Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
File: 1sSAuslyYH_atgVZOoS4NkxqsbA.mft (raw, json)
Hash identifier: GPgEM/9Wey6cVbMPVtwIyTZaKDNk2srJcLiGL7ibRX8=
Subject key identifier: FB:2C:70:4E:E0:BC:EE:4E:1F:30:93:3D:4C:54:E0:17:A0:B5:E5:4E
Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
Certificate issuer: /CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Certificate serial: 0194BCAA3A7FD8B67FD879D327CE95BDD0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 1sSAuslyYH_atgVZOoS4NkxqsbA.crl (hash: eVSPmWYyKpqww9jeWVT7r2Ez8vdZ22bNRHdVln4mSyA=)
2: qSALXGZS-mStlLpg8jjf75z_AxA.roa (hash: JTmyN1Wglwwaiz8Y4z1qxOyBmB8F9ra5LEBRhnN+ctY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3a:7f:d8:b6:7f:d8:79:d3:27:ce:95:bd:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=fb2c704ee0bcee4e1f30933d4c54e017a0b5e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7b:31:f7:c2:45:df:09:0c:49:70:8e:33:fc:
6e:5f:ac:24:95:cf:0f:f1:a7:f3:11:96:82:d9:02:
6b:49:3f:40:47:6f:24:4e:43:b1:93:98:61:c2:eb:
99:c3:08:f3:0b:f1:0b:fc:31:55:d6:61:2d:ac:ec:
5c:34:09:05:d2:3b:22:44:dd:a8:ff:05:21:f4:1c:
68:53:18:75:8c:fc:0a:cc:d8:b7:c4:df:7c:49:3a:
04:aa:92:a1:63:67:d1:3c:21:45:1a:b8:b1:62:f3:
18:62:b3:6f:e6:ed:b1:07:56:5a:95:73:19:02:9d:
a8:16:52:73:ed:69:a1:6e:ee:b3:e5:0c:a4:b7:26:
a1:45:cf:93:f2:f1:05:e9:33:ce:67:25:fe:32:67:
80:2f:57:45:8c:03:e6:ef:b6:92:a6:18:1f:6c:b8:
3e:c0:2c:0f:4b:3f:3b:97:51:e3:81:d3:a9:aa:c9:
a5:af:95:83:8a:67:5f:b5:29:ab:60:cb:8c:46:d1:
83:e8:09:6f:6a:bf:3d:9e:15:36:97:44:53:2e:a7:
8a:83:17:d9:4d:c6:d1:bc:6f:09:57:34:e7:1e:d1:
fe:66:e1:7e:18:b8:df:ad:00:c0:f4:14:8e:1d:bd:
c3:e4:e0:f4:7b:28:1c:01:e7:b7:5f:a5:c4:e4:c8:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2C:70:4E:E0:BC:EE:4E:1F:30:93:3D:4C:54:E0:17:A0:B5:E5:4E
X509v3 Authority Key Identifier:
keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1c:2d:07:30:33:0e:07:b4:b7:e5:9f:a0:1f:e4:fa:21:28:
51:3b:76:0a:c0:95:64:5c:68:ac:62:9b:36:ba:c7:15:86:86:
ef:12:67:be:78:d9:da:14:ba:1b:c8:ee:d2:04:91:fe:b6:67:
eb:5e:1b:36:37:a7:42:f5:66:14:7a:b4:35:46:4d:4e:9c:c8:
fe:fc:81:2c:3e:1a:51:39:8c:d9:41:32:48:d9:da:91:11:05:
36:e6:20:8b:d2:3b:6b:fc:81:af:de:e6:d5:1d:ca:34:a3:04:
f5:7e:48:2a:99:73:ef:a5:1a:ba:63:ff:ac:e9:32:b6:10:3a:
6d:ec:6f:88:3e:03:e4:66:22:6f:c7:c3:8b:6e:de:74:2a:be:
cc:8c:71:8d:8a:0b:78:32:38:10:88:c6:d6:7c:49:1b:10:f7:
ec:43:52:83:9f:34:3b:31:4d:f9:db:24:33:b2:27:d0:7b:fb:
d1:e2:bf:96:79:fc:c9:47:ba:72:09:9d:df:0e:7f:92:d8:56:
2e:3b:75:f2:3c:45:7b:28:9a:59:f9:af:0e:0d:e0:19:f7:be:
80:07:d3:3e:2e:01:cb:d2:58:69:51:e4:b1:f0:ac:99:97:ed:
3e:74:c2:9c:67:64:db:a1:d2:43:8b:68:45:74:09:2b:60:55:
d3:78:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:28 2025 by rpki-client