Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: gVPxZ/x0jBtlufn+7GWiQNe35N1URY9Vn4M5czF/ly8=
Subject key identifier: 24:59:C2:F1:B8:3F:C9:B7:A5:A7:37:DC:B4:12:BC:B4:D4:79:80:79
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 0194BCE0D9BA7AE4DD00BB981DB0BA0127B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 025B
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: h3naK1i1JL/SgrbD9d1f01hznZ7QChyk0V5McWck2sA=)
2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:ba:7a:e4:dd:00:bb:98:1d:b0:ba:01:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=2459c2f1b83fc9b7a5a737dcb412bcb4d4798079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:a6:ff:01:51:13:8e:ae:fe:3e:81:bd:51:
61:3f:e4:48:ab:77:9e:44:3e:b0:ed:fc:d9:81:79:
4f:0d:c2:c9:f7:68:11:96:60:3e:b2:5a:89:3b:9a:
3a:a4:96:fa:4d:50:5d:2d:f6:47:8b:12:8f:8f:fa:
10:2e:26:57:59:1c:1b:41:a5:02:fb:81:5a:dc:09:
e7:7f:79:4d:d7:37:b0:e3:0e:16:82:cb:27:0b:fc:
77:19:5d:44:61:eb:4b:a4:88:cf:42:6d:0f:a9:13:
60:df:36:77:2f:d0:13:e9:c9:96:39:f4:69:46:b7:
9d:8c:99:0c:e3:2d:bf:ff:a7:c3:4a:72:ec:7c:11:
85:eb:1e:05:c4:de:83:22:85:a7:c8:95:e2:f7:d7:
14:22:ea:81:f6:08:aa:16:4d:f7:d4:d1:bd:3f:a3:
35:4e:b3:c2:6c:f5:17:26:ad:68:06:e6:b3:24:5c:
35:81:dc:71:9b:56:3c:a4:a4:53:49:d7:c0:e6:9f:
ae:24:3b:0e:0e:30:6f:f6:1e:e9:b7:29:cb:be:91:
b9:4d:d4:8a:dc:8b:b1:a5:71:f8:93:ce:cf:bb:3a:
94:40:ae:67:61:fd:78:44:d1:11:a6:69:ca:2b:e9:
95:e2:93:17:c2:34:60:76:90:8e:ac:4d:9a:b2:c1:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:C2:F1:B8:3F:C9:B7:A5:A7:37:DC:B4:12:BC:B4:D4:79:80:79
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:17:f5:c4:0f:33:ca:ed:f2:58:65:90:52:a6:92:95:9d:39:
c5:87:ec:60:6e:de:7a:da:8c:3a:1c:35:a8:26:5d:4b:54:c8:
ed:97:76:83:02:0b:45:10:4a:c3:4a:b8:3d:73:f4:3e:0b:4d:
28:db:74:17:f4:b4:04:1d:65:35:b1:15:13:6e:5b:db:7d:90:
47:60:3d:88:d0:2c:88:de:17:85:0a:c2:e4:a1:54:f3:1a:d5:
5a:cc:e3:24:22:f8:57:a1:c4:d4:b2:16:31:20:21:cf:b8:2a:
dd:70:c2:82:38:20:70:77:b7:43:f9:3c:fb:81:a3:0f:e3:9d:
77:bc:a5:b4:92:bb:c9:91:ea:b5:db:72:0d:d6:b7:81:f3:e7:
34:da:4a:cf:26:a3:b0:45:eb:4f:24:ad:bb:e2:93:64:9f:b2:
2e:a3:82:40:60:c7:d9:3a:13:3e:9d:46:2c:80:8a:b9:71:5b:
37:4a:3c:c5:f8:ff:bc:1e:b2:98:d9:97:2f:81:a6:49:9a:8f:
e4:72:de:35:0f:69:34:03:29:e3:66:a8:73:2e:5e:01:00:19:
69:0b:53:19:28:0d:62:1c:08:e3:98:bc:ce:dc:02:95:eb:9d:
8d:bd:8f:af:cf:4b:47:b3:86:94:5f:7f:15:3e:48:fd:f1:8e:
78:2d:c0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:38 2025 by rpki-client