Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: LI+127vKRxEXckjTWGktUMQIiy9LdtjY3BfFaGhsEio=
Subject key identifier: 66:13:E0:07:35:EB:99:DE:F4:77:D7:6F:C2:93:84:57:DD:DA:25:1C
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 0194BC3C606BFC7B9CB530BE5396BE20DFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: 1GcgTDNwUMLmQanOas5Dl1LX78cVuTXUAd/uUsyFty0=)
2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:6b:fc:7b:9c:b5:30:be:53:96:be:20:df:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=6613e00735eb99def477d76fc2938457ddda251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:20:aa:62:53:b9:76:49:ea:29:57:4f:3f:
de:f2:9c:74:8b:50:8f:e8:c3:e2:49:89:82:aa:87:
c6:90:86:b0:4f:7d:c3:d7:b4:38:07:e9:fb:17:9a:
a6:c9:74:c2:6d:91:3e:b1:fc:70:c0:e9:d3:d5:ce:
4d:0a:9d:63:3f:cd:de:3c:ec:59:68:8e:3f:08:12:
4f:35:47:15:26:61:a6:52:5f:fa:9c:a2:3a:13:ea:
9a:a6:31:61:59:87:89:03:09:85:13:61:7e:67:b8:
dd:31:73:6f:de:d7:33:50:1f:de:bc:06:1f:ad:43:
1b:84:1c:62:9a:b7:76:c0:e7:e4:46:72:2c:d3:20:
a2:fa:e5:f4:43:a2:c6:ee:6a:1c:89:40:4d:ea:4c:
d9:98:0f:99:dc:32:c8:03:c6:76:91:9a:f7:e6:d9:
b1:92:1c:21:66:01:69:f8:02:8c:48:d9:a9:5c:00:
8c:a6:5b:19:35:10:7c:1c:91:54:a5:53:af:e5:c1:
95:df:bd:3b:9e:99:a7:2f:57:1b:f8:d7:bc:99:30:
d6:e9:07:22:d9:85:49:5e:ec:ef:e0:e6:c3:89:f5:
89:90:e4:bc:27:28:84:be:9c:31:e3:da:24:3a:2f:
a3:66:96:22:3b:eb:dd:00:dd:0d:e1:15:d2:d5:0a:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:E0:07:35:EB:99:DE:F4:77:D7:6F:C2:93:84:57:DD:DA:25:1C
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:51:62:85:a1:7b:2f:7d:e9:d0:80:24:a0:4c:7d:01:19:60:
c2:e8:c8:4d:02:f9:43:21:7b:10:d3:b0:4b:15:ec:ce:8f:90:
de:88:b7:90:43:b3:ce:3f:06:6d:a9:ac:0b:d9:09:b8:98:9e:
de:2a:42:5f:a1:e5:1d:c2:3c:3c:69:3a:ac:9f:08:aa:f5:91:
80:f1:9c:47:aa:e4:f3:46:5b:ba:e1:28:10:4f:57:f8:0e:6f:
f4:1c:38:10:b6:e6:7d:a5:f3:b3:c2:dc:aa:81:a8:45:39:18:
af:b8:5d:0d:d4:16:5b:a7:2f:d4:8e:f3:89:1a:4b:c7:ea:72:
d9:7f:73:36:a2:a0:ff:57:cc:65:9f:e0:65:d9:ab:03:f9:d2:
b2:a2:97:31:2c:f4:92:67:34:29:64:fc:5e:7d:28:b2:47:39:
1c:4d:c1:c2:9d:70:51:13:aa:e2:e6:3b:94:6c:e8:8f:47:b9:
f6:cd:ee:13:4d:68:89:eb:f8:59:27:a6:0a:47:55:6d:c4:3f:
99:d2:68:ba:89:dd:d1:c4:bb:8f:9e:37:96:5f:2f:de:42:07:
7f:ae:de:08:a1:b3:71:cc:10:77:c3:ca:90:6d:c8:f6:fc:3e:
cb:f4:16:61:b3:78:91:7f:56:10:9d:0e:5e:3d:b0:7d:9b:22:
5b:de:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:03 2025 by rpki-client