Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: wDUhp4EWvmWT9N3yXM+l2C7FwRBs5YLch1QRkIjxac4=
Subject key identifier: 6B:51:4C:09:79:C2:7B:7C:84:DB:09:10:52:60:EE:7D:3F:35:63:BA
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 0194BC731677290AECA7C9889A3B904EB375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 01B3
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: V3kc33teGiCSw8C/2d3FRRQJosh9F/v+a9UbMLGmLvQ=)
2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:16:77:29:0a:ec:a7:c9:88:9a:3b:90:4e:b3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=6b514c0979c27b7c84db09105260ee7d3f3563ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:19:a7:8c:11:7d:2a:00:c4:c7:82:c6:0f:
35:38:50:da:cc:d6:f4:90:08:0d:fc:83:79:a9:8e:
25:c5:e4:d5:02:e7:23:a5:b6:f9:af:40:50:8c:68:
9e:b6:8e:17:f5:ff:84:da:4e:59:5b:a4:b8:85:12:
16:56:1f:70:64:53:fc:3e:ac:a9:a7:71:43:ef:5a:
46:23:5f:45:33:e9:bf:64:a3:80:44:fc:df:57:86:
66:31:74:69:e5:aa:51:1d:33:28:ea:80:51:1c:96:
49:ff:66:79:7c:9d:6b:96:5e:e4:c1:d3:77:ae:b4:
4a:f8:51:16:de:b4:f2:a2:88:ca:5c:79:5b:25:17:
6c:53:bb:74:62:3f:0a:39:8a:59:a4:46:d9:d8:9f:
a8:81:3d:6e:6c:50:4e:d9:74:be:6a:c5:70:d4:1f:
a2:7e:32:1e:a5:b8:61:73:54:c8:08:40:02:a0:a5:
11:eb:ff:c6:6b:9f:74:56:1e:9a:ed:d5:a9:ff:e8:
ff:54:fe:fd:f7:b9:93:d3:2d:f4:5a:0e:d5:fe:3b:
74:d0:1f:c4:0a:86:04:0e:80:00:28:dd:82:c0:20:
d9:48:98:41:09:8f:53:d2:15:be:d9:65:05:06:e7:
ac:48:ac:26:3a:ac:fa:f7:61:c5:8b:5c:a2:1c:70:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:51:4C:09:79:C2:7B:7C:84:DB:09:10:52:60:EE:7D:3F:35:63:BA
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5f:1a:ba:68:40:e9:e2:dc:fc:ce:1f:11:1a:9b:51:18:19:
93:99:46:c5:42:7b:20:af:f2:77:91:b7:05:9e:fa:c3:3c:84:
09:73:4f:41:2e:18:1d:cc:d5:bf:25:17:10:96:6f:44:dc:bd:
98:a4:96:22:27:4b:db:6b:c9:21:47:97:3e:dc:4a:e7:6d:55:
89:66:1b:a2:55:5f:8d:6f:d2:fd:7d:57:15:84:4f:bf:ae:db:
70:1f:5d:f3:09:32:60:88:5e:4e:1f:48:f2:d2:de:d4:10:2f:
16:2d:69:23:67:a2:5d:70:14:47:c4:97:fa:81:94:b3:6e:1e:
8f:4c:dd:20:54:5e:f2:9b:25:99:99:42:ec:b4:32:a6:a5:f9:
6b:e6:07:a7:76:78:80:1b:49:0f:38:fd:6d:07:59:90:02:d2:
17:3b:da:b1:67:9f:c6:72:54:9a:4e:5c:5c:20:86:df:fa:08:
f8:52:dc:fb:e3:7c:e0:5b:00:0e:25:ce:c7:cf:c5:2b:41:f0:
81:76:e8:cd:5a:c6:56:4f:fe:e9:d0:89:41:2a:ff:e9:a6:89:
ae:b9:61:17:67:f9:6b:15:fb:db:e8:a5:21:f6:3d:e2:29:6f:
1f:43:a8:a7:a0:4a:06:e4:c6:da:95:77:c9:f4:02:20:56:21:
38:e4:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:38 2025 by rpki-client