Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier: tWpF0aOscznwncJomL1AzSpQHoWYs4lhP9YJauPvIig=
Subject key identifier: 4B:B7:C7:D1:F6:9C:5C:28:75:7B:9C:F6:D0:13:4A:B7:FF:7C:4F:C2
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 0194BD4E69423614EC7B95DCA7AE6CE488A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: eVOEqQhp2g7qSaaM1lTOt6aV82Jp3IuZA+r34iemtHY=)
2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:69:42:36:14:ec:7b:95:dc:a7:ae:6c:e4:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=4bb7c7d1f69c5c28757b9cf6d0134ab7ff7c4fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:5e:9c:0f:0d:01:57:2c:2e:bc:e2:6e:cd:
63:6a:98:19:96:7a:e9:db:f7:b2:92:e3:bd:41:74:
fd:f8:5e:09:70:3c:73:5f:02:8b:0e:f2:c2:e7:9e:
0f:84:03:6d:7f:ba:2a:80:36:6f:48:22:93:9e:0c:
0a:9b:97:79:b2:36:ab:c2:29:5b:61:1a:e1:a2:80:
f8:be:e5:86:e0:da:94:ba:77:b8:74:20:df:5a:d7:
0c:11:d6:0e:9f:3f:b8:3f:f7:17:bc:ab:1a:f4:e9:
b9:cc:c6:72:ab:45:a2:5a:89:e5:5b:7b:db:fd:cb:
ae:ea:a3:a3:18:7e:19:16:ae:e0:c4:62:f3:04:d3:
2c:5c:80:59:d9:ad:ce:bb:57:09:2f:3d:9c:0c:21:
dd:86:1c:8c:b6:80:49:23:97:56:4c:8e:0a:dd:d7:
77:56:1e:50:b4:f3:91:d2:7d:1b:c2:b8:7e:d7:9f:
1a:98:d7:6b:5f:64:75:62:47:61:37:21:99:4e:7c:
6a:27:14:fe:dc:ee:d1:63:31:90:59:1b:67:db:72:
13:ad:68:d1:68:43:e7:d8:e7:a9:a4:3a:3d:43:4e:
11:0c:2c:ac:24:51:c2:0c:5d:ac:64:e5:5e:49:78:
1d:88:0b:14:73:ae:88:91:5d:fb:c3:f1:5b:cc:e1:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:C7:D1:F6:9C:5C:28:75:7B:9C:F6:D0:13:4A:B7:FF:7C:4F:C2
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:27:1b:a3:6e:75:71:3c:40:1c:f1:c6:3b:ed:6a:1f:59:0b:
ae:54:49:aa:c5:7a:3e:f4:62:24:97:1f:f4:f1:5f:ce:21:37:
31:0d:96:3e:39:3d:fb:ac:71:76:b2:75:10:8e:18:59:28:76:
d2:1b:a9:52:12:66:d8:11:3d:c1:01:32:e3:e7:5c:82:b6:f5:
59:ea:0c:0c:64:11:72:02:a5:e8:cb:d9:38:ea:3a:00:b6:26:
53:2a:f7:bd:98:3d:fd:26:44:80:b4:f9:e9:5b:fe:e3:58:fd:
bb:72:a4:4b:21:7e:07:1b:f6:ea:92:d6:97:5e:36:c6:24:92:
5c:f8:3e:e8:a5:10:46:a3:e0:bb:60:f7:1a:25:5b:78:8e:63:
29:6f:32:22:a2:b1:cf:65:9b:32:61:f0:27:90:c1:78:3d:6a:
89:35:49:c1:b6:e2:bf:9a:3b:9a:95:8f:aa:15:c2:67:7b:bf:
77:dc:c8:bc:20:bd:98:9b:16:88:ad:1e:fb:68:56:77:11:49:
9c:9c:99:99:f4:2f:d2:cb:c4:4c:53:45:24:7a:0a:37:0a:9c:
04:0e:17:b6:62:48:2d:ae:e3:92:2d:7b:40:96:86:bf:ab:f0:
b5:63:8b:9b:f0:0e:70:b2:db:0c:14:2d:40:48:0d:b3:1f:3f:
34:ba:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:00 2025 by rpki-client