Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: 2PUcGjoBcG/U/H5OAJ0kp7T7fUI4HIwLyP9PClanzTY=
Subject key identifier: C0:58:44:EF:16:F5:33:13:B4:95:E2:41:7B:51:20:0E:0F:29:D8:59
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 0194BD4EA55E07C52577D176DBF52E7FE241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: YxGyBQdJJ+tzWkSOiGj0sPw2GEBodE7ELeoIMHFolmU=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a5:5e:07:c5:25:77:d1:76:db:f5:2e:7f:e2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=c05844ef16f53313b495e2417b51200e0f29d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:62:aa:8b:dc:5b:94:78:34:ce:77:6d:ca:
34:de:aa:a5:71:97:63:da:6c:51:18:f0:82:64:d8:
58:42:a4:c6:58:bc:3f:b5:72:8e:3f:2f:21:89:2a:
cb:9f:2d:b1:c5:d6:da:1d:e8:79:7e:44:c8:82:fc:
70:02:14:51:8c:bd:c4:6a:8b:2b:3d:75:23:01:13:
80:43:a5:61:09:a7:4a:b1:5c:95:3d:c5:07:f9:24:
59:07:ea:00:6a:8a:60:70:46:38:8c:a4:6d:bb:78:
15:32:01:57:10:45:30:29:c8:17:a4:85:54:40:4c:
e0:50:f5:e0:eb:3e:38:80:31:8c:09:0f:8b:e9:7d:
32:4a:d1:90:01:0d:a8:a2:20:a9:c3:fc:7b:07:01:
12:f1:94:71:4e:c2:0e:44:e8:8d:2c:42:c9:36:5e:
76:a3:b5:5e:8d:55:af:ac:a0:4d:07:d7:00:80:fa:
97:b5:62:44:6c:57:58:4d:8e:5f:c9:6b:71:b3:a3:
82:21:a7:1e:39:26:ff:a5:29:f8:80:36:35:8b:8d:
ee:c6:e1:6f:c8:48:4b:32:19:0f:a2:c4:82:5c:09:
21:2b:f9:99:d6:d0:e0:f6:73:05:2b:f4:e9:08:81:
f1:c2:a6:e6:05:9e:f6:37:94:d3:8f:bf:ac:64:d6:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:44:EF:16:F5:33:13:B4:95:E2:41:7B:51:20:0E:0F:29:D8:59
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:eb:04:d5:e6:34:48:cc:7a:b9:9f:f6:79:d0:1e:89:44:
99:ea:fa:ab:57:a6:5c:d4:a0:d7:59:93:06:c8:e1:37:99:1a:
2b:df:64:58:1c:a6:d2:b6:59:8d:ba:ef:cf:80:9a:68:37:9c:
0b:c4:aa:98:46:a7:88:4a:f2:63:02:d5:87:df:11:e9:30:02:
fd:81:e4:d0:c8:a4:a9:51:a2:1f:a8:6c:30:95:d5:8e:ba:3c:
f3:91:2f:b7:06:b9:2c:42:81:e7:c0:0f:0b:7a:f6:58:a3:2a:
4e:ed:c7:db:ca:e7:50:7a:42:be:1a:6f:46:cf:64:1e:50:28:
e0:36:8b:b0:bb:33:8c:c0:c2:09:6a:68:7f:d4:84:a4:ae:bb:
11:92:26:ae:fb:1c:f5:5b:e9:b0:5c:15:34:19:e7:71:f4:c0:
5d:e1:4c:d1:1a:27:51:f4:dc:19:67:e4:b4:0a:4c:4d:e5:a5:
77:47:20:c7:bc:ed:e9:3f:17:c8:0d:f2:c8:0a:b1:f8:ae:48:
74:5d:7f:a4:60:7d:48:a5:4d:af:9a:64:88:08:c4:b6:dc:f2:
d4:5a:ea:cc:2b:15:ed:60:0e:ec:fa:28:09:03:c9:f7:eb:d8:
2c:c2:30:56:ae:88:17:2a:b4:38:55:60:76:cd:f6:91:69:b2:
1f:26:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:10 2025 by rpki-client