Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: MtypQSvKJEisCHqQzURLHchU2xmg5wlW4S1ES3wrNxk=
Subject key identifier: 3E:FB:85:FF:1B:93:30:A2:67:E7:B5:79:72:D7:F7:92:96:C8:82:93
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 0194BCE07C1726BB44C2F13DD74ED90021CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 01B1
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: iY3IqgkEaaI/emwUb5ROBX1lSGQaiUiBvR6PzwuMM0s=)
2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7c:17:26:bb:44:c2:f1:3d:d7:4e:d9:00:21:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=3efb85ff1b9330a267e7b57972d7f79296c88293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:f7:fd:8e:21:73:69:50:85:6a:1f:2a:b2:
0e:41:ec:a9:eb:7d:41:ea:6a:4e:dc:bf:78:b1:d4:
3e:37:26:12:10:62:e5:46:89:d5:98:3d:60:26:f3:
3c:97:fa:35:1f:44:1f:01:34:8c:c0:79:8c:d6:aa:
e9:ff:7a:f3:df:cc:2c:8d:7f:03:e8:3a:21:ef:b8:
3e:6b:6d:21:cd:32:96:31:b3:95:93:24:32:1f:49:
44:b6:23:fa:f9:c4:4c:23:8d:b8:98:27:c9:eb:76:
ae:3c:9d:68:da:ab:01:b2:90:a7:8c:9f:06:60:35:
f1:e7:1a:e4:69:6b:76:81:c7:04:1a:2c:99:51:9f:
68:dd:da:fa:59:6d:25:6e:14:d4:a3:ba:70:1c:ef:
c4:21:d0:8a:73:49:b3:d9:59:a6:a9:3d:a7:b3:4c:
30:34:d0:55:b0:58:60:52:d5:a6:de:6d:31:86:23:
0f:85:98:11:98:b7:23:b8:7a:89:03:fb:e1:9c:ee:
f4:ae:37:ad:55:68:0e:af:50:61:3b:be:fc:0f:c3:
43:31:6e:33:9a:29:3e:98:0c:a9:d2:9e:a4:d2:9b:
bc:39:0a:c9:ef:6c:67:8f:72:cf:49:e0:bd:0b:7c:
56:8f:fb:4b:df:81:52:6a:a9:9b:70:91:80:d5:c0:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:85:FF:1B:93:30:A2:67:E7:B5:79:72:D7:F7:92:96:C8:82:93
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:97:0f:60:5b:fa:7c:6a:ec:91:7e:02:94:91:55:59:c3:
cb:cd:4b:8e:53:b4:0d:b6:40:ac:87:2a:1f:78:c2:57:dd:fb:
6a:78:78:74:2a:5a:3a:77:25:9a:28:47:48:3f:27:1c:67:66:
a1:77:3e:97:d8:3e:a9:6e:53:29:4c:9a:db:d5:66:e1:9a:e0:
dd:5e:8c:e8:c1:4a:cb:23:56:51:ad:25:1b:71:62:5b:d1:a8:
62:75:4e:2e:b7:cd:55:6f:1c:82:bf:27:45:03:68:c4:94:b8:
7f:df:b1:f4:b6:5a:ca:04:25:c2:38:4b:17:dd:32:43:a1:b6:
2d:09:52:af:dc:50:4b:be:89:4c:b7:4b:48:ef:e9:41:77:d8:
c5:81:8f:ad:cb:0d:c7:42:84:63:8d:20:1b:0d:33:5d:ff:aa:
2b:83:ea:e2:be:a9:b3:de:80:99:63:79:ca:54:57:56:4f:9a:
eb:21:44:69:a7:48:d1:35:15:66:73:47:0d:8b:c2:b1:a6:c5:
5e:1b:15:55:2b:89:c3:8a:11:d3:9c:4e:d9:1e:f1:00:d4:2f:
0f:13:fe:4b:ff:7b:d9:c4:fa:fb:a9:7b:f7:a5:c7:61:d1:b0:
8a:57:2f:50:73:6a:ed:2c:a9:a4:b9:90:a4:e1:48:c4:7e:dc:
c1:ed:e0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:48 2025 by rpki-client