Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: zXD5RCHnWyf7+WzGpBYUcRQHdcGck8o4qa9w57QGquo=
Subject key identifier: 9B:36:51:4D:25:92:14:52:07:F3:CD:7A:1F:B7:43:88:76:7F:7D:A2
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 0194BCE0BB1A29AAB58914E2067E8CC04BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: c06JzbmJO8EJzqsYkqdTOYRXXhDHIgY6UKWKXRHagkk=)
2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bb:1a:29:aa:b5:89:14:e2:06:7e:8c:c0:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=9b36514d2592145207f3cd7a1fb74388767f7da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:dc:b2:0a:12:60:e0:14:82:ee:d0:7b:c5:
47:8b:f2:d4:cf:9d:7a:e0:e0:d5:0d:db:b4:1d:75:
af:3e:36:70:fd:bf:00:f8:03:b4:6c:5f:da:c8:c1:
14:7a:87:c7:86:88:09:f3:61:fc:37:e1:09:84:b3:
df:f1:31:dd:38:79:a8:8e:62:41:59:0b:bb:3d:15:
d6:41:dd:f8:f9:38:18:d4:6c:ca:aa:aa:55:2b:15:
f9:b1:94:01:cc:dd:4e:44:66:3f:da:ee:70:b6:55:
f8:13:fa:81:f3:ee:b5:a1:85:43:a7:ca:da:6b:20:
03:14:08:41:8e:de:4e:96:25:85:10:42:9b:d5:11:
fa:5f:58:60:45:ff:a7:30:93:75:52:20:5a:a0:78:
2e:aa:a8:62:45:81:1e:4f:4d:e4:5c:6c:9a:7d:49:
cf:c0:5c:10:a0:89:bd:d7:e7:63:c6:92:13:ec:c2:
c8:73:2b:0a:52:af:af:df:9c:63:37:7a:4f:87:a8:
f5:42:f3:3e:8d:85:48:24:c7:0f:2a:7f:cb:5e:b0:
d0:a8:9a:1e:2e:29:2c:2d:6f:3d:c2:37:de:4b:49:
90:4e:b2:b6:e9:fa:ad:32:1d:41:c2:88:41:c7:9a:
a7:30:92:23:ee:96:3e:0e:7d:54:a0:22:d0:90:87:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:51:4D:25:92:14:52:07:F3:CD:7A:1F:B7:43:88:76:7F:7D:A2
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2d:56:0e:a0:5f:82:69:a4:ea:47:e5:8f:b1:3a:85:db:e5:
7d:cf:30:7d:e2:b0:04:44:e9:50:dc:72:1f:b8:9f:c4:d0:28:
7f:e0:4a:ac:84:0f:5f:01:e0:4f:63:66:41:f0:0b:7e:51:40:
5e:9d:ed:9f:6c:b3:6e:77:25:2b:37:05:df:a6:14:5b:27:38:
b5:9a:2d:42:61:3c:ab:ce:a9:ed:65:5c:12:1b:22:25:8f:ad:
c7:fb:5b:a2:36:82:cd:63:d2:5e:60:da:d8:02:df:07:55:91:
e0:69:06:b2:a5:9d:ff:be:8a:e5:52:a8:8b:51:9f:06:f9:b5:
b0:02:c8:5f:0a:6c:b2:2a:4e:94:03:e3:a2:bb:a4:ed:4f:c3:
30:d1:af:90:94:79:e8:73:c1:5f:cb:6b:45:80:a2:1c:1f:1a:
06:34:5c:de:42:12:12:c3:ac:7d:4e:15:29:48:8c:7f:98:3b:
74:17:b9:c6:92:83:cf:27:56:99:0a:ae:f0:0e:ab:66:7b:9e:
bf:df:9b:67:be:82:c2:49:4c:cc:89:85:62:55:02:17:fb:ee:
0d:cb:b5:9d:3a:48:6b:99:52:e3:68:1a:5e:e2:a1:db:be:0d:
92:64:c0:41:af:a2:71:a4:ce:27:3c:aa:ad:fe:fc:5d:70:ee:
60:2c:a4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:01 2025 by rpki-client