Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier: IOoVGe+yvay0YqXzJI3N3x2a9HBdhDFYo1AwyL1AQQM=
Subject key identifier: BB:84:8A:D2:4F:5E:1B:5B:8A:99:76:2A:16:8D:D5:16:00:C6:47:7D
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 0194BD17AD4CC2D30B4D935C6FE17615BFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number: 11C2
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: pfUWpu3A6IPjhEnZLVBxV+qKRHaadn216ekLuPd3Apw=)
2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:4c:c2:d3:0b:4d:93:5c:6f:e1:76:15:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=bb848ad24f5e1b5b8a99762a168dd51600c6477d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:1b:af:6f:b6:9e:6a:ca:77:38:db:64:a8:
0b:57:6b:c5:59:cc:8e:23:db:da:68:4e:7c:77:c6:
dd:77:0d:ce:65:f1:12:39:0c:bf:86:da:6e:85:da:
88:b5:a6:f8:d7:12:95:25:5b:7c:5e:7b:c4:a9:a1:
24:6d:dd:aa:f8:8b:fc:84:78:88:df:d6:ee:13:a4:
09:36:08:f8:44:55:0d:27:20:13:23:0d:d9:ce:c1:
67:2c:98:58:c1:4d:cc:54:92:8a:65:98:eb:75:59:
85:68:6e:62:0b:b5:44:49:1e:ff:a8:65:09:f6:09:
50:6d:40:e9:a9:fa:63:b5:d7:e6:9d:ae:c2:f3:cb:
51:f3:81:06:ba:65:0f:6e:62:3f:9a:55:be:78:6e:
d2:d6:b6:bb:79:ad:22:74:7f:88:d5:ce:7d:92:4d:
fc:2c:4e:72:28:c0:33:3f:3e:d5:45:f2:6a:39:1a:
bb:51:ff:c5:3f:61:84:c7:5f:c8:48:8d:22:d0:f4:
24:90:ef:1b:74:c0:f9:b2:01:ef:36:ff:e6:72:ca:
e8:98:75:e8:c6:63:f5:b8:1b:b5:60:03:ec:7d:e0:
b8:98:45:43:6b:56:de:d0:57:2c:e0:be:e1:68:65:
a0:c9:66:4a:a0:8b:d5:01:ae:ee:4b:62:1d:63:6b:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:84:8A:D2:4F:5E:1B:5B:8A:99:76:2A:16:8D:D5:16:00:C6:47:7D
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0b:f7:33:c3:90:0c:18:e0:9d:f8:3e:5f:19:43:26:a5:68:
b4:18:ea:1b:c8:0c:c5:3d:84:71:5e:09:7d:bd:42:c2:42:ac:
81:c6:27:7d:88:27:f1:08:e0:44:05:74:ac:7d:8c:ad:88:ea:
f3:9b:89:4e:c9:a8:b5:c4:9e:9e:ce:c8:6e:2c:5b:31:15:90:
c3:09:d0:e5:c8:50:36:48:ef:91:bc:0f:35:6b:5b:21:90:20:
01:fb:80:b7:50:9d:09:f2:ef:51:5d:74:a2:2a:69:67:53:c7:
b9:40:62:35:7e:ed:0d:a5:d9:44:d7:05:7f:c4:6b:9e:6f:67:
03:9c:ea:b7:1c:27:14:ba:d0:5e:dc:d6:20:6a:75:4d:49:a8:
14:25:17:d2:5e:ee:0b:1b:4d:69:6d:ce:b0:0c:b4:4c:3b:9b:
a8:7a:3c:2b:cd:b2:56:b4:da:61:3e:92:b0:2b:22:92:4a:77:
5d:8a:aa:7a:9d:97:e9:5a:ef:95:82:7f:ca:5e:e6:6b:f3:01:
04:27:53:c0:e5:b8:65:0c:53:cf:15:cd:ba:5a:7e:90:28:4b:
b6:57:2b:7c:0c:e8:8b:2d:9d:3e:55:33:5d:5d:65:83:d9:62:
51:06:c8:b5:64:f0:5d:fe:b0:da:24:51:8d:e0:90:fe:d8:d7:
13:37:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:27 2025 by rpki-client