Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: PQdyKJpIe/vWcpauCACOhMb7xV9xZZfneIR4u7Uwb74=
Subject key identifier: 8D:C9:C3:64:42:17:2C:32:7F:23:09:EC:3D:E5:51:1A:01:C7:06:5A
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 0194BC73162A08B29E52E522703141EC0C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: C0
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: wMRiF3LvfG9y0SqPPXEmMyqomptMAS2m3zBZSyOe2jo=)
2: d97Ch2oOF5rboQAm4Ny7S68pdDs.roa (hash: GTey3KF1CvpIvjeJCgqABtZ3XGUGtGoEyAaxaxLHaVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:16:2a:08:b2:9e:52:e5:22:70:31:41:ec:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=8dc9c36442172c327f2309ec3de5511a01c7065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c9:44:70:a1:4d:2c:d4:96:2f:97:fa:62:ac:
18:30:b1:f4:0a:a8:df:20:a3:05:91:14:4b:1a:4a:
ba:7a:3d:ed:57:84:0f:3c:91:db:5b:1b:13:6d:bd:
81:a0:8e:bd:a5:de:04:24:19:ef:55:69:d1:d4:8c:
f0:b5:c1:23:f0:3f:73:03:f5:ab:ab:3c:90:54:75:
a2:52:ce:b5:6a:bf:f1:86:14:a5:5e:30:9a:ec:18:
70:7b:df:52:2a:ab:aa:96:ac:5e:d7:56:cf:da:58:
33:10:70:08:c6:3b:a6:17:4e:c7:8c:b1:6f:00:f3:
64:63:e2:5d:e4:46:fd:f8:fb:85:ff:6f:da:26:b6:
f6:93:3d:c2:05:1b:42:62:8b:bb:0c:dd:20:da:3b:
de:58:4f:20:bf:a2:81:62:9b:90:0b:42:15:8e:ee:
cb:0a:7e:fb:43:6b:93:d4:33:98:5c:19:95:56:2e:
2b:5c:c4:3a:4e:7e:1f:51:63:88:b2:78:d0:b2:62:
2d:ad:78:a5:03:fa:7c:a9:51:c9:2f:44:ed:e6:45:
ae:20:7a:6e:62:54:50:c0:cd:b7:3f:80:95:eb:9c:
b8:10:9b:d5:37:82:f0:10:9e:4f:8e:b1:2b:0a:a5:
1c:e1:a3:2b:ef:02:c0:ae:94:d4:68:ca:66:31:0b:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:C3:64:42:17:2C:32:7F:23:09:EC:3D:E5:51:1A:01:C7:06:5A
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f4:7f:e1:69:e3:7d:cb:b3:eb:76:00:07:50:5b:a0:e8:f2:
22:17:e8:d9:2e:34:3d:9e:c4:6e:d5:9c:92:ab:1f:cf:c2:3e:
b9:08:88:19:a5:07:f2:14:22:7c:e8:98:1e:48:c6:3c:21:7e:
ef:3c:8b:46:f8:b8:0a:31:9f:de:22:58:6a:b6:d1:da:a5:22:
e9:87:c5:c2:7e:b0:e4:38:57:b5:1a:c8:1f:7a:1a:72:f1:37:
f7:90:7d:c8:c1:15:fd:17:08:04:f4:ec:ea:2f:3b:ef:83:31:
68:d5:11:47:7a:a2:f1:cd:63:97:c3:d6:ef:fd:1d:f1:0e:c2:
cc:53:28:03:1b:63:e0:57:6f:14:1a:81:06:3f:dd:08:98:42:
ea:c2:d9:a9:66:87:17:d7:91:89:0a:3a:b1:a1:17:ac:9e:24:
8d:e1:b7:aa:44:f9:fc:9e:0b:5a:87:bf:8e:d7:f5:78:4f:1d:
22:b0:0c:f7:a1:d8:b4:35:38:f7:fd:82:3b:07:0b:76:b1:d7:
bc:9f:63:4b:52:17:13:f2:e9:e4:14:5d:b2:93:75:b0:08:06:
fd:eb:b0:0b:d4:b3:25:e3:70:25:6b:2a:b1:03:9a:bf:2a:c4:
42:76:97:a2:7d:2d:17:49:95:76:87:fa:50:3e:e3:bd:75:c0:
ae:84:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:38 2025 by rpki-client