Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: PFdKbWY4I6GTH8gilGvJM25f2ovP/FhWpQoASK+0Zkc=
Subject key identifier: 2A:A3:4D:50:1A:58:9E:FF:3A:4D:2D:B2:A0:77:61:4A:78:98:A3:12
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 0194BC04C4AB4EDD38331000FEC5B66EC7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 01DF
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: 1K+qNQqInmE5LvryebbVpeSWe+3//UQqfjlvcR9+TD8=)
2: kSER2798uaT4ZEQ3_Ywav1IgXDo.roa (hash: o89fQ/v3jr3XzrvC5mfE9JQZHOaC2hUzybiixeh55JI=)
3: yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa (hash: CFuI4jvHDVJgJ7TNYXPE3aUuvYsSM/+AObIDbJtCPww=)
4: zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa (hash: dZhp70Fm8wBLybFYAH8VTvH36PqVNE1zgwuzpEitFwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c4:ab:4e:dd:38:33:10:00:fe:c5:b6:6e:c7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=2aa34d501a589eff3a4d2db2a077614a7898a312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:dc:7d:2a:97:85:5e:85:03:67:43:09:24:
31:fb:1c:f9:82:29:71:1a:31:d2:09:93:65:3d:33:
bc:e5:f0:96:59:85:0b:5a:68:74:a6:f3:04:a5:79:
d3:d4:f3:52:86:ed:3c:85:08:35:77:aa:e8:d2:33:
80:37:d4:53:ba:9f:9e:97:ec:16:c2:2d:21:10:8d:
ce:9b:23:ab:98:23:e3:2e:9e:4e:34:e4:a0:dc:3a:
4b:ba:3b:9b:18:49:0a:ff:05:e4:66:3c:90:25:d6:
ea:d6:7f:8a:dd:74:45:e6:6a:ca:39:b3:35:ff:43:
7b:06:c0:51:06:81:e4:e7:d1:63:b2:1d:ee:34:77:
25:9d:7e:7a:2e:2d:b2:6d:1e:41:e6:7e:da:10:05:
0d:be:ff:00:0e:18:77:41:2c:d6:77:1a:96:bc:b1:
67:11:54:54:11:1a:8a:56:2b:2e:fb:67:dd:84:c3:
f8:fa:66:19:e9:c2:4c:49:9c:34:61:19:2b:74:ea:
9c:d0:69:90:41:53:43:58:c6:cd:05:a0:ca:37:d4:
cf:56:af:34:a1:6a:f5:45:f2:63:de:84:6e:d0:2a:
f3:3b:1d:86:04:6a:9e:10:0b:dc:8a:e8:3d:4a:f0:
ef:47:f1:f6:95:85:05:25:f6:1f:64:b8:e1:b5:83:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:4D:50:1A:58:9E:FF:3A:4D:2D:B2:A0:77:61:4A:78:98:A3:12
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:01:7f:ac:e0:43:ee:01:57:4c:08:9c:be:3f:d6:35:0e:75:
d6:d2:39:4f:11:05:d6:9b:24:ca:86:95:1f:6b:09:ed:01:3e:
17:fb:ba:87:49:42:48:88:c2:df:4e:26:d5:01:89:3d:f9:b9:
31:db:e7:b9:16:d6:95:71:12:03:20:db:80:45:af:3a:bd:15:
48:f3:c7:47:33:65:c0:0c:27:03:23:d1:53:7c:87:09:cb:16:
55:58:ed:bd:3a:ef:06:c0:a4:8d:20:b0:2f:3d:86:dd:10:d3:
40:40:27:a0:9f:95:53:a9:f5:ee:ec:5e:8a:c2:b0:4a:73:71:
43:34:01:89:4b:b5:5a:5f:56:f2:57:bf:7a:b4:4c:0a:2f:8e:
06:62:27:42:a1:e6:98:33:bc:12:7d:7d:f0:10:47:27:4c:1a:
69:c8:5c:f9:39:08:6f:08:ee:b6:2c:64:ae:ec:16:c8:fb:fc:
56:19:fb:8c:28:c1:fe:50:97:88:0d:73:29:2b:80:b7:2f:90:
ee:b2:37:d2:e7:ba:02:27:9f:f3:15:ec:10:47:73:83:ee:ce:
4b:2f:27:8f:8b:76:84:39:66:80:c2:40:66:49:ec:a0:cb:4e:
6c:eb:0a:64:8d:41:95:61:8a:81:b9:76:c6:74:44:3c:10:d6:
04:16:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client