Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: Hn9ZF1VmuqHK2s02sAgBAqPwoZe8t97mC4zp24mrQTU=
Subject key identifier: 1A:00:BF:30:02:89:1A:28:D3:3C:5C:87:C5:D5:EE:87:33:65:69:FA
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 0194BC3BE513142F6AABCFABFE49B0D45A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0E0F
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: mBRmZLx7tOszAlS9+dk6OoZ605SWBhByKeQFPyLpsyQ=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e5:13:14:2f:6a:ab:cf:ab:fe:49:b0:d4:5a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=1a00bf3002891a28d33c5c87c5d5ee87336569fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:db:63:0c:e5:d0:87:36:78:9d:7f:73:a0:
6b:78:0f:ff:cb:ac:f0:22:d3:0a:21:a0:8a:64:d8:
a9:86:13:c3:4a:24:55:32:86:d8:f3:15:b7:3f:1d:
89:39:47:ba:68:d5:66:0a:82:22:a7:66:11:e7:39:
13:e5:c1:9d:06:d8:c0:71:bd:20:53:e5:78:40:e0:
a0:ba:36:ea:9e:98:05:89:58:4b:f6:40:41:4c:74:
a3:0a:1c:4d:c5:ad:d8:2f:7d:42:b7:4c:ef:c5:ae:
fe:65:6b:1e:33:ed:0a:d7:76:06:38:a3:42:4b:8a:
07:e3:1b:ff:19:6b:bb:b8:0e:d1:92:26:da:5f:75:
13:16:5f:11:58:1f:e8:64:47:0b:e3:3e:f0:9d:44:
a9:68:6d:9f:f7:f3:13:b1:5f:76:b3:35:11:a0:0e:
cc:7d:ad:6f:18:63:e1:87:03:44:a1:1e:32:51:03:
2d:59:1a:0f:30:f7:d2:02:26:4a:36:22:f4:54:cc:
c9:bf:af:4d:23:60:62:8d:e2:ce:79:a4:9e:4d:2d:
54:cd:8a:94:75:85:5f:2a:e3:26:9b:fd:f5:f1:be:
22:a9:42:f3:d2:f0:84:cd:53:25:c3:4a:22:ff:1c:
2e:38:ba:15:3a:f5:d3:eb:7e:d3:f2:aa:63:19:db:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:00:BF:30:02:89:1A:28:D3:3C:5C:87:C5:D5:EE:87:33:65:69:FA
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:81:e0:6c:ce:0c:aa:c7:15:13:17:3c:1d:2b:a8:66:d0:25:
98:9e:8f:e7:3f:ea:aa:19:2b:44:c0:6d:a7:5f:fa:3f:18:a0:
ac:c7:48:55:c2:db:e5:1a:eb:24:5b:34:f9:eb:e0:63:42:78:
c5:b1:58:9b:21:b1:f2:e4:da:95:a5:51:3b:f7:a4:9d:8d:a9:
a2:cb:43:94:0c:86:54:9e:88:1b:cb:4d:6d:8c:9c:90:fd:49:
a5:8c:8b:38:2f:95:cd:42:cf:7f:fe:ef:9a:0b:13:4b:8d:25:
67:ca:ee:8e:f5:69:85:7c:35:56:ae:7e:52:57:19:14:f2:ae:
bd:cb:13:b2:66:ae:65:01:f2:0e:44:6e:2c:47:61:fd:fa:48:
88:d7:a5:04:fe:a6:59:be:d2:bc:bc:e7:fa:4c:89:98:3b:c2:
b4:22:08:f4:e2:66:94:9a:9e:92:1e:20:22:74:55:c6:82:35:
12:8f:ac:cf:8f:9c:6d:43:e2:54:16:7a:d9:af:2e:ad:fd:f5:
bd:a5:b1:e9:1d:2f:5f:eb:f6:99:60:3e:f6:ae:1a:77:54:88:
55:22:b3:15:c5:9e:da:50:6a:b5:14:70:f3:da:96:36:5e:f7:
17:02:2e:c2:e9:ec:3a:20:72:96:fc:e5:d9:dd:e5:7d:26:fc:
2e:d2:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:57 2025 by rpki-client