Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: aoPlGE8JjxcXqRW75b8+TEqyFiaU8DXLl1/7SMq/sWM=
Subject key identifier: 1A:87:23:76:A4:B9:82:CB:5F:E8:BB:11:5C:C6:FB:62:33:5E:2E:3F
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 0194BD179BCC34CF612A1820E35EC78F2E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 0DCD
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: v3JhEpDoTIm8HUkjDSsWueL4o+YXwcAy6Wr3oSUut6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9b:cc:34:cf:61:2a:18:20:e3:5e:c7:8f:2e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=1a872376a4b982cb5fe8bb115cc6fb62335e2e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:87:a4:d5:5b:3b:c2:d0:eb:d4:5a:d6:40:
19:14:44:ea:e0:71:70:4e:50:79:5b:e7:39:0c:d9:
e8:d4:e5:83:d7:46:25:12:f7:17:73:1d:9d:0a:95:
fe:4d:61:c9:87:82:00:5b:ba:42:be:46:ed:be:e4:
80:ad:05:36:33:d1:78:c8:9d:ca:b9:b9:85:79:4a:
dd:95:08:66:80:a1:7f:d4:c1:68:7e:77:68:e6:e9:
5d:9b:0e:0e:51:8c:08:94:25:10:1e:fc:3b:4c:e8:
a3:db:c7:1b:78:8c:42:48:06:aa:be:c7:cf:c0:45:
5f:7b:69:ea:ab:8b:49:52:e8:20:1d:db:90:83:7f:
18:6f:c2:46:9a:71:fb:4d:6f:cd:65:39:66:3d:3b:
72:02:be:53:4a:55:74:66:96:d1:d8:52:d3:a2:cc:
01:0d:ac:f0:92:4d:94:df:21:35:f8:60:26:dd:df:
54:92:25:c5:7a:fd:32:ac:33:b4:21:d8:33:6c:5a:
cf:9d:08:c5:f5:be:28:61:51:9e:69:ff:19:79:82:
14:49:9f:f0:e0:d1:4b:f4:68:d0:8b:9f:b3:08:9c:
aa:9a:6d:16:49:02:7b:70:e4:56:b5:c9:4c:6a:86:
bc:84:b5:82:f3:38:c2:cc:9a:34:46:98:46:db:cf:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:87:23:76:A4:B9:82:CB:5F:E8:BB:11:5C:C6:FB:62:33:5E:2E:3F
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fb:dc:fa:9f:b6:b4:09:cc:4d:dd:d6:58:35:37:49:e6:2b:
0d:e0:97:4b:0b:d3:68:97:3a:be:c6:67:63:9a:1f:99:d2:bc:
c2:88:0b:1b:31:07:bd:b8:4b:ca:43:7e:75:28:4d:c5:3d:15:
16:d0:20:f7:07:62:de:f7:0a:db:99:92:6d:d4:8b:75:0e:c6:
13:03:35:49:2f:6f:f3:11:19:1a:4d:6f:f7:92:a6:33:5a:13:
48:37:a8:c9:a9:3a:13:78:5c:ea:5a:d9:25:b4:ae:d7:22:0b:
7b:48:73:a1:d2:3a:d2:4b:80:40:1e:3e:b7:c3:10:88:6d:89:
96:9a:b0:49:01:0c:6f:e9:75:d1:ba:ca:5d:6d:7b:5a:08:05:
08:4b:be:5c:e4:e2:b1:99:26:1d:e6:aa:60:8e:9b:d8:a0:81:
90:c9:e6:c2:22:35:a8:b8:85:47:b8:57:cc:10:fd:53:01:ee:
f3:e4:b7:a0:a5:4d:e4:3f:d3:82:35:5c:47:97:8c:af:ae:7d:
14:81:bb:2e:8d:e5:12:db:a1:c3:c7:8e:34:1e:9b:58:15:e5:
87:49:8f:92:32:14:5e:f7:22:55:e8:8d:50:c1:35:f4:6f:e9:
2b:ec:30:55:42:92:1e:d7:a7:e8:f4:9f:ed:95:44:ba:b2:2b:
69:cd:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:14 2025 by rpki-client