Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
File: 1UCrGFzzmd5s2zykXe0pa2vmj-o.mft (raw, json)
Hash identifier: yduX53gseXsG8fcsF39sZEoN2TfD01wzVWyja5brZ1Q=
Subject key identifier: C4:07:B6:76:02:DB:51:46:06:A8:5E:14:B6:95:3A:68:7A:9B:49:ED
Authority key identifier: D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
Certificate issuer: /CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Certificate serial: 0194BC052FFC8412842478741F17371BD90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: 1UCrGFzzmd5s2zykXe0pa2vmj-o.crl (hash: QbfUSt+SaYCJ0hsEX+oHW0t98T2LqeRqzuqzDdmWQvw=)
2: evwk9Zfy0oSug_OT-JqAYLVFN48.roa (hash: p8vwbzaWZAlgsI4s0YE3pDc8vzWrcDuiDp7ZJjKpleM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2f:fc:84:12:84:24:78:74:1f:17:37:1b:d9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=c407b67602db514606a85e14b6953a687a9b49ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:6e:14:92:fd:55:5f:be:98:c7:b5:a1:02:
c8:3c:95:bb:ec:e0:26:69:29:00:cb:97:56:3c:07:
90:b6:15:84:c8:3d:a9:58:07:a0:79:2d:09:a3:ac:
19:f0:1d:c2:ec:f6:75:79:1e:b8:16:d4:12:cb:60:
23:38:10:4c:c9:37:2f:fa:10:b2:70:2b:11:83:fb:
72:87:5f:f4:32:4c:02:45:9c:41:60:dc:26:72:a9:
ac:b8:d9:88:0c:79:c7:88:23:e2:37:fb:d8:01:51:
5a:b5:05:a8:33:fe:75:a5:22:71:c1:a9:2e:e3:6b:
2d:99:9d:41:34:2f:b3:91:87:31:df:49:92:e3:bf:
68:d4:2d:d4:9d:40:31:1c:04:79:6c:db:e9:87:ef:
79:9a:70:e8:44:c9:46:f0:6a:36:70:55:71:86:ea:
77:1c:54:4e:20:73:ba:55:87:59:f3:e4:ea:9c:c1:
11:4a:1b:2f:0e:aa:d1:15:be:44:cd:9c:37:65:14:
14:2f:f6:33:a3:c5:c3:dc:6a:c1:d5:5f:7f:d7:12:
cf:6f:fa:88:fd:4a:cb:34:21:5f:ca:a3:62:f8:50:
ca:e8:1d:fb:76:78:e2:95:1d:ea:0f:3a:44:84:c3:
45:e6:a4:18:3e:8c:e5:54:55:c3:1e:21:1a:e7:3c:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:B6:76:02:DB:51:46:06:A8:5E:14:B6:95:3A:68:7A:9B:49:ED
X509v3 Authority Key Identifier:
keyid:D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:ed:7a:f1:c5:a5:74:cf:9c:9b:47:e5:97:09:1e:1c:c3:
39:54:d0:ae:73:53:e8:1a:e4:63:2c:3a:46:d9:a1:3f:f3:d1:
c5:3a:e5:4a:19:52:e7:6f:19:24:de:d0:6c:5d:89:8c:d6:d1:
e6:c1:a9:58:ad:30:05:be:a9:d5:60:d5:a7:84:6d:c1:09:bc:
2f:e3:de:1c:9c:16:82:37:57:82:db:22:47:99:e0:a0:3d:ac:
5b:29:58:79:61:dc:c6:3f:6b:28:0d:4a:7e:54:03:c1:01:27:
ab:91:b1:1c:76:8f:f3:04:5e:eb:58:61:e6:dc:07:95:af:db:
15:ff:7c:89:d4:13:6a:32:2a:29:f8:3e:f6:da:9d:9f:6a:b7:
76:c5:03:4b:08:63:8c:22:3e:3a:4f:1a:01:ee:f1:59:fa:e0:
33:f9:0d:d8:8c:ec:81:cc:63:b4:d6:74:52:8d:35:63:bb:50:
a7:e2:64:03:a5:37:34:2c:ec:bd:42:77:40:d0:d7:17:8e:7e:
e6:7e:74:57:73:48:c9:19:8f:90:02:61:07:65:73:62:eb:57:
28:7d:14:23:18:df:f2:2f:1a:e2:12:b7:cc:f9:35:00:70:67:
54:7b:93:5e:01:b8:21:c2:63:57:e8:5c:a5:9b:5c:e6:73:97:
33:e3:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:50 2025 by rpki-client