Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
File: 1V05IYUKX_8H7KJgo275IQHy2Fw.mft (raw, json)
Hash identifier: pytNx8L5pXaw3KJ5fwrZx2cPpKt8VI6eJvyEEwvzPmE=
Subject key identifier: F3:17:3B:73:62:8A:4A:3E:DD:4F:2E:00:8D:D5:19:21:E0:D8:7C:D9
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Certificate issuer: /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial: 0194BCE07F947BB272C48ED200D56DA111A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: 1V05IYUKX_8H7KJgo275IQHy2Fw.crl (hash: P2Uog8iWORSfVKcHZ/UH9KE2HsmfEyeLr4TuBMiLggM=)
2: k2mbzTYpqu-vVJrS8eVrfjvKL6U.roa (hash: q1LZnQ/M/m1mtPJpKlXgR+S06Cq8uIHatKNRuGYjFtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7f:94:7b:b2:72:c4:8e:d2:00:d5:6d:a1:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=f3173b73628a4a3edd4f2e008dd51921e0d87cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:08:42:f1:09:98:4f:4b:db:e4:a3:de:b0:
e9:7e:c4:60:16:4d:c4:5e:2a:18:e2:0d:a7:9e:b1:
ca:64:a7:2c:db:14:22:2b:28:1c:6f:c5:90:ac:35:
27:b6:1b:53:b2:0a:f2:d8:c7:05:32:ae:93:16:8c:
6b:8e:db:cc:7c:b0:92:91:60:38:ab:c2:07:af:07:
9e:aa:d9:aa:77:39:6b:22:15:0c:d9:ab:35:13:a5:
c8:b4:55:ce:f3:d6:5c:d9:cc:2d:cb:bb:dd:e4:95:
78:57:7c:93:ab:b2:a9:4d:4b:e2:b2:59:5a:d8:1f:
91:9a:0b:95:2c:d8:a2:c6:9f:e9:9f:d3:e0:f9:ee:
a7:2d:30:fe:27:f7:65:12:2e:10:21:4a:0a:40:0f:
57:6b:22:d7:7c:0f:b2:4a:61:83:0d:77:24:3d:40:
8d:d1:7f:ec:dc:06:69:c6:8d:b0:b6:25:e4:65:fb:
d1:f9:f8:9b:7e:a9:b6:5a:6d:8a:e3:47:d5:10:66:
cf:a8:8e:d5:d2:c5:ce:88:a5:8e:21:79:d7:20:ae:
59:6e:bf:f1:03:84:ce:87:63:59:85:d0:64:e6:ce:
5b:21:9f:36:1f:33:5e:1f:1c:ab:97:41:1e:7f:96:
b1:da:ca:30:af:d9:f1:89:19:f7:61:90:83:b8:28:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:3B:73:62:8A:4A:3E:DD:4F:2E:00:8D:D5:19:21:E0:D8:7C:D9
X509v3 Authority Key Identifier:
keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7b:20:c0:92:e7:d1:ad:47:0d:87:5a:7b:dc:d3:e6:4f:14:
36:6a:8c:4a:53:cf:e4:2a:26:21:31:a3:1b:66:c6:81:3c:ef:
79:c5:67:1b:4b:8a:e6:4c:5c:91:45:e3:92:11:5e:82:b3:3c:
55:98:5f:e7:ad:e7:25:b2:3d:62:d4:e6:69:60:04:a5:b0:b6:
44:17:ac:11:36:83:19:85:09:a9:9d:9d:04:b2:fc:1c:03:2f:
26:9f:7d:38:66:b3:eb:91:de:6a:f1:33:eb:6d:f1:b8:68:d1:
9c:0d:be:36:38:db:9a:29:b0:9c:c5:c7:df:4c:14:c9:cc:c2:
50:83:b1:86:67:06:c9:d7:59:f7:28:e1:d8:f8:bc:29:35:38:
ac:a1:06:20:64:aa:14:3f:eb:0f:2c:77:17:31:28:d8:03:02:
c3:14:46:9c:e7:70:c7:9a:58:c4:fc:f1:17:e6:66:c3:74:77:
dc:e7:d3:f8:cc:5f:93:1d:44:48:5d:82:b0:e7:b3:35:63:46:
74:9c:8b:01:27:23:8f:f7:39:43:25:07:19:f0:26:d4:35:b1:
d8:49:3f:49:bc:4d:04:78:ef:5d:54:29:0f:ef:6d:d9:03:c5:
c5:b8:42:da:c5:71:6a:81:52:72:ef:84:e1:48:e0:81:51:78:
8a:99:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:16 2025 by rpki-client