Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier: S+Jdc00pYyl3E58EU6M+Al+x0LDcxavPJ2zo9+kLijM=
Subject key identifier: 2E:C1:AB:4E:C0:54:2D:5C:AA:15:17:AD:18:7E:18:08:8F:5E:18:31
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 0194BCE085DDF8A4BB3EDC8A4DE2CB1FF4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: pDWw+eobKqeWsZwJTEABIeFQQcKmySiiLurUkmWWgFE=)
2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:dd:f8:a4:bb:3e:dc:8a:4d:e2:cb:1f:f4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=2ec1ab4ec0542d5caa1517ad187e18088f5e1831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:34:3f:5a:a2:23:94:5f:e9:14:2e:fa:2a:
db:84:4c:27:85:da:22:1b:40:59:c3:e5:7e:9b:6f:
a2:44:2c:b1:56:47:72:15:78:03:38:97:67:98:cc:
de:cf:ef:2e:45:d6:6a:1c:86:00:13:39:54:6b:e5:
6f:3a:0b:af:c7:0c:b2:b0:4d:d1:73:39:58:30:39:
c1:bb:2f:ff:9c:8a:3a:e5:6b:ad:6a:b1:c3:1a:c6:
f2:35:45:b4:2d:57:a2:70:f7:39:e2:23:aa:c7:0f:
41:8b:08:a0:12:d7:7d:c2:a6:91:e2:02:71:b5:34:
44:25:c4:cc:8b:e3:10:26:ce:3e:a0:4e:80:82:9b:
e8:1e:9e:7b:05:86:df:6c:d4:86:cc:27:5f:57:4c:
52:b9:39:19:06:8a:ea:e9:7c:c8:a3:31:ee:10:a8:
39:dc:e0:b6:7f:62:2d:83:ed:51:32:c6:58:ed:6c:
d4:9c:e9:5d:9d:e3:e8:9b:9e:60:ca:42:22:f8:44:
ef:7a:f3:54:9e:10:36:ca:3a:de:31:d5:22:9b:5b:
49:a4:d4:f3:c5:61:1c:1a:25:cd:98:fa:09:ca:b2:
f8:bf:b7:a8:37:d6:99:d2:4f:f1:41:f4:fc:17:41:
6a:1b:36:67:a8:b4:2d:1b:78:ef:d7:d0:72:98:90:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:AB:4E:C0:54:2D:5C:AA:15:17:AD:18:7E:18:08:8F:5E:18:31
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:89:54:55:e3:29:14:80:a2:a6:e1:d9:fd:70:b6:77:7c:
1b:e2:45:86:42:13:82:a4:8c:c2:d1:0a:ae:0e:2a:62:e1:58:
96:f7:b3:25:70:3e:c0:33:eb:6d:5d:ad:df:ac:09:98:34:6c:
69:4d:5d:43:2e:bf:65:7f:e7:6a:b3:43:c3:85:4d:9c:3a:d1:
43:c4:ac:35:75:dd:bf:d4:f6:41:a9:98:45:48:52:fc:74:91:
d9:ba:f1:85:3a:95:16:60:75:5b:b0:47:77:66:86:15:2d:0e:
b0:66:c0:03:cf:01:27:72:a4:c5:f2:03:ee:42:22:f5:8b:fe:
84:ff:19:8d:8f:33:3d:f0:4d:1c:c4:df:fb:39:3c:31:9d:ef:
20:cf:ee:c5:13:ec:3c:69:59:5d:c5:25:fb:fa:1b:f4:5f:10:
f8:98:15:81:b0:87:21:68:3c:f1:b7:2f:50:d9:cf:34:61:cf:
70:b2:16:22:03:53:2d:f7:dc:1b:90:b9:28:8c:9c:de:4e:e5:
f7:e2:2c:25:77:d5:0f:8a:78:ef:e3:b2:12:80:d0:17:a1:d8:
d2:67:9c:10:c1:e5:d6:9a:c7:22:21:b6:3c:2b:dc:ff:58:0a:
9a:dc:ce:67:5d:d8:52:7c:a2:54:89:fd:16:1e:26:72:ac:de:
25:5b:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:13 2025 by rpki-client