Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: N+tHXYQ/FBNbj/++lvrhUIqrZpghAwJPRsSgsi4toEM=
Subject key identifier: 5A:C0:7C:71:8C:9B:2F:EF:D8:89:CC:BC:57:65:57:25:36:AE:1C:E8
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 0194BC3C7D8D50A8ECEBFE5DA7A756976DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: w1gDcfo1peCsbg+sGhEfmXwDoXaOp4hwI9MFQc+6evk=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7d:8d:50:a8:ec:eb:fe:5d:a7:a7:56:97:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=5ac07c718c9b2fefd889ccbc5765572536ae1ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:1c:8e:3e:d2:4a:36:5b:e3:4c:42:71:f9:
91:37:8a:a1:10:01:2d:72:c3:76:ca:77:b7:cb:ae:
29:9b:99:0a:bb:15:9f:da:15:c2:f0:4a:36:e5:37:
ea:96:d3:ca:03:1c:d8:39:4d:16:74:c7:98:48:97:
c6:2b:5e:de:a8:00:f7:15:99:07:6d:a9:60:10:4a:
93:9b:80:a5:c2:84:3f:4e:47:a6:b7:1c:ed:11:56:
64:fc:a3:04:4c:c0:63:a6:fc:7c:14:f2:db:12:c9:
88:3a:6f:ba:1c:09:f4:3c:62:d6:9e:cd:eb:b2:b8:
e5:b6:ee:56:e5:73:fe:ab:ae:fb:40:18:c6:ac:26:
e6:1c:ad:f8:e0:34:12:2b:e0:2c:1d:da:ea:ad:d2:
96:97:93:dc:50:ba:fd:3e:9e:07:6e:65:33:bd:b8:
93:4d:cb:bb:81:f8:d0:6a:4d:62:9a:c9:ce:23:60:
31:ec:95:af:89:7c:8e:6d:56:36:3b:e7:cd:1b:8b:
8a:89:27:d4:2e:f6:a4:e6:9c:e8:78:dc:3c:fc:51:
25:ab:35:26:ed:80:f0:88:c7:31:2d:bb:f7:94:b2:
9b:05:c3:42:8f:4d:45:66:eb:55:05:2d:0f:9a:af:
5c:80:8b:ed:fc:dc:29:83:6f:06:00:fb:c8:28:6c:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C0:7C:71:8C:9B:2F:EF:D8:89:CC:BC:57:65:57:25:36:AE:1C:E8
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d2:3c:b4:3f:8d:c7:6d:52:f1:29:f2:5a:6b:dd:30:55:9c:
75:b5:48:13:21:cb:64:a3:f3:4e:73:ab:b1:9e:dc:eb:aa:c9:
e5:dd:ef:f8:3e:74:62:c9:63:06:fa:24:7f:be:62:5a:f7:46:
d8:93:5c:06:f0:ae:9c:5d:7b:81:8b:54:2f:13:d8:c7:68:56:
0b:af:f5:e8:27:bb:d4:0a:33:8a:af:82:9c:e0:0d:00:9c:12:
19:38:f5:14:55:01:83:fe:ba:9d:ba:53:ae:80:35:53:8e:ff:
88:2e:4c:8f:fc:d8:c6:50:f8:0c:e5:53:26:e0:0e:0b:d3:4d:
57:b6:76:e4:72:71:f4:40:f6:01:f1:3d:3a:20:85:16:d6:49:
34:a8:51:55:96:77:a3:a3:25:09:d9:9a:c0:ae:9a:28:3f:86:
6f:f4:32:aa:b4:0a:37:53:1c:b4:52:b8:8e:0e:35:60:9a:bd:
77:30:37:e2:d1:a5:36:19:53:a3:a3:cf:64:81:dd:d0:cc:32:
8b:5a:a7:e9:f5:85:93:9a:40:90:db:8b:f5:7a:70:60:ea:5d:
2d:b2:5f:7f:2e:db:36:91:46:95:bb:4e:f8:32:ae:78:11:db:
4f:6b:18:e6:6c:68:6c:99:23:2e:d6:cb:88:aa:b5:c4:b7:2a:
4c:a7:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:56 2025 by rpki-client