Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: gLJEU16nlT0/528sDVYJfF/Qy5dOsqjaDJXRXRqYsf8=
Subject key identifier: DA:01:40:85:4B:31:90:11:06:6B:EE:7E:2E:A4:FE:59:88:C3:73:11
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 0194BBCECEB26C12A45849311790EABADA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: ehcu1R+QEN84VjKC1qItK8b5BXPJe9GTjg1HaiTdKSs=)
2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ce:b2:6c:12:a4:58:49:31:17:90:ea:ba:da:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=da0140854b319011066bee7e2ea4fe5988c37311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:5c:7b:af:28:da:60:a8:eb:5d:7d:b9:36:
75:20:10:20:bc:f1:ea:88:b9:ec:0e:bb:3a:33:dc:
ff:f3:01:c1:67:2b:c6:75:33:66:c3:01:a3:bc:7e:
db:52:4e:15:dc:da:af:62:b3:66:36:e0:ca:56:b9:
72:96:f5:eb:65:c5:6f:79:c5:a5:49:ca:b1:4b:63:
5b:09:a4:06:05:1b:8b:16:08:ea:3a:a6:df:3e:0f:
dc:a5:97:f8:c7:37:9b:0e:41:38:71:29:49:4e:7b:
60:fd:56:b8:f3:0f:54:65:1e:3e:bf:71:03:eb:f8:
12:13:85:d0:06:d8:d8:46:55:86:3e:dd:5a:57:40:
c4:c1:4b:fb:85:35:52:09:44:91:aa:fc:54:02:71:
e3:8c:79:93:1a:d9:20:46:54:66:17:b5:e9:ab:b9:
d0:4f:f3:05:e1:2d:4b:52:85:30:26:d0:f7:ba:c8:
72:22:1b:b7:a1:fc:cf:af:5a:66:27:6e:db:0b:d0:
5a:2f:6f:0d:ad:4a:07:7f:bd:20:c3:fe:53:61:22:
56:ee:0b:d1:fc:9d:f0:22:ae:a5:6d:7c:bf:6f:8c:
66:78:db:45:41:b3:81:ba:b6:58:c5:8a:19:62:3c:
fa:55:7b:da:63:e3:76:8e:37:53:f4:11:af:5b:63:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:01:40:85:4B:31:90:11:06:6B:EE:7E:2E:A4:FE:59:88:C3:73:11
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:3a:dc:45:ee:ca:d5:f0:81:eb:2e:b0:8c:8f:f6:ea:d7:
61:3a:6f:0c:15:40:67:76:39:91:be:ed:25:e3:9a:2f:ce:a8:
0d:29:3e:c1:ac:26:96:56:79:a0:9f:f3:8b:e6:31:24:0c:d7:
f2:d0:fb:eb:10:58:f4:7a:c5:91:a4:01:6f:0c:6d:8c:5f:c6:
62:80:c4:21:fe:ca:2b:ff:52:bd:5a:c1:96:bc:03:0b:76:39:
6b:bb:9f:8e:cd:12:ee:b2:08:fb:09:23:a3:2c:9c:2b:87:0d:
50:b0:75:5d:f5:50:7c:45:a4:2b:e6:b8:6d:ab:bf:5e:97:14:
68:7a:71:f8:51:ab:4c:16:76:6d:aa:0a:b3:8f:07:30:60:39:
c7:7f:04:3f:ac:2b:8e:5b:17:2d:da:fb:23:16:ae:bc:ea:3c:
d1:86:d7:d9:e7:73:70:27:0d:c3:f1:a3:ed:fc:dd:e0:40:09:
6f:4f:d5:7d:a0:ad:4a:37:48:c0:c9:9a:d3:a1:54:ac:6e:4a:
57:2b:49:d3:66:59:16:c0:2b:f5:95:ba:2a:4f:b0:ae:71:7c:
50:c2:df:9a:73:45:65:75:2d:da:8e:f4:88:2a:fd:28:be:39:
91:68:b4:b0:14:00:a9:f4:30:ec:f2:3e:26:89:7e:13:82:6c:
ea:f4:6c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:00 2025 by rpki-client