Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier: zKaZ6lXFVZ+kvzPwh3MG9s83JK8TQJWkAkusb8zOHu4=
Subject key identifier: 57:A4:9E:78:48:1F:9C:82:06:4E:C4:33:3D:52:A7:CB:05:73:43:B9
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 0194BC3C60A0779F0D18F618F7D0D8FA0FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number: 0A1B
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: xhNEvQiYj7mBjjjsK4ms6J8Bx4lRXQk+ZWcshVdxNAU=)
2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:a0:77:9f:0d:18:f6:18:f7:d0:d8:fa:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=57a49e78481f9c82064ec4333d52a7cb057343b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:ee:ef:6b:0b:0d:f1:81:72:09:f8:47:dc:
9b:6c:70:11:38:4a:4a:74:60:4e:74:c2:f3:d6:36:
bc:d9:e5:3c:f9:6f:26:ed:9d:30:b1:4e:50:8b:2d:
eb:d7:38:62:89:57:4b:5c:c4:3f:d1:d5:44:60:7b:
24:38:33:82:60:57:c1:eb:86:e4:66:0f:e1:a0:cb:
30:7f:c2:e9:97:7d:99:6f:18:a6:01:ee:fa:e4:55:
1f:07:75:85:62:a7:b8:39:4a:01:58:fb:60:d5:ff:
a2:4b:f9:0a:d8:40:93:b8:86:ea:54:23:a9:d6:ea:
10:b3:c5:58:49:a0:2c:34:d8:66:ba:8e:c6:82:78:
11:0d:ff:3c:b5:01:22:82:0b:71:6a:ac:d5:7b:cd:
a3:5d:c5:50:b8:92:c8:a1:69:7b:ed:52:f3:0b:72:
1d:a9:cf:02:08:01:26:d6:d0:d9:24:25:d6:0f:cd:
ae:f4:c0:dd:d5:bd:1f:8a:05:e5:e6:3c:8a:a9:ae:
52:64:a4:97:e5:60:ec:f5:36:aa:3c:9d:54:e8:b1:
c0:52:22:41:d3:bc:52:db:5a:96:54:04:7f:f3:0d:
ec:ab:2a:60:dd:3c:fb:99:54:c1:4c:10:9d:ce:c3:
70:69:07:9f:61:61:c0:8b:d8:1b:20:45:15:4c:81:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A4:9E:78:48:1F:9C:82:06:4E:C4:33:3D:52:A7:CB:05:73:43:B9
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b8:ef:0b:64:d5:93:6a:4a:b9:4b:b1:e3:6c:0d:bb:4b:19:
a6:14:ec:4f:17:0e:66:bd:be:89:bd:c4:24:8c:ce:0e:70:38:
c9:6e:2e:63:a4:8a:77:a0:d4:fa:6d:0a:1e:cb:cf:4b:f3:6a:
66:36:7b:47:84:8b:68:86:fa:70:c6:dd:bd:a2:a8:7e:55:4e:
89:33:e4:11:32:20:6e:94:31:48:c2:34:c7:3e:72:57:71:96:
ee:71:7c:3d:18:b3:ac:64:99:a1:8e:1b:6f:0d:f2:fa:10:9e:
14:d9:80:6e:07:ef:b9:54:38:4e:1e:31:d8:7e:20:cc:d4:ea:
ed:ac:26:d4:ae:64:f3:ba:4b:ba:c4:57:a7:0a:9d:0c:e1:27:
ee:2f:fe:e4:4b:c3:2f:22:3a:49:94:ee:26:6f:98:84:3e:4d:
5f:a3:16:d6:77:f1:9a:56:97:11:d5:43:d7:58:e5:40:99:3c:
c3:4b:b0:d9:f2:42:e3:f3:52:6c:8b:22:aa:9b:3d:92:f0:fa:
2f:0c:c5:26:83:fe:65:27:50:0d:28:98:b9:40:8d:e5:b1:28:
b9:1f:15:1c:e8:c9:f2:be:83:30:40:11:6c:ec:84:75:31:cf:
c7:27:9e:e9:03:49:05:b8:11:43:39:1c:66:05:f1:f4:c1:af:
a5:38:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:18 2025 by rpki-client