:48:ff:
54:44:23:b5:20:ce:d0:49:3d:2f:98:82:e6:65:01:d0:6c:92:
40:d3:71:9c:04:40:c4:58:88:02:49:fe:f9:7f:3f:ab:b9:d1:
c5:50:56:d6:d8:92:27:7c:27:3a:6e:7e:a9:ec:b3:2d:ad:46:
90:57:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:17 2025 by rpki-client