Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: 93TcvyoSAYw3J/N4rNRThRu6WO86+H7HvbrBKzjEdo0=
Subject key identifier: 8F:D6:BE:1F:0B:8C:94:80:6D:E1:89:B9:24:E8:03:4B:E1:A7:46:2B
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 0194BD857C0D0B47B26DCFCA5A0116B02E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 01DA
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: OrbuMqytctmQDg103+DktP5o2N6RLX11wHG+8IYPzeA=)
2: loFt9UkmmZ1FwU6GuBvE7wOCBXI.roa (hash: EBLJxo6VHYAxrO4XWEk670Ig6ARB7G0deWDK0JqRpRk=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:0d:0b:47:b2:6d:cf:ca:5a:01:16:b0:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=8fd6be1f0b8c94806de189b924e8034be1a7462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:d6:d0:99:a6:61:7d:b8:80:37:ea:75:e0:
a3:cb:e2:b9:34:cd:a4:b4:46:00:35:3e:ea:5e:8f:
72:b5:d3:74:b7:45:26:65:70:9e:34:09:15:62:fb:
d4:4d:c3:0d:f4:51:38:fa:ce:9f:a9:62:3b:22:5c:
df:a6:de:c7:4f:8a:b5:34:cf:61:bc:80:5e:06:18:
fd:d5:bc:e9:75:4b:6f:ec:0d:e6:a3:6e:30:b4:44:
45:50:01:c7:15:01:df:a9:86:a0:59:29:61:1d:e7:
f0:2e:72:ab:62:73:13:a5:27:b0:a1:7e:94:e1:15:
8c:0e:0d:87:b1:ea:e9:ee:92:7a:a8:d6:52:90:e8:
5e:bd:a9:0a:18:cb:85:54:9b:d8:c0:02:e0:05:06:
09:9c:f8:69:79:69:1f:b2:50:9c:90:84:99:b8:51:
1b:49:a2:e0:c0:a7:79:3e:2a:93:c2:18:25:8c:f6:
67:43:81:36:19:b4:95:c9:40:8a:02:a7:00:81:f8:
4c:b5:e7:bd:30:c4:71:f3:c7:b1:cf:0d:64:ec:8f:
c2:54:e1:fd:61:f1:72:92:84:cc:ae:f1:c3:a3:ba:
44:d5:c1:2d:2a:6d:17:28:95:4f:6c:10:13:ae:9c:
c8:97:ad:89:91:85:9c:0e:f7:a1:0f:d6:91:ca:05:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D6:BE:1F:0B:8C:94:80:6D:E1:89:B9:24:E8:03:4B:E1:A7:46:2B
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f2:67:c0:d0:13:55:96:9e:d4:5e:5d:34:be:9e:53:9f:e6:
42:2f:47:b8:d8:29:70:44:f9:3f:fc:bd:00:16:fb:df:6f:8b:
e4:99:b4:76:18:e2:16:c9:14:0d:d8:ae:8d:ee:93:3d:6a:c2:
7c:d3:df:2a:ae:0b:6c:5c:48:36:91:8c:09:2c:5f:d9:f6:9a:
75:c3:a8:b9:f3:33:1b:0b:ff:d0:0e:02:b8:af:6f:15:6e:b2:
32:d8:59:95:04:6f:ad:1e:a5:0f:df:08:ce:7e:26:4e:ac:29:
3c:8a:bd:3f:9e:fb:de:a4:26:bf:2b:c1:4c:cc:7f:94:f5:11:
b7:d8:e6:fe:2b:0c:7a:68:3d:b7:4b:b0:0d:fd:ef:4f:11:69:
05:34:df:62:cf:93:07:aa:25:4e:27:23:e8:31:f2:a2:50:ae:
57:2a:6f:33:9a:5f:7c:54:f6:b5:cb:04:88:a5:ab:ad:57:75:
04:cb:52:cc:d5:0c:3e:15:9e:b2:e0:cd:af:20:71:82:dd:b2:
09:c5:05:28:fa:53:f7:59:59:56:8b:cb:4e:b6:94:50:00:47:
b5:a5:55:24:6a:b9:cd:fd:67:2d:8f:70:b7:f3:eb:0f:ea:31:
df:a4:f2:23:ab:47:d3:7d:46:8e:e9:54:93:73:6e:b7:aa:eb:
6e:06:c9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client