Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: wEu3Z+87VfEVAmmGTR+C9QEGZslqIUh18r/s7qhcmS0=
Subject key identifier: 7B:F1:60:46:D5:F3:04:1F:8E:76:82:A3:D0:6E:C7:A1:D1:B2:C0:22
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 0194BCE070B08708E060A8E3298056367483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 06F4
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: inl0BMlGS/Q2n3LwyJpjJuD+Ihdsv3z2EqZHoPTEhY4=)
2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:b0:87:08:e0:60:a8:e3:29:80:56:36:74:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=7bf16046d5f3041f8e7682a3d06ec7a1d1b2c022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:97:b1:b9:11:67:ae:d7:f8:90:f3:97:11:ea:
7e:2d:16:13:f9:29:c8:32:7f:6a:90:c5:3a:0f:0a:
e7:e2:9c:e9:cf:fb:47:f8:5c:b8:8d:b9:4d:e4:a3:
cc:97:79:e5:9c:8f:64:26:5f:2b:6a:dc:0e:a3:18:
4c:14:67:14:48:79:e3:2e:da:24:83:07:dd:68:f8:
84:ba:99:47:2b:02:72:77:98:2b:e4:c2:89:5a:35:
e6:bf:74:53:83:e7:aa:cc:32:12:dd:59:7a:29:9f:
c4:67:c9:18:b3:8b:6c:84:56:a5:9a:b8:69:87:cb:
d9:b9:f0:96:e2:95:02:1a:0f:01:6e:91:a9:b2:94:
30:18:cd:f1:7d:a9:c7:3d:55:91:5a:41:d8:72:a1:
f1:76:27:d5:0c:c9:e5:e5:df:fd:6b:80:c5:5d:ce:
c6:53:46:ea:ff:4a:b2:86:b0:e8:69:d9:46:6f:ef:
18:f4:18:69:04:c7:ba:92:98:03:32:86:aa:b8:e2:
d9:74:54:8e:ef:63:1f:53:c9:d2:29:26:1b:65:5c:
3b:2b:65:11:2f:cb:f0:68:69:51:89:ca:d6:cd:38:
1e:84:82:d5:9a:ba:50:36:f1:49:e8:f6:66:55:73:
35:99:24:14:5f:2e:fb:24:81:5d:1c:cd:f7:58:e9:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:60:46:D5:F3:04:1F:8E:76:82:A3:D0:6E:C7:A1:D1:B2:C0:22
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:66:7a:4b:6f:63:0d:16:e0:ee:73:56:10:77:86:1c:d5:48:
85:06:1b:87:bb:ea:df:2d:93:88:96:f7:04:1b:9f:56:7a:0b:
a0:ce:c8:19:13:73:a9:af:11:bf:46:e1:5d:e5:f3:18:18:9f:
c8:7f:a8:6c:56:71:8a:50:cb:7e:70:fc:4c:a1:21:e6:1a:0f:
1b:b9:ec:91:05:f7:22:7a:0f:87:a4:92:6b:5e:ce:94:87:bb:
5b:1a:d5:f0:6b:27:de:5c:ce:3f:11:05:43:c9:e2:df:8d:91:
f6:41:f4:2e:e4:33:a6:c6:6d:89:0a:00:57:32:23:36:5c:8e:
4c:e1:18:27:48:4b:ec:8b:dd:c4:7c:df:bb:a2:99:8d:3b:d7:
78:d9:af:d7:f8:7c:6b:43:0a:f5:db:82:f7:93:df:73:2a:42:
22:b4:99:8f:22:e3:11:e7:b7:94:d4:53:80:1f:19:d8:3d:46:
b6:8f:bb:5d:18:a1:99:8d:f8:d4:f7:6e:88:24:f3:fd:21:de:
3d:7e:3a:42:69:28:65:80:46:68:80:a8:d5:f1:d0:6b:f9:d9:
a9:87:6c:39:19:0a:8a:c3:29:5e:2f:51:ac:f2:da:b6:d2:a7:
1b:4f:99:5b:73:c7:2c:5f:48:c0:81:b7:35:e6:b6:13:7d:84:
a8:a0:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:21 2025 by rpki-client