Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: B+w/7dUP9QOBEau2y7Z0IiXHblfWtR3OBOCxFDTGv9s=
Subject key identifier: 23:A7:45:4A:86:2F:9D:63:E4:02:C7:6D:36:C9:C9:08:FB:8D:55:9B
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 0194BCA999AE161932BFA4CCD2994BE98649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: mJU3xFqESK+bZ/+2H9Y8wh9hWUuRHMG6T1p+bqbE1Lk=)
2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:99:ae:16:19:32:bf:a4:cc:d2:99:4b:e9:86:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=23a7454a862f9d63e402c76d36c9c908fb8d559b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:c9:22:27:44:51:93:da:5f:6d:7c:75:74:
b5:33:ec:44:18:5f:90:cf:9e:f8:58:d0:07:bd:39:
40:ec:26:e0:2c:99:e6:66:98:d8:68:e3:81:95:bf:
76:2d:e7:ae:d6:c0:5d:ea:b3:01:78:7f:33:10:c1:
b8:5f:3f:02:9f:72:89:41:b6:45:57:b4:8a:22:2b:
c1:fe:45:6b:81:93:fd:dd:b7:df:61:1c:bb:9e:c7:
a3:bf:10:b0:45:66:2b:2a:e3:45:42:78:b7:09:81:
c0:97:73:82:d6:e1:81:a2:36:2e:bc:40:ed:18:e9:
07:66:fd:ec:04:88:3e:f4:6d:90:f8:ba:35:25:b6:
7c:dd:bf:50:25:25:fe:58:8c:d4:28:73:9e:a1:ac:
62:d2:77:0f:cf:ce:5c:de:b0:f8:c5:97:65:96:41:
c3:ec:c6:75:29:72:dd:3f:05:61:eb:a4:5f:53:85:
57:e8:be:88:26:ea:66:c3:98:1b:07:19:c4:21:90:
d3:50:46:4e:4c:b3:95:bf:9c:cd:ed:24:ed:38:bb:
38:89:cc:b4:7c:e8:1c:f0:e6:a9:28:a7:7d:09:89:
1b:24:fc:1c:0d:99:6e:31:52:68:a8:b0:ae:06:6b:
56:a4:06:9f:e9:db:94:8c:4c:39:b3:e0:0c:1d:c8:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:45:4A:86:2F:9D:63:E4:02:C7:6D:36:C9:C9:08:FB:8D:55:9B
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bf:93:c7:15:a9:1b:ea:6d:36:f1:bd:9a:62:29:d3:33:e6:
76:87:49:84:9e:aa:e0:c5:da:93:28:20:ad:9c:2d:da:5b:a5:
27:aa:f4:cc:e7:9b:51:1f:d7:67:99:a5:6a:65:75:04:3e:71:
ae:ad:8c:8d:71:35:bd:d8:74:cd:b5:6f:f7:bb:04:ad:bc:4a:
00:46:bd:a4:15:02:da:0e:a1:f4:82:59:d8:e7:60:95:65:b9:
17:ad:1c:f7:6d:e2:7e:6d:21:f4:6d:64:77:54:87:94:db:c4:
53:a6:78:9c:0e:e3:1c:06:8d:24:93:ad:c2:23:63:30:c6:f3:
0f:c9:69:5a:31:8e:95:bb:fd:2d:cf:42:e1:e9:37:b8:c3:fe:
3a:36:2e:ff:db:62:bc:e1:7a:3b:54:49:28:3e:73:26:46:a5:
27:1e:6e:c9:c8:1e:92:6b:bd:f7:f9:80:56:7b:5a:86:a6:72:
83:be:02:fc:18:97:97:96:af:2a:46:43:dd:3f:e0:db:d2:69:
bb:38:4b:27:48:0f:9d:ee:80:5c:7c:98:e3:ef:00:df:8a:30:
1e:57:3f:44:bb:3f:db:13:c1:3b:f1:6b:76:28:f3:1f:25:e5:
b5:5d:1f:25:34:9c:b6:2b:4d:48:5f:eb:51:f6:01:2b:67:2c:
32:65:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:06 2025 by rpki-client