Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
File: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft (raw, json)
Hash identifier: 5QqG2duX1zslkb1DXj/3fJeC0+j1MRvUSg+xTFUNd6c=
Subject key identifier: DA:0D:AF:F8:2A:7F:CC:A2:F8:A0:F0:18:90:95:B1:80:0B:1C:53:3C
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Certificate issuer: /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial: 0194BD85752DC0DEDD80F19599C664E1CCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
Manifest number: 0EC6
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl (hash: EJ5t4qeBlghlxAFuntEn/dU/AuhU6SoFEKRM2AzuNIA=)
2: PSDe4mK_6sDHN2_ikwrsB7r4x8E.roa (hash: +rSMz15QPdcNrfCJaZ0raaYeAdhGu+UnOVTPQ1q0l6Q=)
3: s5uswa19Uff22iB-dXtqkkmV_rE.roa (hash: nIij+OFtE0vEkYeQJJWHSLDLEYsBsVEmFRZ+nuktJgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:75:2d:c0:de:dd:80:f1:95:99:c6:64:e1:cc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf814df8575986dd904a98687583c138768a114
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=da0daff82a7fcca2f8a0f0189095b1800b1c533c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:78:f1:5a:0e:01:73:90:76:92:a7:3a:1b:
a5:60:e3:b4:cd:e6:7e:e9:dd:86:09:e4:61:f5:c6:
cd:ca:07:19:ed:db:8c:14:61:fd:2c:6a:ac:c0:6d:
c0:01:94:dc:f4:d7:dc:ff:ba:1c:8b:d3:44:e3:b8:
fb:fe:2f:81:25:ed:40:67:6d:ef:ca:eb:36:2b:ac:
e6:8a:6f:40:92:59:ab:60:8d:e3:95:c0:34:e2:9b:
a1:c6:64:da:5a:12:98:ad:30:a0:95:a1:90:f5:d1:
73:83:22:e4:bb:1b:b5:38:4e:f0:5b:13:36:d3:23:
c5:12:c1:ba:80:5a:a0:cc:47:f1:99:4a:a8:9d:5d:
ea:cc:66:88:6a:82:14:ab:c3:00:d1:cf:76:2c:c6:
02:39:35:07:ec:e4:a4:4e:c3:39:40:59:c8:20:27:
ea:44:3a:58:26:de:4f:7b:50:da:1c:66:04:91:9b:
a7:c8:ad:fe:d3:90:6f:2c:f0:a8:a5:5a:0d:09:99:
ef:48:bd:3f:fe:af:c5:90:98:2f:51:14:b2:7e:9b:
c9:cd:7c:94:11:6c:47:b0:90:ba:fa:bd:31:09:a7:
4b:e1:23:90:ab:b7:10:7d:bf:c4:28:7c:02:1d:4f:
49:a8:0c:7f:9b:91:96:b5:a4:74:d8:33:c3:44:e7:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0D:AF:F8:2A:7F:CC:A2:F8:A0:F0:18:90:95:B1:80:0B:1C:53:3C
X509v3 Authority Key Identifier:
keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dc:22:7a:3b:06:e1:9d:88:73:9b:65:d5:46:fd:ec:d8:e0:
01:83:10:10:34:6a:85:c6:f5:fa:63:e5:76:8c:eb:e2:00:97:
a9:cb:23:bd:ac:96:36:b3:0a:9e:d7:85:11:60:c5:c8:92:3c:
3d:7b:ed:1f:19:d4:4c:f4:d9:e4:85:2f:a8:71:e1:41:a0:5e:
25:0f:00:ed:8e:68:68:43:6c:b6:1c:45:b6:00:14:cd:4b:e7:
44:fd:ec:2b:2c:13:72:98:f0:19:f0:36:64:25:fd:b5:a3:c3:
6e:e8:60:d2:8d:bb:e2:05:3c:49:96:7a:7d:93:92:cf:e4:e9:
a1:c8:89:b0:c3:20:c0:a3:76:d4:dc:39:21:ee:d2:00:55:56:
3c:b9:bf:fe:b4:3c:36:6a:b2:af:f6:9c:a2:a8:db:c4:7b:0b:
5d:59:0c:c9:c2:6c:56:5a:20:3e:51:05:8d:e4:b4:20:38:a6:
04:0f:64:44:38:e8:15:a0:83:4a:0d:81:1b:81:f4:28:b5:1e:
fa:29:5a:ec:89:35:fc:90:b7:c1:d4:29:12:59:da:25:18:34:
33:23:0b:be:af:37:2c:33:43:86:bc:c5:39:c9:3c:8e:ff:33:
8a:e4:b0:3f:19:d4:ac:07:a8:b5:50:03:6e:53:aa:fb:d9:1c:
c6:57:9d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:57 2025 by rpki-client