Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File: 1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier: elvhzMunExeQ1tXX5X++aIGnC8k3TSO+1/wyuSF2JuI=
Subject key identifier: EE:D3:00:49:BC:7D:36:DB:EE:22:41:DF:70:4E:14:B0:22:C1:BC:10
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer: /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial: 0194BC3CA44111F7D552B434E762FCE223A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number: 03FE
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: /SeMk3P8pG9G52b7QXyYVSMPdyJRt0+BMEvJEZrLG6I=)
2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a4:41:11:f7:d5:52:b4:34:e7:62:fc:e2:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=eed30049bc7d36dbee2241df704e14b022c1bc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:31:55:ce:4e:78:ae:a4:b7:34:26:77:76:
d8:7e:d3:c1:34:fd:89:eb:00:f6:41:39:fa:e1:0e:
90:48:82:fd:c5:45:93:09:e8:f1:89:4f:43:02:74:
7d:29:d2:a5:5f:b5:44:47:18:92:4b:88:9f:99:81:
11:94:8a:b3:22:7e:26:00:4d:77:bc:a5:67:35:98:
5a:a9:dc:f6:3e:42:62:4c:36:8b:9a:b4:b8:2b:f6:
26:9b:2d:39:fe:f1:0d:6b:aa:31:0d:e7:80:27:93:
0f:b3:d1:82:b0:61:5a:e7:98:50:d2:4f:c9:78:44:
70:f8:a1:04:29:6b:fa:ea:69:ab:cd:22:b3:9b:30:
5b:23:2c:bf:6a:f3:19:5c:5f:11:9b:73:ee:a8:29:
12:66:fc:d3:1b:9e:df:80:79:29:ae:42:65:6f:ec:
c5:a0:46:3c:78:3a:ea:40:32:dc:c5:03:03:e4:aa:
42:48:b2:98:c4:9a:22:5c:71:82:1a:e2:2b:91:86:
2c:c4:0d:19:e8:a1:21:5e:15:27:bd:6b:7b:73:6a:
71:ee:d5:a8:d7:48:62:1e:48:ca:b5:de:55:39:c9:
bf:89:2b:a8:b4:51:92:70:4f:58:a1:4f:89:a9:a7:
3c:53:8a:59:c8:04:73:fd:a4:52:7e:d1:7b:73:5f:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:00:49:BC:7D:36:DB:EE:22:41:DF:70:4E:14:B0:22:C1:BC:10
X509v3 Authority Key Identifier:
keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:d8:78:c2:67:79:97:fb:46:20:ef:39:47:a4:d1:0c:fc:d3:
a0:1b:6f:18:cb:1e:88:44:ca:2c:42:c2:cf:20:75:f9:f2:72:
d1:12:61:3f:99:25:26:15:4e:d2:29:11:b2:26:41:63:db:ea:
26:a2:2c:aa:f5:08:95:c8:65:3a:4e:c5:8a:80:54:76:5e:dd:
e9:4d:fc:02:6b:cc:40:88:7d:3c:12:e0:a6:06:7c:3e:e5:07:
49:b4:bb:3d:a6:39:46:f5:ed:9e:bb:79:60:03:9f:c6:32:2c:
43:48:ee:96:c6:69:80:c7:1c:4e:bb:bc:48:fd:24:95:42:06:
3c:1a:a3:a3:ee:dd:75:04:ea:df:36:da:19:e8:68:91:6b:df:
28:e7:d3:e3:6f:0c:87:85:95:16:4d:28:b0:83:18:a2:cb:cd:
18:dd:53:42:02:13:90:2b:56:89:7a:b1:34:39:1f:c6:9d:6a:
de:75:54:7a:34:8d:bb:c8:4d:ec:12:cd:77:f3:29:b4:03:07:
55:1a:25:3d:bf:db:72:58:cc:05:41:09:8e:b0:73:73:ab:4a:
08:37:fe:22:6d:58:75:d4:a7:54:fc:53:aa:85:55:39:56:b7:
ab:e5:60:3d:e6:3f:0f:7b:b7:cf:82:de:2d:13:14:35:31:83:
37:56:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:27 2025 by rpki-client