Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: zqGpXNpmNl6nlwNMBowGxyH/B9ImElI68oQHrN816fY=
Subject key identifier: F7:A4:A6:B0:42:1C:4B:98:24:B1:B3:E2:F1:CD:ED:C4:46:5D:45:D5
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 0194BCE0D43BF7B7A3AC24DF352266F12334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 01CB
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: Y6fuBqcF1natnx1+i9G42qO3wZ7Ukma84Z2TmbYi/7I=)
2: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (hash: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d4:3b:f7:b7:a3:ac:24:df:35:22:66:f1:23:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=f7a4a6b0421c4b9824b1b3e2f1cdedc4465d45d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:62:81:17:b6:74:59:74:fb:67:04:eb:6e:
13:11:1c:76:f5:55:b6:1b:4d:55:08:73:d8:b9:bd:
a1:e0:f0:eb:86:57:d4:bc:68:b4:af:33:a8:eb:e4:
17:d5:34:63:d7:70:35:58:27:d0:ba:41:74:9f:be:
58:4d:5f:40:8e:5e:16:c2:aa:43:aa:1e:2c:16:5a:
9b:7f:02:9f:5c:20:94:6c:ad:94:a0:2b:d8:2d:a4:
46:9f:06:fb:0c:36:d2:ab:a2:5c:f1:ba:23:e4:37:
fb:9e:85:06:6b:52:37:87:e8:44:d2:0a:48:4b:b5:
f3:1d:b5:af:a9:61:e8:10:00:8a:98:37:c9:f3:80:
5c:ba:71:3c:fd:18:8c:90:c7:26:64:20:e0:c3:c2:
04:89:9c:76:6c:af:c5:be:7f:8d:e3:b7:b6:5f:cf:
90:89:05:d3:b8:70:8b:ad:09:e4:21:98:aa:58:7f:
9e:9f:1d:11:fc:54:ae:e1:16:6e:6c:5a:eb:4d:b7:
32:a4:ac:70:3d:06:7d:15:3f:ed:d6:37:73:08:bf:
91:f3:d7:0e:c6:61:49:e0:45:22:04:70:1f:ea:9c:
c4:68:56:c1:17:d6:26:2f:2f:33:1c:d0:11:fd:79:
48:ac:bc:54:28:5a:e9:55:f0:8b:82:3d:aa:fa:6c:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A4:A6:B0:42:1C:4B:98:24:B1:B3:E2:F1:CD:ED:C4:46:5D:45:D5
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0a:e4:97:4e:b1:be:6b:e6:1a:c5:48:fc:5c:e6:e4:8c:22:
fe:3b:42:a2:95:78:ad:42:31:0e:a8:a2:6f:e1:7c:b9:cf:f2:
0f:de:7e:6b:70:23:64:10:a7:99:ba:47:d9:f4:ca:cc:9a:d2:
55:aa:a4:60:fd:3c:b8:eb:24:27:2b:fd:d6:86:30:67:75:69:
a1:07:da:f2:38:ee:98:42:c6:06:35:6f:fd:f5:51:58:59:8c:
7a:bd:2d:f6:ba:e6:fe:71:e7:69:01:41:32:c4:f9:89:3a:1e:
c9:ab:15:a5:e0:7d:f0:0d:bc:ec:04:bc:16:ea:09:fa:0e:bc:
d3:f4:53:d7:08:d4:b7:4c:f4:91:bf:e0:bf:07:67:55:7e:ef:
3d:e7:ca:57:87:7c:a1:3b:6f:72:00:0b:ed:82:cd:25:2c:af:
6d:4b:04:f0:0f:10:ae:14:09:2d:5f:ba:7d:3f:ef:cc:c2:f3:
a5:99:78:bc:70:11:31:97:f9:93:71:bc:fd:00:84:10:2d:d6:
c2:c6:ef:5a:cf:fa:dd:a7:cc:d0:7a:2f:01:13:5b:26:cf:d6:
2c:de:a9:95:47:02:68:1e:91:dd:c9:42:ad:b4:dc:6a:c0:2f:
9e:c5:9c:00:32:7a:2b:10:fd:b4:a3:46:0e:42:d9:ef:4f:fe:
f3:60:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:15 2025 by rpki-client