Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: Lb/YbmxIuyfF9qINS8WFjh48yCFd2Ws+3pHGgMegQhM=
Subject key identifier: C5:B1:FC:07:E8:AE:1B:F7:CA:D2:9C:8E:02:72:0F:CD:83:15:E9:02
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 0194BCA9CE059C2D4AB2CFE608F291CD4D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: VAXHBefrbimA6PdXs79oIbqNpE0KBrP5NvtAYOcdunY=)
2: HUiYQLYoRn-P8-AKIUmGnSk_fUQ.roa (hash: ozdi5qHnRcow/nH1EVH0214AE7vAhAxmdAJcuT+IzE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ce:05:9c:2d:4a:b2:cf:e6:08:f2:91:cd:4d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=c5b1fc07e8ae1bf7cad29c8e02720fcd8315e902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:12:00:76:43:ce:ae:3b:b3:e3:6b:4a:8a:
0b:8d:4b:b3:15:bc:54:fd:b4:43:f9:4b:35:0e:45:
70:ec:e4:74:80:a5:19:ca:f9:4d:52:a4:3f:02:57:
c2:a5:78:f0:b2:42:71:09:9e:94:0f:d0:f0:60:40:
b5:90:4a:5a:5e:9f:31:e0:d2:57:4f:6c:4b:19:92:
a7:bf:62:14:b8:6e:08:7d:35:7c:2e:69:fd:b8:01:
d0:15:f8:cc:87:08:a5:2f:e2:bc:70:86:ff:b8:fb:
ba:e6:98:ad:2c:57:34:e1:4e:28:7f:42:c5:47:48:
1a:96:6c:91:c5:84:33:09:50:df:49:bc:76:ed:68:
f1:02:3e:a9:87:b6:ba:88:6b:65:dd:c6:58:6a:b0:
89:99:33:e1:4a:f1:69:9a:77:bc:ed:50:1b:77:2e:
c3:7a:90:b8:b3:80:79:d3:f9:2e:50:50:27:3d:d6:
6b:58:6c:ed:72:a3:b9:8c:2a:a7:9f:29:f2:98:70:
bc:af:f6:6a:b9:ee:fb:fb:ba:97:ce:73:44:f6:1c:
ec:dc:16:43:5d:ca:46:a4:e2:6a:e0:39:9b:5c:1a:
19:41:96:b9:d3:fa:d7:2f:4a:3e:e7:4a:f4:1a:a6:
9e:68:d2:c8:14:c3:4d:eb:18:f7:b5:fe:c6:35:47:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:FC:07:E8:AE:1B:F7:CA:D2:9C:8E:02:72:0F:CD:83:15:E9:02
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:96:12:a1:14:d9:2e:7f:67:83:a0:c9:b4:b4:da:a9:f2:10:
20:49:f2:c2:53:25:e4:3f:34:a9:7a:a0:9b:2d:6b:5f:1b:5a:
ee:19:98:90:f4:01:6c:8a:7c:a8:09:a5:d5:b2:61:59:4a:f1:
98:19:c5:86:d7:8d:ef:b0:a0:f9:bf:b8:f6:fd:6d:76:b2:59:
b0:ed:15:af:71:d3:97:a1:1a:8c:97:95:13:2f:ee:1b:77:d8:
a3:a1:07:5c:01:b6:f1:21:8d:e9:09:a8:2c:60:e3:c1:d3:20:
51:da:1a:4c:62:15:ca:c2:8d:81:6c:be:a3:d2:b0:4c:ba:53:
4e:3e:cd:6e:11:d4:ff:5a:4b:4a:5a:95:4d:28:02:08:be:7d:
a6:29:dc:86:0b:fa:67:37:9e:49:d9:eb:4c:e8:59:1b:46:22:
8b:10:24:a6:67:68:89:b8:d9:81:d4:8e:fb:1b:ca:d0:7a:39:
96:aa:3e:89:a4:bb:09:1b:0b:f1:96:54:f7:78:54:bb:78:83:
b1:2a:a2:4b:7b:8f:2b:85:2b:60:02:cd:08:97:29:34:24:40:
77:87:67:69:4d:a9:70:4b:cd:65:e7:8c:52:7e:fc:d2:35:43:
3c:38:9a:ad:27:ae:c6:c7:d7:31:e3:6a:d1:f8:23:48:45:93:
4b:aa:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:41 2025 by rpki-client