Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
File: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json)
Hash identifier: fFXxEYgYWzhBycPAf8TW3qPEeaT/xNf1RnG/wMmpxKc=
Subject key identifier: 41:AF:B5:AA:91:A8:A9:7C:FB:56:50:37:12:E3:1A:AD:3E:11:6E:5F
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Certificate issuer: /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial: 0194BD85935565ACE8CAAEF0FC16F72ACFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
Manifest number: 0876
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: EDbGf035bLAC8RzwOaRasKMVkeUqu7M8LwD4f1yrgzA=)
2: ysfFdWNe3c5fhmJm7HG2F6bIZWk.roa (hash: kYAKmFDZnKlOhN9pBmJ9NvU/vERSiEHA+J66ixThxDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:93:55:65:ac:e8:ca:ae:f0:fc:16:f7:2a:cf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=41afb5aa91a8a97cfb56503712e31aad3e116e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7f:ba:6b:09:29:56:42:c2:26:45:aa:d8:b0:
6e:3f:b1:1d:f3:5c:aa:25:4e:e1:5a:29:49:fe:5b:
64:09:bc:4e:8d:65:b8:57:51:da:e1:57:3d:22:fa:
14:8d:0c:52:5a:53:e5:8b:ba:e0:bd:cc:84:4d:e4:
8e:f9:a1:5c:6f:6a:d0:5e:4c:83:d4:98:64:aa:5b:
06:c9:90:b8:44:25:f8:d1:99:ab:0d:7b:7e:7a:c3:
63:82:c2:11:19:35:4f:86:f7:fe:4f:d8:94:52:3d:
67:2c:32:c4:61:57:fb:b1:ea:86:2c:29:44:b0:45:
87:a0:74:0b:57:c5:7a:9a:0c:f1:83:98:b3:66:63:
a1:8c:58:9d:b2:bc:f7:79:62:5e:22:3e:d0:e5:f1:
ff:5f:3b:38:fd:38:85:a8:ed:7c:4c:ba:84:db:c9:
0c:3d:34:cf:a6:9a:14:aa:18:5a:cb:a0:26:e8:88:
6c:f3:e9:05:35:21:c1:c1:fe:29:af:d4:33:af:04:
9f:9a:64:56:a0:ad:6e:0a:a9:66:ee:8d:23:88:9b:
7e:47:9b:5b:17:8d:43:9f:aa:e3:11:4d:38:3f:14:
d9:44:0a:c1:e9:15:30:01:c6:3f:07:93:09:57:24:
79:61:44:ac:33:a4:99:57:a5:d5:20:76:d6:fd:43:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:B5:AA:91:A8:A9:7C:FB:56:50:37:12:E3:1A:AD:3E:11:6E:5F
X509v3 Authority Key Identifier:
keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:91:37:00:94:12:0c:d6:db:50:31:1b:64:ed:8a:42:29:9f:
40:4c:bd:b7:7b:76:46:31:ad:87:bd:b2:e3:cf:35:f9:b2:5f:
3c:1c:2e:b3:53:74:87:67:aa:cc:95:41:db:e1:de:a8:14:e5:
52:de:82:2b:f5:cd:13:5c:67:6d:b1:24:1b:89:a2:10:38:d9:
27:00:0e:0a:e5:96:73:76:54:79:70:32:3d:3f:9a:e9:e3:97:
70:36:b3:27:0d:d6:0b:97:44:6c:52:cf:4c:aa:b0:1a:e1:d7:
25:b3:bd:f4:15:a6:5e:e7:6e:87:23:6c:49:67:32:32:3e:17:
06:11:25:5d:03:2c:9e:ae:65:92:04:27:66:d8:d0:d0:75:00:
60:f4:87:01:89:00:a1:f8:1b:42:d9:d7:66:d7:cb:9e:85:1f:
66:22:75:98:25:65:79:bf:27:29:02:02:c2:03:01:d1:a6:ff:
1e:63:1f:19:a2:9a:98:bf:4f:b8:e5:22:13:ec:80:52:52:ec:
77:92:22:c8:f0:c4:be:ea:1b:10:93:93:61:47:b2:2a:eb:95:
5d:85:af:85:32:a2:a8:be:b7:dc:0b:15:1a:ca:e6:d8:b7:9e:
ae:25:be:b4:26:78:a9:e6:0a:41:67:44:08:13:85:65:62:8d:
f8:ee:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:04 2025 by rpki-client