Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: wBMzsnmstOsS6EmtL8v4v+DFw//LQ8CmZcCHNdQjsE0=
Subject key identifier: 3D:66:60:50:C0:94:FA:98:78:B1:7B:A9:AC:7E:A4:52:03:8B:96:70
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 0194BBCDF4D04483DEE53B4F1613322DD24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0B8C
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: kFxm3pa1wwOk5iK4ZN2ZI6uA3zwfbei3zZUfckJmO/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f4:d0:44:83:de:e5:3b:4f:16:13:32:2d:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=3d666050c094fa9878b17ba9ac7ea452038b9670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ae:cf:0c:45:a3:dc:c4:bc:e1:c4:40:5a:e2:
f6:12:b9:03:19:3b:b5:ad:7d:65:61:a5:0d:6d:15:
51:3b:cf:21:3a:c7:98:fa:63:b1:5c:09:e9:4c:02:
4d:2d:c5:2d:b4:18:1b:e1:33:5e:b7:84:60:e8:b0:
60:80:f6:c4:d2:76:53:c1:b8:e3:d1:10:f5:d0:03:
6d:af:1b:26:c1:4e:07:43:51:40:4e:e5:06:28:19:
fb:f1:8c:6e:76:3c:66:51:cc:cf:98:10:71:ad:c0:
21:d7:ed:02:ed:d0:f4:07:03:da:74:c2:4f:02:50:
6d:1e:1c:0a:13:80:e0:eb:41:67:be:52:6b:ad:d6:
90:ed:ba:ed:fe:86:e0:ae:e4:8e:ab:03:f4:0e:4c:
7d:2b:9e:66:ef:97:fa:22:80:e3:20:e6:31:c6:54:
42:5f:9d:65:b0:0e:8f:7d:6d:fa:bb:45:0c:2f:79:
05:5b:dc:17:4f:28:28:0e:44:b4:ba:b7:06:18:9d:
bb:68:68:72:b6:b1:c0:f8:15:4d:5e:8e:f6:a5:7f:
ab:d1:e5:d8:6d:54:18:55:6f:ad:94:55:36:0a:c5:
c0:46:ed:a3:f7:4e:c7:0e:81:b7:7d:12:99:54:44:
86:eb:6d:e1:9c:04:13:1e:44:fc:c5:0f:45:95:7b:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:66:60:50:C0:94:FA:98:78:B1:7B:A9:AC:7E:A4:52:03:8B:96:70
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:66:e9:fd:60:eb:ba:f3:a2:28:14:a3:e5:be:c3:2b:b0:
02:44:7a:c2:46:46:91:cb:60:fe:72:7f:3e:59:9d:a1:67:36:
29:33:ac:d7:af:c5:0d:d8:a3:65:d0:ad:ca:30:b4:f4:69:b0:
ab:12:0f:bf:4b:d0:ed:b0:3d:1c:16:df:91:64:cd:f4:f4:1a:
f1:52:f7:11:e8:cc:88:23:d3:e4:0b:d9:67:51:19:32:2c:8a:
de:cc:91:49:bd:9f:84:7b:98:7e:1e:de:fd:b5:3f:53:13:e0:
13:fb:00:75:47:c0:50:e4:6b:17:59:cb:37:4f:d9:85:9a:2e:
ce:b8:3b:db:57:db:a3:75:85:62:62:d5:1e:8f:3e:a3:0d:c9:
04:16:ee:79:5f:08:5f:7f:6f:50:94:1d:f5:f2:47:60:f3:be:
44:26:56:c1:0b:1c:07:8e:c2:47:41:67:63:77:13:db:ea:34:
3d:67:80:6d:f8:f2:78:12:74:86:14:fc:18:ff:90:a7:e0:ac:
c1:e6:2a:4a:ba:3f:c0:6f:01:17:eb:80:97:59:a0:1b:66:09:
fb:1c:d9:a4:de:fa:d3:50:f1:90:d5:94:20:84:07:13:94:ad:
fa:8d:82:88:5d:c1:1a:1a:37:4c:e9:3f:e3:34:aa:33:49:28:
a0:3a:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:09 2025 by rpki-client