Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: /75fixocnKdzjT9wbOJz0T7a+oIuf31VxoUTgFW9G4I=
Subject key identifier: 73:BF:09:6A:5B:D8:42:0E:13:70:3C:45:66:B1:7F:5E:FC:35:A4:94
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 0194BCA9FFEA0569ADE5228A27969325FFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0BB3
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: 0DQ8AQD4eVy3loKER5dxP8JvEKVZdRqk3p7LIvrojVo=)
2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ff:ea:05:69:ad:e5:22:8a:27:96:93:25:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=73bf096a5bd8420e13703c4566b17f5efc35a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:9d:d6:7b:20:6c:e1:bb:bd:57:4d:ac:27:
ff:51:2c:91:74:db:57:e2:6b:52:e1:e3:84:11:87:
4e:65:61:b5:b3:d5:41:2f:7b:d8:39:ea:58:02:82:
1e:95:bb:1e:15:69:87:7e:93:9a:89:02:e7:03:47:
58:8f:c5:b8:41:80:eb:f6:80:8a:00:a8:2c:f9:6a:
a1:f0:91:19:f0:81:10:a5:be:50:be:5d:a4:14:f4:
ec:09:f2:e3:f7:bd:1c:69:f4:a3:aa:51:85:4f:3d:
19:b3:02:a3:70:e4:34:e0:ee:19:60:b3:6c:61:1b:
4a:06:c8:5f:68:fa:ef:95:56:61:d0:e1:6f:05:d6:
2d:ed:d9:c8:34:98:bf:a5:d3:7c:1d:a0:35:ef:b8:
9d:23:8e:b0:f2:eb:f7:a6:4c:5a:7a:c0:ee:05:08:
67:0e:15:4b:17:86:44:75:2d:2a:17:f5:9a:0e:dd:
03:23:44:cd:d7:31:6d:73:14:47:73:7e:e2:db:77:
30:ee:4e:2d:87:6e:29:29:f1:e7:23:bb:42:52:6a:
5e:d7:b6:11:6d:71:05:d8:c9:9c:da:77:46:79:0c:
c4:3e:3d:1f:01:59:63:67:8c:06:a7:cb:67:58:d4:
6b:55:69:ba:20:49:52:3a:99:93:f5:bb:5c:f5:c9:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:09:6A:5B:D8:42:0E:13:70:3C:45:66:B1:7F:5E:FC:35:A4:94
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ab:b7:a2:c8:80:24:1c:40:5e:3e:6a:76:93:2e:b5:1a:fa:
ef:86:fc:77:96:9e:25:73:52:b3:88:33:1e:61:1a:9c:05:1b:
f6:f9:2e:f8:73:52:48:d3:c4:61:45:f9:f5:5a:72:40:4c:a6:
7f:d2:a4:6f:4c:23:0b:8f:19:8f:53:2b:b8:40:ae:0f:6c:22:
3e:61:6c:9b:6d:75:51:56:8f:09:f5:5a:ca:d1:71:4c:d8:c4:
38:c7:3f:20:61:dd:29:6d:d4:37:49:1b:46:ce:a1:bf:95:6d:
57:7d:44:ba:1d:d7:0d:94:b4:90:df:e5:1c:36:4f:5e:2d:54:
94:24:28:ca:92:6b:76:87:1f:74:6d:45:9f:3d:77:49:8c:2b:
bf:cf:ca:ea:30:e2:75:c7:ac:d9:77:a0:f2:86:9b:3f:65:bc:
0d:2f:13:79:1d:6e:ab:f3:25:e8:85:8c:6a:13:8a:12:41:f0:
11:11:ca:b5:4b:11:ce:07:5d:d0:e0:8e:59:16:e2:74:ea:cd:
a5:8f:0f:0b:3b:15:92:92:9e:4e:e9:18:38:be:f9:29:01:b0:
e7:e5:df:84:01:d1:f7:d5:dd:a4:84:7e:87:45:72:ba:85:03:
72:40:b5:21:6e:da:9a:45:86:78:b2:ea:a3:d0:ec:94:0a:0b:
89:af:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:20 2025 by rpki-client