Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: 8RnsunS3tRtJsTN/kTM2ZmMv/Q7aNi+Rc/FZx7llJO4=
Subject key identifier: DC:CE:41:D2:FD:0C:4B:E3:8B:D0:62:DA:CA:86:72:C9:30:2C:03:9E
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 0194BBCEAF83C07DDE229628B903CC49DB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 0561
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: DU6tvjPY1gArddA/RfPFQF3hakmZhvWRIMJs4GowALI=)
2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:83:c0:7d:de:22:96:28:b9:03:cc:49:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=dcce41d2fd0c4be38bd062daca8672c9302c039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:1f:c0:90:26:0d:f9:89:1c:fc:2c:0b:20:
46:18:85:2d:e0:38:3d:12:2c:15:d7:ff:d0:f2:65:
c3:a6:c7:64:1e:47:bb:b3:ac:c5:ca:85:79:32:c9:
a4:23:78:f3:65:51:27:f8:34:1f:a5:e9:f4:7a:4e:
58:89:aa:75:3c:59:0d:61:c0:97:ef:6f:2a:a7:69:
4f:0f:86:9e:00:7b:63:6a:9a:8d:14:64:57:7f:e6:
9b:ea:2d:88:46:12:75:a9:1e:f0:ed:9a:9a:7d:50:
03:8c:c8:f8:47:db:92:6b:fa:56:41:b2:44:8f:4b:
48:fc:79:b3:38:90:ff:f4:91:60:4c:d6:8a:d5:2e:
ed:de:67:e3:8e:05:db:35:33:c0:74:b4:a7:a9:d3:
a9:cf:45:80:69:47:83:7e:8d:97:0b:29:30:e1:f1:
41:4e:e1:7c:b9:c2:fb:49:96:3c:85:b3:97:df:67:
64:9c:39:bf:85:8c:7c:76:5b:88:22:77:77:8d:a0:
97:2e:66:52:6c:9f:2c:4b:24:d9:b3:86:c6:d1:32:
83:bb:dd:44:5b:a9:02:9c:86:34:d9:7f:cb:71:70:
4c:67:07:bd:d1:e2:a0:e2:3e:9c:f7:f4:d0:1b:e7:
d2:ad:a6:91:fd:b8:81:df:23:cc:89:15:47:e1:77:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:41:D2:FD:0C:4B:E3:8B:D0:62:DA:CA:86:72:C9:30:2C:03:9E
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0c:a7:11:89:ce:f1:a7:6d:84:87:20:80:b6:72:28:09:4d:
23:d7:7e:d1:8a:dd:18:fb:d2:fd:3e:5e:04:90:fb:b2:60:7f:
a0:8f:e4:71:6e:22:92:b5:79:3c:bb:fe:6a:b2:68:01:65:c0:
91:a6:91:bc:5c:7d:a7:b0:8c:10:0a:ba:9f:b4:e3:0d:7f:0a:
38:4b:9a:9d:57:70:c7:7c:5a:c1:c1:a6:eb:0c:57:07:fd:11:
cc:14:83:94:18:d6:67:3a:82:58:5d:1b:97:77:50:f9:ee:b1:
fd:13:81:17:78:63:f3:b8:2a:ff:b3:73:77:d6:23:3c:a3:86:
b4:b1:f8:d3:35:89:6e:ac:a3:b5:0c:af:c9:5b:00:ce:3e:42:
02:ee:6a:20:3a:24:4d:fa:e3:11:0d:57:fb:fa:9b:22:16:cc:
06:53:e7:d3:e7:51:aa:16:86:21:63:b2:e5:13:2f:60:9f:65:
a7:86:88:51:e3:99:d9:d7:d8:aa:cc:99:cd:4a:fe:27:7a:38:
85:e6:f8:f9:ee:fa:40:7e:53:f4:15:db:b3:ef:e8:bb:47:36:
50:bc:3a:d8:88:41:9e:09:4a:68:e2:62:4b:b9:10:a3:a1:a1:
99:81:7c:a4:c5:a5:e8:6e:13:14:fb:7a:f7:41:34:44:02:77:
21:44:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:30 2025 by rpki-client