Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: 2GPdlR2scq+ezci5Q+KBMcpXgwL7zHtWkiKaFTqUsK8=
Subject key identifier: 11:14:E7:EF:95:0C:CA:F1:C2:A0:66:D2:61:37:5A:91:AC:74:63:B2
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 0194BC04FB25CE83B869D5BBE0DBD0969A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: 3LEJvcuIZBR9sot619FmLCnTikwF0rWASOSPuEdY9p8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fb:25:ce:83:b8:69:d5:bb:e0:db:d0:96:9a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=1114e7ef950ccaf1c2a066d261375a91ac7463b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:b1:26:33:50:7b:7c:65:1b:e5:4a:22:70:
67:26:c5:d9:df:ac:f6:50:d6:a6:b4:82:42:d9:2f:
22:2d:c7:03:a6:7d:a3:9e:f7:50:5e:ae:ec:49:04:
2a:13:6e:51:72:e3:5c:df:46:b4:66:40:d8:33:d7:
62:d1:b8:ce:0a:ba:d7:fd:df:af:85:bb:2f:a9:af:
1c:a1:c0:27:56:52:3d:f2:91:d0:a5:6c:1a:32:10:
f1:2f:a5:67:91:60:e6:ea:9e:76:c1:96:d0:e1:f0:
1b:07:38:72:9b:b8:ab:95:78:38:29:f7:eb:65:7c:
e9:76:10:49:8a:99:27:2f:c4:b6:3b:d6:67:f1:d2:
aa:ea:f4:bf:49:a1:b1:78:f9:15:e6:7b:7f:ed:94:
ca:3b:31:8f:a5:c6:a3:43:a6:d2:aa:0f:8c:78:eb:
42:b7:09:9a:c2:64:86:54:e6:f0:9d:73:4e:52:9a:
b7:af:6b:c5:37:c7:f4:4a:a1:99:20:6a:cf:a9:8b:
f0:10:6e:c9:41:86:25:c1:14:88:99:fe:98:c7:5e:
1b:4b:e3:e5:d4:29:94:84:e0:a7:e1:a4:1c:61:e4:
cb:cd:60:b4:e7:ca:80:c4:8b:30:c1:2b:8d:62:e8:
19:41:ae:00:b7:30:7a:92:20:8b:f0:66:87:15:80:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:E7:EF:95:0C:CA:F1:C2:A0:66:D2:61:37:5A:91:AC:74:63:B2
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7e:52:29:0c:55:20:43:e7:95:3e:83:10:a5:df:ff:ae:de:
0a:77:37:11:49:b2:65:4f:c3:d9:06:13:a4:a6:75:2e:8e:eb:
27:2c:ec:1c:20:e6:ff:2e:ad:49:33:41:e6:38:0e:a1:ac:ec:
47:0b:16:41:b1:bb:7f:c2:66:d3:cd:11:5c:d0:c0:d8:09:42:
cb:ed:b3:a0:8a:54:1d:8a:1f:14:8c:ab:9d:c0:f4:9e:3b:dd:
17:80:2c:17:8a:fa:57:54:ba:3d:90:c4:89:78:d9:54:58:d6:
5a:fe:61:dd:09:0f:64:9f:7f:6a:b2:cc:3a:10:48:96:94:dd:
90:50:86:fd:87:1f:c2:54:82:f8:ff:8e:99:bd:25:54:eb:9e:
ae:a8:2f:64:2c:21:87:d6:59:be:46:12:df:da:9d:b4:be:cf:
7e:a1:65:14:1e:a3:ff:26:a8:60:2d:a4:6d:95:8a:a0:89:8c:
76:fa:6c:62:79:e1:3d:7e:de:1b:23:84:33:ab:d8:6b:b9:be:
12:ec:20:df:30:4b:35:92:0b:62:7e:0f:01:5a:b9:57:9f:08:
81:4a:02:5d:1c:43:f1:89:d1:95:82:a3:4e:f1:43:64:69:77:
e1:94:4d:d7:df:90:63:0c:03:2b:93:61:f3:98:1e:7a:b8:4b:
44:e1:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:10 2025 by rpki-client