Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: MDyNbyBMYlaMbFAz4wvykOSdFE0m6eTID0aif9/zPpo=
Subject key identifier: 1D:24:81:85:5D:46:4A:81:1C:2A:98:FB:BB:E6:46:26:14:AD:47:0D
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 0194BCAA0411F08C3B675F3495E4A3A8A238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: J7mxBUK8N8dP9vwuiL3/nBuRyx+6CivNmffk6V7Zcho=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:04:11:f0:8c:3b:67:5f:34:95:e4:a3:a8:a2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=1d2481855d464a811c2a98fbbbe6462614ad470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:df:c1:c5:b4:39:81:32:b7:03:90:b8:4c:
51:80:c8:f3:ff:44:5c:e7:9d:03:65:eb:fc:92:8f:
ac:91:04:54:66:14:3a:ac:87:8d:5c:ca:39:35:d9:
46:71:ab:0a:25:dd:92:07:0b:ee:4b:7f:da:0f:e7:
e2:5e:4f:37:9a:82:45:dd:4b:4c:c6:11:3f:3e:3c:
03:3c:02:3f:2f:3d:92:c0:7f:8e:1d:bc:c7:d2:17:
54:87:02:d7:93:ff:3d:18:50:d9:23:59:17:47:03:
03:08:df:d6:ad:ed:28:3e:83:5a:99:b1:c5:a5:97:
7c:b0:7c:b2:8b:11:fe:21:67:15:fd:6b:1c:ff:bd:
2b:45:8e:43:5e:e1:be:e4:81:35:8d:82:ff:f2:6b:
53:65:bb:68:5e:d3:f1:aa:43:00:6b:30:2b:e7:a9:
6d:cc:f1:1a:d0:81:19:12:3e:22:ac:0c:ea:8d:66:
19:e3:4f:11:77:b0:69:4f:31:53:1d:05:30:3e:9d:
96:59:3b:42:a6:3c:a3:6a:ff:f8:73:71:ae:19:8a:
45:65:5e:df:fd:f8:25:d9:ec:38:d3:73:97:b4:05:
dd:4b:a6:81:be:34:4f:6e:d0:46:08:53:cf:87:0e:
02:7e:17:e8:d9:2f:c6:ae:7a:88:7a:1c:a3:77:0f:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:81:85:5D:46:4A:81:1C:2A:98:FB:BB:E6:46:26:14:AD:47:0D
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cd:70:cc:c2:c7:51:78:33:91:86:78:02:d7:76:70:2b:22:
1c:7b:83:1c:49:07:3c:c5:c0:a1:48:a2:3e:8f:d7:3b:c9:58:
4c:52:68:b5:1d:39:fb:a1:c5:3b:6f:1c:56:94:5a:26:f6:4c:
a6:82:4c:b4:94:0e:0a:92:5a:8f:d5:90:8e:89:bf:a3:8d:2b:
bf:39:87:70:c9:7b:61:88:91:4f:47:47:9b:a5:2c:a5:ee:66:
94:c0:1e:01:2e:63:74:fc:49:d8:c3:e2:fd:10:c4:00:d5:b7:
0a:16:21:63:2e:00:97:27:19:e3:64:09:33:e8:92:8d:02:77:
72:d2:be:a9:82:a2:e6:31:c6:40:fb:d5:4f:3a:d1:83:fe:23:
73:74:31:9d:52:d3:f9:fc:f3:d0:90:7f:89:92:e2:9b:86:42:
d6:41:ee:89:80:88:48:fd:e5:eb:51:6f:98:30:9d:d8:7f:4e:
5f:f1:52:24:e9:e6:1b:ee:8b:15:e0:0d:45:e6:a2:5d:58:2f:
6c:58:12:59:41:dc:41:b4:01:cb:87:7c:a8:d9:4d:74:90:a7:
e8:bb:b7:3c:94:be:99:f9:29:44:19:c1:82:80:32:46:09:5d:
16:fb:46:2b:f1:64:8f:00:b1:a8:bc:b0:f6:cd:99:60:af:e2:
bc:46:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:33:15 2025 by rpki-client