Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier: d806kXoY3NtEQyml0xabUIXbgoAnbxSkUO2XlLKOgHI=
Subject key identifier: 2A:69:14:98:87:45:68:38:24:42:0D:8A:8D:52:91:C8:A9:B6:1B:4C
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 0194BC05063A97B191D2B672605FC9D7FBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: 3dYHb6fpm+EUzdDeHLslL2lhJWWmoHA9mBgq6A5QYOo=)
2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:06:3a:97:b1:91:d2:b6:72:60:5f:c9:d7:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=2a6914988745683824420d8a8d5291c8a9b61b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:92:5d:81:8d:5a:c6:1c:1f:28:30:5f:5f:
95:c6:80:61:09:06:4d:db:ae:92:40:40:d2:50:56:
32:ec:22:23:37:fe:06:14:66:8f:14:3e:ba:5b:63:
75:4c:46:f8:52:04:60:87:c1:7f:6d:d1:5f:27:32:
d2:e8:5b:58:3e:73:69:bd:d4:d4:04:ff:67:46:df:
a6:0d:4f:b8:ee:8a:67:f5:f1:72:5e:86:4d:de:25:
cb:89:2a:dc:99:1c:29:cd:d4:f5:a9:1e:53:99:1b:
22:29:52:53:ab:5d:f3:5a:be:1a:33:49:d9:c2:cf:
c7:75:62:68:c5:6a:f6:f2:c8:89:d8:47:e7:38:e4:
1c:3a:d9:97:17:10:30:4d:ad:36:89:46:06:46:a4:
75:e3:92:32:a3:a3:13:e2:0c:56:3d:c9:33:6a:b2:
e1:be:ec:c5:1c:94:c5:9e:ea:7d:d0:53:39:21:88:
56:43:16:c1:3b:e9:48:31:b1:c3:30:1b:e7:4c:cb:
48:da:42:6f:ea:56:ab:27:ab:d9:6c:bf:e7:9e:ec:
60:41:18:a1:04:cd:87:90:89:c3:70:38:42:49:a9:
30:07:63:d0:3a:4d:3b:8f:78:1c:1a:db:25:27:9d:
c2:a4:1e:2e:3b:71:f4:71:12:04:c1:4a:95:7d:c0:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:14:98:87:45:68:38:24:42:0D:8A:8D:52:91:C8:A9:B6:1B:4C
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:56:13:07:a1:31:52:b1:e2:17:d7:da:07:16:1d:21:5a:
8c:5b:07:57:67:91:b8:27:65:55:80:fc:a8:96:82:f6:83:7b:
08:9a:12:eb:ce:0c:4b:83:65:5e:1b:8b:3b:29:ae:0f:3e:47:
e4:d9:9d:f6:6a:d9:76:68:64:9a:6c:31:a6:29:62:93:a6:41:
93:1f:e2:40:e8:50:e6:e3:33:ff:55:48:74:23:e5:04:63:08:
ab:33:3c:85:95:2f:7a:53:3e:02:35:02:98:fe:26:46:c2:f9:
f9:95:41:1d:9b:b8:60:ec:d0:b2:6d:3a:91:f3:3b:49:a4:28:
1c:aa:0d:51:9b:03:f0:c8:0b:dc:99:9b:9a:96:0f:ed:99:84:
99:eb:39:6c:c4:98:3a:c6:c4:44:52:51:49:a2:38:2a:7a:b4:
10:af:6e:fe:07:ae:06:fc:b9:8e:54:50:fc:d8:68:4d:91:a5:
60:ab:94:74:9f:9a:43:cd:92:7a:c9:e9:ce:41:c8:50:e0:e4:
09:15:c4:fd:ea:3f:c2:b3:2b:fc:b9:c0:14:41:2b:90:85:b7:
d4:a4:19:bd:25:b8:80:c9:fe:7e:23:7d:8f:b5:63:52:c3:bb:
4c:32:6d:f4:1f:29:a8:00:9a:fe:1f:63:54:c3:32:c7:e1:48:
d0:e1:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:23 2025 by rpki-client