Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: UI6GnPMV0mGMIoT3BbU1VxZTdoU/Zcrb0pLp2JI1axs=
Subject key identifier: 0F:E5:D0:89:D7:4D:E2:AA:9B:3A:34:5A:43:00:4C:F0:9D:2C:E3:36
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 0194BC72DBD6D14AAFDAC0457D9006519F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0877
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: y/dtVUWtAW53RQAKPGIQhtFJtYhqBNGcjx+FbLx2HEY=)
2: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (hash: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:db:d6:d1:4a:af:da:c0:45:7d:90:06:51:9f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=0fe5d089d74de2aa9b3a345a43004cf09d2ce336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:71:c5:6e:de:22:bd:4a:79:39:ff:be:3e:
17:6b:62:51:55:cc:1c:2e:07:fd:2e:f4:46:0f:79:
f0:a3:17:3f:51:ee:e2:23:3e:5c:7b:14:12:b2:d9:
5f:9e:f5:c8:60:04:cf:45:53:5b:2d:db:91:c5:8a:
6d:cd:2a:59:92:9c:7a:95:e9:d9:b4:67:ba:61:0a:
c3:64:5a:10:88:a4:d7:9c:cc:17:7e:e7:96:a1:85:
74:2e:2b:cb:70:43:09:b0:96:93:10:b4:bc:06:ee:
a4:e3:5c:c7:1e:58:45:79:72:a3:2b:0d:37:08:d7:
e6:98:db:0a:d1:9c:7c:18:45:c0:b1:89:4c:68:89:
ac:44:28:c8:47:ab:d7:aa:71:58:b0:15:f8:29:13:
0f:cd:fa:0b:09:0f:e2:0e:f3:d4:ca:b1:3b:b3:14:
ec:07:f8:1f:42:ca:5b:3c:29:1c:6d:a9:e8:92:71:
0d:bb:1f:75:49:7c:aa:8a:8e:48:50:c2:4f:38:67:
67:ca:39:df:30:7e:ed:2a:ae:d4:11:54:65:78:62:
18:65:43:85:c1:80:6b:97:17:ff:78:29:9a:a5:b9:
7b:37:13:8b:29:db:c8:40:6c:08:1c:8a:e1:a4:92:
0e:54:7e:8d:fd:4c:de:b4:d7:77:f9:a5:7c:00:97:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E5:D0:89:D7:4D:E2:AA:9B:3A:34:5A:43:00:4C:F0:9D:2C:E3:36
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:af:1a:ff:f2:b4:38:30:32:e6:30:12:5c:62:28:52:b6:7c:
59:15:da:70:c7:2b:28:9a:a7:92:e9:ea:df:7b:e9:24:2f:fb:
41:39:77:a5:4d:92:e6:0e:a6:06:ce:82:f3:49:d6:f0:ef:ec:
bb:0a:96:f2:8c:15:79:c4:1b:bc:34:56:b7:f8:0d:52:f4:68:
40:be:37:dd:7d:cb:d1:9b:87:1f:05:37:37:10:b3:da:bf:96:
fe:be:5a:15:f4:05:15:19:36:a7:a8:ae:11:33:fd:dd:f8:01:
eb:ca:72:fd:cc:06:8e:a7:18:21:43:66:4f:be:84:41:07:18:
ba:0f:92:4e:e3:da:9b:ed:9f:a4:47:27:4d:c5:fd:4d:e0:68:
e3:7a:e8:e0:e0:4d:34:34:ba:90:fe:bd:2c:d1:72:db:1d:ee:
7c:51:ba:6c:e1:b8:fd:cd:b3:5b:8b:1a:46:72:96:57:0a:7f:
ff:cf:40:aa:e9:dc:c3:29:61:33:82:80:95:7f:8d:cc:24:8a:
3c:0b:db:b4:c6:5d:c3:28:d2:17:44:e5:8a:da:1b:eb:65:40:
4d:c2:3e:72:fd:37:43:a7:3d:17:a7:bd:5d:a7:98:bb:fb:e7:
81:75:c4:cf:89:8f:d2:14:9d:59:db:fe:79:fc:72:17:06:85:
d9:2b:c1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:55 2025 by rpki-client