Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: /ng8RQhF2i/SYH3j7hePzMMH4Ki7ZPcsaMl/9qJDDC0=
Subject key identifier: 2F:BC:94:EB:6E:DF:09:A1:70:81:AD:24:66:72:EF:7B:4F:C4:0E:6F
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 0194BC72AA33CF5F367E90334C8A1781BFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: Bq3eFMvtV47ZJcoz7ewAMO4D23b9/f8+o9wjf8im3K4=)
3: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
4: kLJ8BOzr8zys4VKGS1yOfrbwFac.roa (hash: LKxQ75LZpddZNZAVI+5qKmXoiAxRE0TUFxZqLlNag3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:aa:33:cf:5f:36:7e:90:33:4c:8a:17:81:bf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=2fbc94eb6edf09a17081ad246672ef7b4fc40e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:5c:8b:29:8f:a9:57:65:69:5f:d8:93:31:
2a:84:54:e6:b5:16:9c:74:49:0e:c0:06:84:52:9b:
85:53:3b:c2:d2:2c:0a:c3:52:fd:fa:ab:9a:6f:ca:
47:91:3a:09:97:95:68:1e:82:01:fe:7d:0d:5f:95:
e7:0a:ad:e7:69:7d:c1:8a:84:8e:17:2f:b9:b6:2f:
d0:6d:00:65:83:d8:3d:41:9b:fc:80:a6:15:73:e2:
0f:08:d6:51:3c:2e:50:f3:66:63:bd:c8:b6:6b:f4:
b4:07:29:9b:5a:df:ea:9a:85:9b:04:68:f1:8e:20:
98:8d:c4:ff:ea:ce:7c:31:af:1b:6a:c7:45:29:f1:
75:36:9e:b1:11:39:32:6f:58:b5:3e:a2:ad:ed:a6:
8e:24:a1:3c:59:90:eb:51:59:16:26:b7:66:e5:ec:
6e:50:d0:66:59:c2:8f:99:f1:97:4b:7a:1a:a3:17:
33:f3:ff:4a:ff:aa:41:f5:69:af:65:cc:5a:13:31:
0c:77:c9:94:3d:42:ff:17:94:2c:96:70:11:9a:49:
8b:bc:b6:1b:27:90:c8:75:48:13:e2:4f:b3:64:ff:
9a:a5:1d:64:3f:2d:88:7d:7d:c4:8e:45:6f:98:32:
3f:ad:0a:12:53:22:a0:7c:b4:a4:4e:e4:4c:06:f3:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:94:EB:6E:DF:09:A1:70:81:AD:24:66:72:EF:7B:4F:C4:0E:6F
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d6:ca:6a:b9:e0:9e:92:00:68:36:50:63:06:f9:78:2b:70:
f4:97:f4:39:e9:eb:d6:67:7a:14:db:1f:42:34:5f:0a:c3:0a:
44:3c:ca:a4:4f:84:fa:b8:84:70:c6:ae:1c:7a:0a:ef:54:21:
3f:0d:cb:59:bc:9b:44:fd:b3:a5:2a:a5:8f:93:56:15:8e:2e:
fd:4e:9d:90:9c:25:c1:0a:6a:16:a7:99:c2:b4:c0:43:6f:53:
72:c9:fd:ac:f1:a5:6b:4b:1d:43:49:73:1d:cc:44:d5:f6:e5:
dc:06:f5:eb:b1:87:11:37:7b:0a:59:73:3e:b9:7d:3b:fc:f3:
67:dd:23:e1:94:25:6a:a9:ef:78:2e:d1:1d:44:51:6b:59:c8:
09:69:d3:79:61:4b:ba:ea:a9:74:80:79:2d:c3:9b:ab:30:19:
4e:6c:06:6b:72:16:b0:7e:fb:9a:9b:f0:99:28:16:59:40:36:
e8:3d:1e:12:15:40:2a:1f:30:51:2d:27:d4:52:8c:fc:fa:d0:
ae:8c:b2:1b:09:57:d0:d8:3f:ea:7e:57:db:a4:57:cc:1b:27:
c3:2c:fa:f5:27:bb:c9:56:44:fc:f1:01:3a:bb:7a:62:9c:ed:
cf:1a:34:87:c0:55:fa:15:bc:39:be:be:54:3b:90:b1:f6:de:
89:68:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:13 2025 by rpki-client