Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: PlqJpFfsKzmqMxF41f8OmcceQFliRj1eEF2wuv98N/M=
Subject key identifier: E1:B8:6A:BD:FB:BE:BB:45:DF:5E:A8:3D:81:79:39:BA:25:DD:30:8A
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 0194BBCDCC99ACA1D4D141804DC80B585F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 0D96
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: tjDz53B/pc5/DCirha2/eg3CWmOU62+1o9rIcSrCPgQ=)
2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:99:ac:a1:d4:d1:41:80:4d:c8:0b:58:5f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=e1b86abdfbbebb45df5ea83d817939ba25dd308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:d0:a2:b3:c5:fb:4a:37:b4:54:d4:33:d3:
5a:da:34:9d:e2:05:76:b1:e4:ed:2e:7e:f7:ec:ab:
bd:bb:b1:60:db:d9:17:c3:77:80:bf:43:7f:d5:3c:
94:e2:61:b6:a0:2b:3f:70:5d:d3:e9:ff:a4:77:11:
2a:40:29:23:08:f1:33:94:39:0b:02:ff:1e:7a:a0:
da:85:ef:d6:14:8e:53:4b:78:a2:bc:12:19:0b:5c:
d7:5a:6b:c3:d4:c8:69:f2:35:22:58:6c:c4:de:73:
a3:b5:eb:ac:bb:db:d8:18:cd:bf:ad:47:3a:2d:91:
72:17:38:23:eb:49:9d:a3:59:11:2e:a8:12:f7:35:
e8:73:c7:07:f9:db:11:2d:bc:d1:5c:2a:52:d3:4d:
e5:79:0d:bf:1b:16:21:f7:cc:9f:9b:71:55:62:e4:
52:8f:20:95:d6:8f:6f:a6:f9:0f:da:1a:c9:b9:9c:
14:2f:2a:c4:36:55:59:5a:46:f4:be:0a:5b:c7:f3:
d7:33:24:55:d1:88:3d:21:cb:34:a3:03:6a:32:a4:
de:6d:98:0a:bc:5b:19:e4:84:e3:9a:84:04:1b:fe:
a3:1f:aa:8e:26:3c:c1:74:ab:07:b1:d0:0b:e6:05:
ee:1f:a1:0e:78:bd:cf:2f:3c:58:0c:d7:b8:8d:1c:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:6A:BD:FB:BE:BB:45:DF:5E:A8:3D:81:79:39:BA:25:DD:30:8A
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8f:bd:81:f8:73:c0:e0:a3:87:86:76:53:55:2a:ad:99:af:
64:50:ea:00:9a:71:9c:25:f8:a5:7a:7f:c7:f1:fb:ba:77:e6:
ea:10:e8:5f:46:c3:8a:29:24:6c:80:e2:0a:76:be:dd:0f:fb:
27:83:40:4a:1f:16:21:c1:f2:d3:1d:bf:75:24:39:3d:2b:b3:
e7:2e:96:aa:b2:32:17:f4:7e:26:f0:64:39:55:02:3c:ba:dc:
1a:62:89:6b:aa:fe:50:84:d5:71:17:c8:d2:0d:15:7b:0d:50:
5a:7f:dc:9a:3e:b4:47:ac:3e:72:2b:78:36:b3:5d:33:e9:93:
81:9e:2f:fe:0e:bd:6f:25:cc:07:5d:56:c7:22:22:74:26:09:
26:d3:24:ad:be:eb:bc:8f:8a:65:b4:ad:80:6b:57:55:83:30:
e9:d8:05:02:b7:15:4a:ae:41:46:1f:cb:c9:62:d2:86:58:18:
45:7b:25:8d:db:d9:e8:25:44:dd:61:a3:be:39:a2:83:a6:a8:
58:0e:e7:5e:9b:89:9f:d1:f3:19:c0:c5:d4:b5:04:96:2e:6d:
8f:d5:8e:ed:c6:72:ea:6d:b6:db:e9:62:f8:c9:31:a2:47:37:
36:2c:22:5e:ed:81:54:29:41:86:a2:e2:ad:c2:31:8c:03:8a:
7e:1b:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:27 2025 by rpki-client