Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: Wk2sUeALYAlOHFCQJQw+8QonncCVbhGFAimSaq/ipMw=
Subject key identifier: 7C:9F:FA:DB:4A:B5:54:B6:5C:D1:7E:E5:75:E4:55:6A:49:87:BE:72
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 0194BC052183D3476CE435BEA778470568D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 129A
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: 0F7cNZdvt8zKIXUwRJPGTLjSHSUJ3tdHqgQqbBvgpfw=)
2: coXB8AUyOhxIr0VY6WD8AfZAOT0.roa (hash: mpRP9a0BVIQDwxetgI94vsBq4EpMQ5yE3F5r1zuRKRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:21:83:d3:47:6c:e4:35:be:a7:78:47:05:68:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=7c9ffadb4ab554b65cd17ee575e4556a4987be72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:76:96:37:e3:80:93:9c:41:7f:30:ce:8d:
4d:f2:bb:22:74:75:4f:b7:d1:00:c3:e0:c6:a5:bf:
15:6a:b1:c5:6d:36:20:56:fb:1f:27:49:a6:7a:d2:
5e:d8:af:74:a7:cf:6a:06:87:31:7f:34:bd:5c:2e:
8d:79:40:9f:ec:78:b1:98:be:99:55:40:64:42:c4:
83:81:72:00:e8:2b:c4:7b:bc:ad:00:4d:0e:ad:16:
95:8a:44:98:d0:c7:8d:59:4d:03:38:80:73:ec:c0:
ef:cd:79:10:90:bc:13:22:a6:53:f0:15:7a:81:54:
bb:eb:a4:6d:45:40:0c:85:b8:65:3a:00:6e:20:0a:
54:13:c9:e0:fc:76:ac:37:22:96:a3:7c:fc:9f:69:
c2:1a:8b:b4:24:53:f2:58:8b:50:72:99:2c:06:96:
b3:49:e1:05:59:e3:37:cf:6b:aa:84:15:20:9e:d5:
55:d0:0f:d6:c4:5e:db:91:04:76:3a:b2:91:3b:a4:
b2:9a:18:4b:53:ec:5f:96:67:19:e0:3b:a8:58:ce:
5c:1e:c0:ad:35:ed:e2:6f:d2:c3:d0:33:61:de:c3:
ca:33:5d:02:ea:d2:fb:4c:83:ea:fc:33:97:dc:6a:
c1:6f:9f:bf:97:91:0b:7e:a8:45:b4:9d:9f:91:c2:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:FA:DB:4A:B5:54:B6:5C:D1:7E:E5:75:E4:55:6A:49:87:BE:72
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:ae:0d:e8:5d:67:93:b3:14:b3:f5:d4:89:14:ff:f0:3a:84:
40:1b:b2:64:68:42:32:e0:6e:c8:8a:fb:9e:25:2b:17:50:31:
c1:38:1a:e8:f4:18:af:50:50:74:cf:ed:fa:9e:2a:a4:36:62:
56:e1:f9:2e:9e:3f:19:1a:67:b0:3d:bb:21:ae:84:13:3e:dc:
c9:32:98:32:94:69:3c:3f:50:75:66:01:5a:fd:b2:b9:7c:32:
87:dc:45:dd:d9:e5:dd:26:7b:b2:0b:15:1c:a0:48:c8:fe:e6:
d9:e3:8e:a5:5d:39:d4:0f:07:70:21:c3:1a:92:3a:56:93:39:
11:02:65:bc:1d:bc:47:7f:ff:05:a9:21:45:54:9f:04:5f:31:
d8:3b:55:bb:e7:c4:35:46:24:82:77:48:cd:9c:94:6e:b0:bb:
f5:ae:b5:66:4b:cf:ca:d0:24:6f:53:de:7f:2a:b6:d4:2b:70:
e9:db:3e:ef:36:fd:e7:06:e9:e2:dc:a9:d8:d7:ca:df:3b:82:
cc:bc:e6:9e:34:f5:dc:6e:f7:33:e6:46:f3:45:cb:24:03:8d:
53:ef:15:13:5e:4a:f5:7c:a5:ee:c4:3c:7f:96:3e:79:25:d0:
7d:fc:db:88:81:9a:f8:f0:43:64:bc:63:76:2e:78:4c:5e:b1:
f3:94:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:57 2025 by rpki-client