Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier: ZE/anjtiBu3C7blvuIaEWs+205FiGlCn+1RiAQes1IM=
Subject key identifier: AF:6C:91:EF:21:D3:55:6C:5C:73:77:B6:17:B0:6E:BA:B8:0F:CA:47
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 0194BC04E1A0B956F7F54EB9F14236F65D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: 5xhpnGgOX9g5nK8+AHzLrIqMncypmwXUvoP09HW2zAw=)
2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e1:a0:b9:56:f7:f5:4e:b9:f1:42:36:f6:5d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=af6c91ef21d3556c5c7377b617b06ebab80fca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:d0:ad:5a:74:e2:0f:76:01:37:32:f5:7e:
0c:76:2d:05:17:8d:3e:37:c4:df:de:c7:f3:f7:00:
24:3a:34:4c:f8:78:cf:94:9c:75:55:01:af:c1:6a:
73:10:74:3a:ed:70:f1:be:12:d4:c9:16:28:8e:9b:
da:da:17:9e:b6:66:9f:31:24:62:28:77:6b:da:63:
e2:a4:29:82:51:32:ed:f5:f2:73:91:8b:72:44:4c:
8b:0f:cf:68:4b:6d:ef:2a:80:4f:39:55:01:e1:27:
d8:fd:43:3e:2f:81:99:62:d8:3c:8a:13:01:fa:77:
f9:79:5a:a1:4a:83:f1:b6:86:04:15:8d:6c:44:7c:
98:b3:47:13:97:99:a8:39:e5:e7:7f:4e:e0:99:7b:
f6:3c:60:18:fd:ac:12:b0:31:9b:0b:45:35:fa:8d:
b3:0c:ae:99:a8:ca:a3:d2:cd:bc:4a:26:7f:0d:3f:
3c:c0:ba:9d:d0:3e:d1:be:18:04:4e:09:ba:28:1e:
9d:5c:53:8e:d5:ab:34:5f:ea:a3:55:c8:39:cb:0b:
9a:c2:a4:74:f7:b3:32:09:a0:fb:61:47:1b:b3:5b:
74:1b:cc:07:4b:c3:08:cc:5e:d9:cb:28:e9:d6:a4:
8a:ee:00:79:9b:be:68:5c:d0:4a:26:3d:a9:c5:32:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:91:EF:21:D3:55:6C:5C:73:77:B6:17:B0:6E:BA:B8:0F:CA:47
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a8:3a:1f:67:2d:ce:94:c7:7c:5e:35:e9:28:5c:50:52:c6:
4a:16:d4:29:92:83:f2:86:94:7c:22:93:72:f8:d4:94:b3:50:
bc:a6:be:b1:64:38:b4:ae:64:a1:5c:4c:bc:18:2c:c0:6f:8f:
11:ca:2d:71:92:9c:c7:59:6f:f0:50:78:05:5d:33:24:e1:d3:
6e:0f:34:a2:9d:77:17:41:f1:f5:c7:5e:ae:b5:c5:e1:7c:98:
9b:2a:60:55:9c:35:b7:f5:f8:2a:0e:9e:9a:e4:33:42:b4:f7:
23:69:e6:2d:a3:08:64:53:43:87:23:ca:c0:69:7c:fc:e4:d3:
55:8a:23:bf:6f:16:b4:b2:21:8f:be:78:9e:03:a1:a0:12:f2:
a4:02:4e:42:36:9c:e7:74:8c:9b:a7:cb:b5:7c:a4:a8:d9:15:
e5:9c:38:cb:d3:42:c6:ca:b6:b2:b0:5f:f2:0e:58:f6:de:3c:
4b:68:94:f5:0c:c8:7e:6b:38:ef:ac:6c:1f:f3:af:3c:8c:41:
b0:bb:1d:6c:1e:69:74:cf:83:c1:5b:aa:df:0e:02:77:f9:3a:
f6:8f:41:cd:e4:2e:d7:8e:2a:ca:05:c6:8c:a4:a0:e0:9b:3c:
87:77:07:19:66:87:07:d8:15:12:24:ce:8c:a4:ee:35:8b:fb:
82:c6:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:56 2025 by rpki-client