Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: jb7geU/nDG76EYWkn4PkNkeGexZ3LVaCDlSWlY4pMnI=
Subject key identifier: 0B:64:4D:32:E7:4D:F4:76:50:49:AE:66:55:B7:B3:F6:D6:14:09:38
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 0194BBCE5F3EEC3CB7A8515669F8578741B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: Jn/9pjhPEA9VFH0SBOO9mSMW+CDRdjW6bpgjXl7O8A8=)
2: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (hash: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=)
3: wfH5z_Bg4z7tHe6fq0H-30TIL34.roa (hash: VmP56mLP1KsPx5GBmYqlZvdPkuhp1r337TX7Q50d+Qg=)
4: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (hash: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:3e:ec:3c:b7:a8:51:56:69:f8:57:87:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=0b644d32e74df4765049ae6655b7b3f6d6140938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:b5:e2:d9:53:4a:bb:31:33:d4:08:dd:1c:
28:26:28:84:d0:2d:44:b1:ed:04:4c:4e:24:48:1d:
6e:b6:54:b4:38:0c:22:cd:76:89:ad:d5:9d:b9:57:
c4:4d:9d:b2:bf:d9:9d:dc:e6:45:c6:d3:c8:1c:b7:
a0:fc:a6:6e:f4:b2:cd:d1:0b:84:6c:22:b2:33:03:
4d:07:b7:40:03:51:88:17:1a:5e:41:73:78:7e:e5:
d4:6a:7a:87:a3:5a:82:ae:be:28:c5:9a:f6:37:9a:
8e:50:99:d4:02:fd:1a:93:42:33:c9:75:c0:6c:ba:
c5:78:00:98:90:df:93:28:f6:6d:fb:f8:fa:0c:29:
ed:fe:58:ad:e2:5e:58:34:93:66:79:be:aa:80:02:
6a:72:85:ea:9f:4b:6b:25:f0:3b:c3:a0:53:15:0c:
a5:fb:2c:11:ee:61:73:99:76:a0:41:ed:7e:37:ac:
d7:74:a8:d7:a0:6d:f6:a6:2c:9c:b5:8d:9a:3e:ae:
8d:d8:b2:6b:1b:ed:67:6f:26:26:dd:6f:39:48:f2:
7d:f3:38:47:f6:80:36:63:c7:95:5e:ff:53:a8:03:
b5:5a:66:7d:23:5f:af:fd:66:f4:93:e7:d0:c8:ba:
16:50:ec:73:1a:d9:05:24:7d:4f:41:66:b9:60:76:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:4D:32:E7:4D:F4:76:50:49:AE:66:55:B7:B3:F6:D6:14:09:38
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:44:9d:b4:65:43:71:2f:c9:98:ff:25:c4:da:b8:e4:00:3f:
ee:a4:a1:36:97:12:ad:39:3c:34:c5:53:b4:54:63:db:3f:b8:
6f:1e:85:65:b9:38:10:33:66:c8:80:73:c0:0a:4e:28:ab:2a:
ff:32:85:30:bf:56:85:ac:5a:cb:19:f1:e4:9e:05:b5:64:18:
20:15:cd:c6:cb:8a:ba:a9:fd:d4:af:ee:73:47:b7:52:64:ba:
fb:2b:0b:fc:d3:c8:af:7d:f4:b6:8d:ca:32:a7:75:db:55:17:
3f:c9:06:ac:35:b3:4d:bc:85:e5:46:26:01:52:e5:01:62:a4:
30:65:77:1b:62:8b:dd:9b:f8:db:77:d8:c5:d5:13:8c:37:19:
88:8e:fe:75:09:c0:07:02:1a:e5:59:98:97:0c:c1:25:7a:3c:
35:46:0d:c6:25:76:69:e0:ee:2d:b5:69:ef:a0:35:78:dd:cc:
ba:22:de:22:04:e8:c2:48:70:71:6b:95:b5:ce:a7:14:d0:21:
b6:78:33:44:61:1a:96:2b:9f:7a:d3:a8:3f:50:62:11:1f:72:
c6:8f:6a:9a:cf:6e:43:12:82:3e:b3:59:7e:58:c0:11:ce:6c:
8e:03:52:35:83:6f:28:17:91:b5:bd:04:bf:58:ed:16:a3:a3:
99:6c:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:19 2025 by rpki-client