Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File: S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier: t/g13/j573CVJIoyLE0dAo2dL8EbbtzPqVvkf2jMpiY=
Subject key identifier: 1B:DC:DB:0C:70:F4:07:57:E8:7E:6D:3C:08:25:FE:B0:09:C7:55:CF
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 0194BD4E6449E3D297411CF203B80AC50A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number: 1448
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 1-dpFpZ66BUopKTWddAy3aYd5Q58.roa (hash: a/nFyI+oVdi7douUuLnGlPqM2YOH9iXTA2Ltk7+EQUM=)
2: DL1hBwC058Ly5gbOYmTudqMnhLY.roa (hash: ZP95RnK2lnoKaBDaVLfKRWdtbqYZIJodq0FZ93fqmj4=)
3: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: Ky49uZn+2ey/DwMOy2wRAdZraN61vGUOQGkzjPstmYE=)
4: TSdQZeiJv87sxq_OJ-PJSQE8GTQ.roa (hash: zeHI0YzPke/O83NDkRPiKpR8/sA4EMZWB7tgWAf8HNc=)
5: YG4GH2kbor4nZ_HdlU4bXsM_ISU.roa (hash: orPHPnq001m59xqGhWWhOTcNNv+UhgU5D7ZAydlYwJ0=)
6: _YciLAUMll_l6Ad-S-3jEr-WUP0.roa (hash: YLNVgwBOiutPhe7HbfVw0eYS7E9cfJJEs9zT8+FOZFI=)
7: ct-_W27EwoC0fOGDJoYPaUOCh1k.roa (hash: Ry7d3ypfHQ+1XBY6nTPep5IZIfXf1osPEMavue76/1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:64:49:e3:d2:97:41:1c:f2:03:b8:0a:c5:0a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=1bdcdb0c70f40757e87e6d3c0825feb009c755cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:69:b1:ef:24:43:6d:9c:f6:d8:ff:da:5a:
d3:83:dd:1f:3b:e9:07:68:a8:78:46:e7:b6:a1:49:
60:0f:36:b4:a0:66:bc:20:95:73:f3:ce:4c:01:85:
7b:ad:62:4c:24:57:0f:ca:dd:32:6d:53:87:09:2f:
f5:bc:48:2b:af:f9:22:dc:83:c4:99:32:48:f8:ce:
8f:15:d4:bc:c1:5e:b0:1a:cd:95:fa:75:07:8e:2a:
bd:05:4a:17:cb:14:fe:54:d6:f9:d7:4e:e7:84:19:
29:46:2a:39:e0:7c:19:da:f4:8d:b7:62:ba:9f:6e:
56:3f:3e:03:81:07:a1:2f:2b:14:51:d6:a2:10:14:
e7:5b:53:4e:47:65:ca:73:4d:4d:7e:de:12:8b:8e:
a0:20:f6:85:d5:38:d8:e0:01:a1:aa:2e:27:75:fa:
11:2f:c4:64:1e:bd:86:23:ef:0d:76:de:00:73:bf:
80:d6:a7:1f:b9:f1:9d:41:45:10:92:fa:70:d8:71:
60:01:35:0c:e6:5c:e6:10:dc:86:6d:60:cd:c8:6d:
0b:e7:4e:9c:2c:0f:63:d5:07:ab:f6:2b:21:fd:d0:
f5:42:0d:11:3d:da:c2:27:ec:3e:7e:3e:f6:59:76:
0a:07:62:a4:b8:49:91:7f:24:38:05:a0:51:f1:66:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DC:DB:0C:70:F4:07:57:E8:7E:6D:3C:08:25:FE:B0:09:C7:55:CF
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:ed:4b:c1:a0:21:f2:6b:7c:2f:1c:48:15:23:af:01:96:
a7:47:6f:d6:31:40:3b:a1:eb:e5:00:87:fc:51:7f:34:77:df:
9f:ca:50:f1:db:c6:92:a2:74:08:2a:90:5f:72:38:b3:7a:50:
12:0c:e6:56:e6:a1:ba:a6:39:34:a4:be:92:c5:7b:bb:53:6e:
41:4a:ec:a9:73:78:1f:72:c1:4a:03:71:98:0b:a3:ff:33:10:
fb:45:48:3f:24:95:e9:a4:39:5f:15:03:72:b2:d1:bb:81:e4:
63:a2:0e:41:f9:a3:09:5e:c8:23:ab:8b:ef:ac:a6:38:7e:88:
d2:68:b5:3a:b4:08:42:23:48:76:93:07:d5:1a:b1:e9:fc:4a:
4b:dc:e2:08:4f:8b:0d:ea:2d:00:47:0b:67:e2:ae:c9:81:07:
8c:14:1d:4e:ab:a0:ce:d0:51:b5:9a:88:3e:ba:25:97:cd:48:
cf:cf:34:b8:6e:d5:2e:37:4c:97:12:7c:b4:20:11:cf:db:f6:
b2:0d:da:90:a0:dc:f4:9b:cd:e5:7b:0c:8d:b2:1f:4d:43:1d:
d6:c9:95:28:d4:a8:64:5c:fe:e4:63:8c:ae:5e:ac:4e:a0:e1:
09:af:0c:a9:74:5a:4f:9f:27:c2:06:af:e9:f0:57:ab:2c:7d:
0d:c9:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:54 2025 by rpki-client