Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: Mp5hUuH5M3Vwvgb5qiwi5msyYwM72Z8MNB56gPdbgIk=
Subject key identifier: 74:F3:EC:3D:5C:1C:46:4C:A3:17:DA:62:0B:8A:47:AF:EE:12:90:49
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0194BD8538CAE59EF8D0350BCA1E7B34F2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 1165
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: b/zPHxf65KxDH4W46aspmavW17dol5FLcXDjh2s/80o=)
2: jeS6MzGjyajhq1xTKVFYKQisOvE.roa (hash: jH0c3uNXNqP5D5cKBijjnuw+oityQx81s+MFU0/3N0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:ca:e5:9e:f8:d0:35:0b:ca:1e:7b:34:f2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=74f3ec3d5c1c464ca317da620b8a47afee129049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:60:85:e5:30:b0:ed:56:2f:14:75:aa:cf:
cf:56:75:47:40:5d:8d:e7:0b:c7:db:14:14:ea:bf:
23:49:67:d0:1a:9d:fa:28:99:a0:9c:55:ab:e6:41:
33:f8:33:23:24:02:d3:63:57:80:5a:20:22:01:4f:
df:52:18:82:6d:9c:c1:96:bb:c2:1f:8a:1b:f7:0e:
6c:cc:8f:fa:0c:c6:14:48:2e:b8:c8:d3:29:6d:31:
cc:df:00:45:3a:9a:fd:90:51:98:25:0b:0b:a9:bb:
a8:9c:83:79:1a:4f:a2:7d:20:9c:08:51:7b:03:f4:
05:ae:c2:96:a7:7e:9a:25:7b:4a:72:0c:ac:69:24:
46:1e:fb:f5:20:bd:81:81:f3:df:48:22:bd:8d:84:
9e:fd:6a:78:c8:1f:6a:e5:63:44:9e:93:53:18:72:
89:d4:ca:2c:a7:73:19:f3:3c:42:b0:0c:37:61:7a:
f3:00:b6:6c:5a:89:3c:b2:05:49:a7:cd:6c:41:cd:
18:f5:05:80:77:7d:cd:f2:6f:98:b3:d5:45:2d:98:
bc:32:f8:21:44:bb:5d:87:b9:8a:21:bc:b6:9c:f5:
3b:fb:9a:73:56:f7:93:f1:2a:31:4e:fa:d9:4d:a8:
b9:43:b0:af:78:76:81:b9:c0:7e:d0:a8:4d:fe:5c:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:EC:3D:5C:1C:46:4C:A3:17:DA:62:0B:8A:47:AF:EE:12:90:49
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f9:58:0b:89:cc:c0:05:82:8d:c7:18:77:8b:ed:3e:40:ac:
eb:c2:40:4f:fa:26:bd:de:34:7f:3d:25:e8:94:17:83:bf:65:
b2:89:f4:b4:67:19:12:5b:e7:0c:ca:d8:26:08:d2:97:50:86:
da:1d:f5:e3:cc:fb:53:6d:ee:d7:97:ed:19:5d:7b:fe:68:dd:
dc:bb:3f:52:f8:db:43:f8:28:16:33:18:46:ec:af:f6:a4:b8:
53:ee:50:e5:d0:e8:94:7e:e8:b3:bc:45:9d:0c:5c:95:ac:8a:
82:03:12:e5:05:2c:bc:1b:50:57:3c:c3:14:36:01:57:5f:cd:
db:71:60:bd:9f:fa:c9:bb:58:37:67:40:ff:17:41:91:10:14:
c9:ba:85:2b:6a:7a:82:76:f5:e3:a3:9e:1f:d0:d0:76:9e:24:
25:f4:00:4d:41:bc:58:88:77:bd:2d:83:1d:b7:74:4d:42:6e:
6a:d5:ed:5f:91:96:78:96:1e:00:4e:e0:e8:5a:9f:35:8c:e8:
01:6b:25:4f:f3:54:97:a8:01:be:07:9c:21:a0:20:00:c7:27:
02:29:4b:64:a2:09:8b:90:cc:3e:86:be:53:ce:77:43:b9:ca:
fb:17:e0:26:e6:ab:25:23:35:e8:5f:e6:9b:b4:d4:63:dc:81:
07:c1:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:58 2025 by rpki-client