Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: 4iGciy8vDRiA3+2f/QkJDu3gzV7xek+usEo9isnoO8s=
Subject key identifier: C7:35:F7:06:94:2B:DB:E2:FC:D9:76:85:35:35:4D:B7:EA:0A:03:6F
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 0194BCAA0CDB2E705E819BD12D4A0ABAAD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: Ax/8gJJG/bnN8raC53DyW863bUqU1I6CnWu0l10VBew=)
2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0c:db:2e:70:5e:81:9b:d1:2d:4a:0a:ba:ad:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=c735f706942bdbe2fcd9768535354db7ea0a036f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:8a:1d:00:e0:86:dc:2a:2f:f4:06:ca:07:
35:96:fc:c4:a4:58:28:5e:f6:90:0b:d0:1e:13:e9:
e2:20:08:d9:aa:8d:09:50:8e:63:36:db:29:84:c4:
5b:ff:27:d1:f0:b9:25:11:b8:8e:84:06:3c:3a:e8:
72:2b:d7:63:e8:f8:d1:69:6b:23:25:a0:1a:d8:47:
48:d5:3f:e8:74:e2:e4:44:2f:34:15:db:a6:e0:6d:
3c:84:d4:29:d7:00:b3:55:42:0d:9b:c7:94:7b:bc:
a4:bb:13:79:eb:3f:c0:6d:32:e7:91:b0:85:66:1c:
98:cc:d1:25:89:3d:a2:fd:a4:f2:a5:48:36:bf:45:
c9:0e:0f:c8:ed:08:e8:b2:3e:27:e9:a3:30:18:ad:
7e:6f:45:41:60:10:f1:0f:18:82:d3:88:a9:9f:e7:
ed:ff:87:eb:11:99:06:4c:1e:1a:c1:59:e6:2d:e1:
eb:10:14:86:c6:94:10:3a:cf:7e:0e:4f:82:a4:a4:
2d:59:1b:87:2c:65:b0:a8:3b:a3:bf:85:05:39:18:
c8:88:20:65:95:b0:54:97:26:a1:63:85:80:08:6d:
59:0a:25:12:56:cf:1b:4e:c7:9c:d9:76:82:99:9f:
92:5c:02:7a:93:15:29:ca:e7:8d:ce:c6:2e:17:72:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:F7:06:94:2B:DB:E2:FC:D9:76:85:35:35:4D:B7:EA:0A:03:6F
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3c:c6:d2:af:7e:66:ba:8e:b5:89:87:df:32:bc:7f:a3:42:
64:4b:dd:bd:61:02:00:ff:7d:a8:a9:4f:4d:3c:02:6b:9f:3e:
9f:ee:41:fd:75:f9:a8:6f:1f:b1:0a:34:58:d8:67:0b:2c:05:
66:f1:0b:b4:7b:4e:b4:aa:37:87:f8:93:7c:99:e8:c1:43:1d:
86:0f:17:e1:5e:5c:26:d4:14:03:1e:8f:28:9b:f8:f8:6e:a2:
f9:69:a6:05:b2:e4:73:5b:17:35:26:f3:8a:2b:23:cd:6b:3d:
09:08:ea:87:4b:7a:38:ac:6b:30:9b:91:50:10:0e:07:8e:f3:
dd:eb:96:1e:67:eb:bf:ef:4f:11:07:83:49:29:03:96:3f:0e:
39:d8:db:a8:55:23:0c:b6:d5:20:91:e9:13:0f:62:49:0b:5a:
d7:de:df:db:a1:c4:76:cc:c7:a3:8e:3d:b6:67:85:96:d3:27:
91:d0:53:c1:0a:d5:1d:0a:3e:a8:c0:f2:68:d6:f7:0c:08:59:
ab:ac:a3:f9:79:1e:c9:a4:be:d4:b2:77:ce:01:07:d9:88:19:
b5:be:0c:bb:e1:d3:b4:29:7e:a2:00:d6:9f:03:58:94:36:e4:
d9:36:1f:2c:9e:62:e6:16:4b:1f:61:6b:d2:0b:2b:9a:2d:12:
32:80:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:54 2025 by rpki-client