Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: B5csWXaApYQKTH5Fj6Gm4Lc6vhxkkaf6KMlbQsCZGh0=
Subject key identifier: 88:A1:16:C5:13:CA:AC:7B:AE:BD:3D:24:65:4B:D7:52:C9:99:9A:01
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 0194BD8534050E0BFDEBD2C0A0B1C3733A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 0E66
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: 9NQ4PFsJwf8XiCJnrACk3mhOp5YON8e9Z1jIwqJeWgM=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:34:05:0e:0b:fd:eb:d2:c0:a0:b1:c3:73:3a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=88a116c513caac7baebd3d24654bd752c9999a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:27:e3:c9:54:fb:71:ec:a7:69:ff:ad:a0:
be:70:40:f7:a9:1c:77:a0:01:38:94:db:45:be:4d:
25:13:7c:e5:28:7b:67:bf:0a:98:b2:d5:5c:4e:a3:
cf:7b:d2:a2:2c:a0:de:e8:a6:d3:45:59:c0:1f:35:
e8:9e:c3:42:3b:af:6e:7b:16:08:74:2c:b5:62:78:
8c:c8:44:50:7f:7e:23:da:30:02:f2:2e:db:9d:4f:
eb:57:df:28:98:ce:cc:89:ee:2f:6b:ad:88:8d:e0:
2c:b0:8c:d3:12:cb:29:2c:11:00:b7:38:01:78:dc:
bc:d1:0c:5d:70:42:b1:d6:ba:f2:c1:39:f0:37:78:
6f:90:39:eb:e5:47:8a:f5:8c:cb:3a:24:09:af:d4:
77:19:4c:6e:b3:d2:fb:47:30:2a:94:58:90:bb:db:
63:77:c4:4c:4c:92:8d:f0:4f:ea:2a:b3:e1:3b:0a:
53:39:da:29:b0:5a:e6:98:b9:49:50:c4:e4:13:1d:
23:52:51:fb:19:15:dd:cc:32:9a:b8:f6:62:00:d2:
b0:16:5e:97:22:1c:28:63:f6:3d:e1:09:81:99:78:
c5:80:00:b3:2f:30:f1:e2:b2:81:18:ab:af:84:9b:
66:97:11:a1:ed:f0:e9:74:7e:8c:d7:9f:ef:f0:31:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A1:16:C5:13:CA:AC:7B:AE:BD:3D:24:65:4B:D7:52:C9:99:9A:01
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d4:bf:04:b9:62:ab:50:cd:8c:c0:ec:d6:51:69:32:b8:35:
02:4a:d2:7a:43:81:fe:57:95:6a:6a:c1:43:60:8f:1a:8d:53:
68:81:b4:3c:46:4c:80:4a:96:90:23:3f:35:78:38:1c:06:94:
ce:ac:88:d4:a5:15:7d:29:ef:e4:50:13:4a:3c:b8:c5:bc:fe:
c7:da:40:b5:61:8a:fe:e6:af:39:1e:74:b4:59:42:c8:8c:47:
5e:af:61:b6:59:35:7e:96:f2:29:90:57:4d:64:f9:4a:2a:43:
7c:d4:f3:a3:8c:ca:c9:64:c4:e5:2e:7d:b1:79:e2:30:68:d7:
35:92:1e:61:84:68:c1:cd:a3:3f:3c:13:10:97:e4:89:c5:98:
a9:2f:9c:6e:2d:e8:1c:3a:1e:82:4c:4d:c9:23:2c:da:81:b1:
00:13:60:7d:26:82:3b:47:eb:94:55:2a:f4:5c:e5:92:bd:67:
77:1a:b4:fd:7b:97:f9:2c:85:5d:06:57:95:5b:de:71:06:24:
63:06:8a:f7:ea:de:05:c3:a6:14:05:fd:e4:11:11:e4:b2:52:
5a:f8:e4:01:5b:e4:48:5d:05:1b:ff:f4:68:0a:a4:32:83:d9:
0f:eb:63:6d:53:4c:6f:f5:1d:c0:bd:49:59:7d:23:fc:73:ee:
e8:15:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:21 2025 by rpki-client