Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier: OCxuEMlaVmbDSENKtuvNWi5lvr438a9HrFTxENnk54c=
Subject key identifier: 59:CD:EF:5C:CB:10:2E:5F:77:8C:1C:4F:CA:03:1F:DA:EA:B4:0B:66
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 0194BD179BADA3D9C54330AD04BF4F41ED10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number: 01BD
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: a6Jhdw6w/g+sbaxEaaInj9lOsiHLnnWz9sfKNR70DMw=)
2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=)
3: qhXB5I3L_1gebx9uWPle22yXSzs.roa (hash: 1Bibbr3y/zyc6e3zTUWDLu/M4E9ABrzuKYe3XtB8cLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9b:ad:a3:d9:c5:43:30:ad:04:bf:4f:41:ed:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=59cdef5ccb102e5f778c1c4fca031fdaeab40b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:6b:97:dd:b8:22:9b:7e:2f:e6:00:1c:68:
d5:f5:25:61:ca:5a:45:eb:a5:3d:c7:e0:cf:6a:fc:
65:19:f2:b7:50:76:a1:49:49:cf:d2:06:2b:b0:2e:
d5:3a:6a:0f:e3:62:98:71:15:e5:f0:3e:86:04:58:
81:5d:b6:91:d4:92:33:7d:f1:28:eb:9c:10:f1:ba:
f9:36:7d:af:e9:ba:a2:b3:35:58:94:4d:f7:04:38:
d3:94:3e:b0:41:64:40:79:85:db:ad:cd:dd:77:1c:
50:2c:3a:f2:23:0e:1e:44:9d:3a:a5:8a:e6:59:09:
b4:54:26:02:24:34:a3:f2:b4:f0:86:1c:61:0a:15:
25:c0:b1:9c:3b:39:4d:d1:d9:b5:07:da:53:43:d3:
7c:d4:e4:32:12:0b:fc:f6:ea:d3:db:d9:12:a1:a2:
cd:84:11:8b:4d:18:16:ae:9a:8c:b0:67:bb:73:e4:
f0:39:b0:06:6e:07:ee:be:d4:7b:f5:54:52:cf:84:
6f:9c:3d:0c:4b:a2:ff:40:e5:e2:7d:aa:8f:f3:2c:
91:61:d3:95:1d:cd:25:7d:8b:b0:ef:b5:13:02:a5:
e2:dd:e7:e0:59:0b:ae:74:bf:27:39:76:f2:c2:bd:
c6:cc:23:d3:2c:e1:95:41:4d:a9:83:4e:87:40:32:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:EF:5C:CB:10:2E:5F:77:8C:1C:4F:CA:03:1F:DA:EA:B4:0B:66
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:90:50:92:b5:1a:74:ac:0c:0f:a5:8d:54:d6:84:6c:c6:
b2:17:fe:82:9a:51:ba:cd:dc:97:8d:58:69:af:cb:33:aa:a0:
b4:fd:31:39:83:94:3b:6e:e5:dd:e4:61:9e:52:04:dd:1d:16:
bf:45:d8:b0:71:62:70:00:9a:06:89:14:ec:27:37:16:44:e5:
20:18:fd:a8:e6:43:73:39:1b:3a:69:fe:2a:10:fd:39:d8:3d:
a0:1d:ea:34:07:c4:98:b8:97:27:9d:b6:28:1c:17:ca:81:dd:
16:a4:6b:0a:54:14:5b:79:0d:40:13:1b:15:23:b7:6c:ec:01:
f0:2e:01:66:83:40:0a:b2:ec:3f:24:ec:5b:75:3c:d9:0c:05:
c2:15:ca:b4:8a:2a:7a:8f:eb:80:0e:07:45:52:40:5c:af:48:
43:99:4a:ae:ad:2c:f5:02:b4:bc:2e:e3:70:4b:3e:4f:fb:84:
7d:a8:45:5c:bc:8a:4f:87:cc:b3:80:b1:00:4c:4d:0a:fe:c1:
75:04:30:78:f9:48:8a:a9:b6:b2:65:a6:64:f4:81:b1:85:6f:
c0:65:35:2a:de:05:50:eb:f7:ec:e0:94:8f:2b:89:9f:c3:04:
db:b3:7f:44:1a:2b:b9:89:d1:de:2d:1e:4b:13:a3:66:79:53:
8c:a6:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:15 2025 by rpki-client