Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: nzk2USNUfmOMnsd26loRVfjGmRKvrEM2pVerwTtpaDY=
Subject key identifier: 05:61:46:E8:E4:62:C7:72:4D:CC:B4:B5:CD:0E:6F:F1:B6:42:4F:4D
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 0194BC04C9E31BA811A5353FB88515B79D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 0D61
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: ClypDY6FHSjGKwS6rk+4IvETnS5HVJQxjxLiZhpDDDg=)
2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:e3:1b:a8:11:a5:35:3f:b8:85:15:b7:9d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=056146e8e462c7724dccb4b5cd0e6ff1b6424f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:eb:c0:a8:52:b1:ad:81:fb:d4:b8:da:35:
21:96:4d:6b:91:c2:82:58:24:5e:e3:09:b0:92:45:
64:21:0d:00:c0:34:f8:a4:8d:ec:1a:f0:12:b2:2a:
be:33:d4:46:c5:1d:89:0d:11:cc:44:23:8b:70:83:
80:2d:52:be:d3:99:38:05:b7:07:85:cf:da:b1:89:
8a:e8:be:46:f7:0b:5d:16:91:c9:35:8d:78:7e:f0:
32:1f:47:31:69:f2:13:04:46:d1:8d:f2:2b:4c:3e:
f7:4c:e9:d7:04:ef:a0:01:ee:af:7c:01:b2:c4:4c:
b6:8a:d2:92:64:f2:50:1c:6a:dc:0d:e9:5d:35:c2:
79:5f:64:9f:82:cb:28:d0:b0:cc:77:f9:a4:5a:65:
e7:8f:a8:db:f9:c2:3c:4b:3b:48:b0:70:3b:8c:f4:
59:1f:b6:1f:9e:69:bd:e9:3d:e6:2c:cf:a4:d0:e3:
1c:d4:f0:45:4f:b6:4a:ba:7c:d7:1e:2f:91:73:c1:
2e:7f:4d:eb:92:db:fe:7f:d8:52:be:bd:20:b0:47:
06:f4:31:a4:d6:74:b3:48:0a:a2:65:36:7b:a7:18:
f5:e2:b7:b5:16:01:26:55:03:6a:e1:bd:e9:65:fb:
49:1c:8a:66:71:e9:d9:cf:0e:fe:53:8f:ea:4d:73:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:61:46:E8:E4:62:C7:72:4D:CC:B4:B5:CD:0E:6F:F1:B6:42:4F:4D
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:70:a5:3f:cd:f9:a5:cd:67:1a:57:ca:f2:6b:80:87:37:06:
96:88:f5:41:57:20:74:b9:38:a8:5e:f2:79:71:f2:fa:75:d4:
ce:51:8f:cc:af:33:ca:33:90:80:18:1e:32:f4:7a:23:30:b4:
dd:f0:92:65:c8:0d:c4:4b:fe:f0:a1:f4:c8:e4:f4:da:9d:43:
85:8b:f9:50:3a:10:42:00:98:46:90:98:d6:f0:e3:05:9e:97:
b8:3e:79:8b:7d:55:d5:2b:86:6e:35:d3:19:86:bc:2c:b3:0d:
92:fb:22:0c:d1:a1:dd:aa:d0:af:d9:75:b8:ec:df:74:7b:f0:
e0:b2:b4:ac:a4:5d:df:9c:a5:b1:e0:3a:31:c1:7d:df:c7:fc:
73:fe:c0:af:ab:63:95:db:67:52:d5:f5:5d:89:cd:5b:bd:92:
c7:25:cc:b3:4a:d7:6a:ba:d8:e5:46:72:04:72:f7:0f:96:a6:
de:30:29:cb:f0:32:c6:6b:6d:44:3b:cf:c6:ce:55:27:2e:f7:
83:3c:53:b8:04:14:1a:e8:a3:8b:0c:21:10:d4:47:09:02:ec:
5b:2a:93:bd:ec:6f:a3:5e:3c:e6:5b:1a:21:8a:ab:98:52:94:
8e:83:db:e9:29:52:7d:25:7d:ca:df:7e:c0:bb:4d:c7:b2:2a:
09:e3:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:13 2025 by rpki-client