Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: dmWufrMIaz+6+ovQ0cCMJiB79D9DuEPAIEYIR63nz6g=
Subject key identifier: 17:AE:F0:91:85:D1:D8:26:DB:EB:9F:E2:EC:A8:1F:D3:91:C3:D9:E3
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 0194BCAA358012D40440C8BAA0A5048A1569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 01B1
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: KmnxLby5HrWxNrqgprlRuK1sBAMTCAuiEzQeMcSpA/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:35:80:12:d4:04:40:c8:ba:a0:a5:04:8a:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=17aef09185d1d826dbeb9fe2eca81fd391c3d9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:27:63:a7:c2:38:24:cd:a1:0f:0e:65:18:e2:
19:bf:fa:16:e4:ac:ec:84:b4:8c:b7:40:e1:70:36:
3b:b7:18:74:6a:f6:fa:4e:5d:da:7a:3d:9e:06:59:
ea:07:c5:ef:73:88:b6:c0:d4:6a:78:c7:34:45:0f:
b1:0f:9b:72:14:bc:6a:62:a6:d9:5c:f3:46:09:81:
de:58:44:db:cc:bf:f0:f1:f2:e8:06:52:6f:f5:23:
cd:ec:e5:f7:14:c0:98:32:81:da:38:df:8a:e6:38:
ac:23:d1:96:96:83:41:47:08:c4:23:2c:7d:78:1a:
87:9d:80:67:bf:bc:84:3a:7e:7d:94:38:8c:1e:d2:
83:02:e1:f7:e8:57:7f:73:dc:b3:30:43:4b:de:a7:
eb:f5:20:03:da:fe:dc:c3:f2:7e:76:fb:01:15:2e:
80:fb:0a:15:44:83:41:42:11:9b:e9:1f:37:18:8b:
53:e9:40:7e:44:74:3f:17:bd:e5:21:c4:ac:55:52:
8f:ee:ca:f0:f4:41:d5:85:d0:4d:3d:9e:f0:4a:39:
ac:e0:30:6d:96:ad:0d:f9:fe:87:43:5b:e0:56:9b:
1d:38:af:f6:36:27:f3:e7:10:1c:69:6a:9b:f2:80:
00:11:12:31:7d:31:74:0c:b6:41:5e:a9:f5:77:ca:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:F0:91:85:D1:D8:26:DB:EB:9F:E2:EC:A8:1F:D3:91:C3:D9:E3
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:eb:4d:93:23:50:91:fc:2d:36:b5:c7:ac:33:c1:34:e7:00:
9a:f2:d1:3b:3e:57:67:d7:66:e5:24:35:c1:69:81:19:55:f7:
63:1f:a1:74:57:c4:d6:3e:a6:7b:5e:02:e9:c6:71:d6:77:91:
69:41:08:6e:3d:fb:c7:c6:d5:37:b0:e8:e2:05:c3:92:be:35:
a3:b2:6a:44:60:bb:bc:ac:24:d2:0c:8f:b4:7a:3c:b4:da:44:
80:2c:0a:58:2f:5b:70:e1:fd:2d:c1:d2:64:e7:ed:86:3d:94:
a2:18:b7:b7:e5:6a:59:ca:19:b2:ca:b6:1a:22:64:27:32:00:
59:d1:c0:02:e8:6f:df:ee:f2:b0:88:8e:f5:fd:6c:26:cd:4f:
d0:a0:d3:31:5e:f3:29:82:bc:50:a2:e4:2d:3e:6b:b5:af:42:
a4:88:85:f5:32:65:af:61:de:42:92:c5:2d:78:a1:70:92:22:
92:98:6b:29:e6:ed:53:aa:47:1d:de:be:85:32:c4:c6:67:d4:
d3:22:ac:14:2d:29:52:21:b0:ec:d0:c7:1b:1a:57:da:89:52:
07:53:54:4a:b5:7a:d0:9e:eb:78:1d:7d:a0:7c:93:03:7b:a9:
4b:1d:86:63:24:1e:44:46:42:ba:0d:ac:a4:d4:ee:96:3b:01:
73:a4:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:26 2025 by rpki-client