Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: +hgpbw5YIveBfbRjMFjI9E9G/S3mnFDu0RnW82yb51o=
Subject key identifier: 9D:36:D7:70:AD:AF:4A:EC:5F:DA:29:08:B1:3F:FB:26:D4:8E:D5:17
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0194BC72F6BE5F8A25BC534D6C7171F4EF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 0F21
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: WlYtKA3WP+eb1c63O4ts4Bd9kPyFmFa7Z+dyUxuico4=)
2: 2M2ufWe7Ofl6u6jn9YFaKJdMQgU.roa (hash: JPn9kgkJ/mLlJFOnz5rvlquqkQlvdwjIM0rOCRw/j14=)
3: 59tRD3uqVaacfvjHXHYi92MaFhY.roa (hash: ux9P4oihcogCzRuXGICOJuqp+Eh/j68654s9FrT8h3Q=)
4: iuLWl39KK5_aNaq1WsPE60hdbCw.roa (hash: 20QH+aMyz7btg2ItRbizZ6HxBagtfnJOnIYg9KYZxFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f6:be:5f:8a:25:bc:53:4d:6c:71:71:f4:ef:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=9d36d770adaf4aec5fda2908b13ffb26d48ed517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:bf:3c:aa:80:5a:9e:96:fa:88:e9:9e:a5:
44:ce:65:ee:ec:99:a0:6f:93:04:8b:67:0e:93:6e:
50:b5:eb:d8:db:90:eb:bd:56:ad:4a:1d:e6:7c:1f:
a1:31:00:dd:96:e3:d7:8b:e5:3b:be:be:c2:91:45:
16:90:a9:f8:41:d3:54:c4:07:87:06:8c:9c:fd:a9:
97:cb:5e:15:f3:3d:d6:4a:d2:97:8a:d6:6a:8c:49:
69:18:5b:e8:cc:84:6b:69:91:8f:b8:75:17:85:9b:
c5:d6:05:84:31:1a:ed:95:ed:6d:8b:e2:e4:a3:3f:
2d:9a:79:a2:ee:0c:bd:a0:95:c3:73:ef:72:50:4d:
39:6a:50:ef:fe:f6:79:43:ca:53:df:c1:53:9d:fd:
2b:e8:5e:bb:cb:81:a4:1f:ba:79:80:e4:49:14:2e:
8f:54:91:a9:9b:ed:d5:82:b8:f5:1e:b2:1b:7d:05:
fc:cb:e7:bd:93:94:fb:99:3b:85:06:af:18:8b:13:
2d:49:c7:5b:70:1f:4f:91:72:5f:5d:01:da:c6:9b:
5c:1c:d4:5b:36:f6:24:8b:62:13:a9:b2:fe:7b:86:
fd:50:0b:da:ba:10:e1:8e:dc:ff:83:65:60:fd:9b:
c6:98:aa:65:fc:6f:22:0c:66:10:a1:6d:f6:7b:4d:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:36:D7:70:AD:AF:4A:EC:5F:DA:29:08:B1:3F:FB:26:D4:8E:D5:17
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:80:68:b3:a4:3f:ee:32:42:02:25:d5:93:85:e0:7d:c8:f9:
a0:09:3d:60:e3:e4:b9:1d:df:a4:d2:86:b0:21:a8:36:03:94:
20:63:26:88:74:ef:d6:7f:4f:9e:d6:1d:f0:dc:7d:bc:c9:b4:
47:44:48:dd:a9:af:d9:39:e5:f9:fe:b2:ff:7b:2d:08:63:0e:
e6:bc:2c:6e:3f:d5:7b:3c:b4:fd:f6:21:05:e0:b6:48:bc:dc:
49:96:5d:7c:f3:36:fa:ff:ed:2e:2f:3f:b7:9d:c2:3a:e1:25:
bb:14:4a:fb:b5:6e:47:00:0e:79:47:4b:d6:3c:79:5a:6f:8a:
9f:c6:97:39:1f:e1:af:cf:67:ed:53:fa:7e:1b:93:b2:4b:77:
e6:b6:d8:d0:3c:1f:df:10:55:eb:01:c4:a2:c7:d6:af:3e:d9:
4e:cb:23:12:2c:23:00:79:6e:66:1a:7b:36:fd:5f:fe:8c:8d:
1a:46:18:e5:e5:85:30:d4:45:0e:21:c0:35:05:df:bf:b9:81:
a1:5f:58:56:68:d6:3b:93:48:63:23:25:09:ff:c1:05:5c:e6:
c6:68:52:11:1a:e6:d4:ce:89:3d:a5:0c:4b:ae:a4:34:88:a1:
0b:3d:d9:eb:1b:ff:39:24:de:e3:77:08:18:40:01:43:e6:44:
f6:6f:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:26 2025 by rpki-client