Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: KimXOxR+6TiiKgNnpv2SzguXIsVff2GTkeyzy06/F+8=
Subject key identifier: 2F:48:7E:55:60:C8:DD:F1:78:E8:83:A3:A0:F6:E4:D5:BE:B2:F7:46
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 0194BD4EBAC614D3D63CEF187A3C34A5DE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 0C25
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: /cwzrNSDn2uL3l/5vLRN+YpXGTPM+yb2pHeXUJ0E/nw=)
2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ba:c6:14:d3:d6:3c:ef:18:7a:3c:34:a5:de:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=2f487e5560c8ddf178e883a3a0f6e4d5beb2f746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:63:21:29:a0:44:0c:14:05:33:21:8b:be:65:
52:ad:6d:0c:c9:1f:05:9a:d5:f6:b3:50:1e:16:b5:
96:f0:b3:5a:8f:91:d5:89:0c:40:11:7f:e0:51:64:
21:d5:80:eb:3a:e1:5e:f1:40:19:6b:66:3e:b1:50:
e6:3d:5a:b8:a5:20:35:d4:f3:5c:c2:53:97:3d:78:
36:a8:91:7b:41:c9:95:cd:e7:c8:6a:ea:c4:00:d7:
e0:02:a1:81:f0:e4:8a:67:42:91:33:2f:01:e0:77:
80:81:9e:ee:8b:cf:5d:55:67:ac:29:cc:6d:cc:07:
1d:2c:0e:57:93:58:0f:09:aa:5e:78:54:a9:98:80:
62:9f:e0:4a:f4:53:f1:bd:46:b1:f4:1c:cf:e5:8c:
a0:78:5b:9d:58:37:d5:be:ea:3b:4e:24:3f:c2:79:
69:be:41:66:af:83:13:3f:c1:45:d6:55:b5:24:41:
68:47:6e:7e:67:0f:f5:08:f3:02:30:5d:3b:12:7f:
e7:5a:df:f9:99:67:f9:ca:36:d1:a9:2c:1c:0f:38:
6d:44:59:50:e9:c5:d7:56:d6:31:0f:c6:67:e1:fa:
5d:2e:aa:5c:0a:48:76:b1:14:c4:51:eb:87:be:48:
a6:fc:8e:7d:e1:c3:e3:3f:1c:49:08:27:d3:3b:d3:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:48:7E:55:60:C8:DD:F1:78:E8:83:A3:A0:F6:E4:D5:BE:B2:F7:46
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:68:cd:01:88:2e:62:49:c8:07:0a:06:9c:ae:61:9a:f2:
fd:b8:23:c8:19:6b:6f:9e:e7:92:ef:e1:46:2b:9a:be:0c:78:
67:c1:4d:70:e7:6a:4a:ca:45:7a:4d:69:26:01:3b:17:fd:b3:
47:67:00:f9:c1:a4:61:92:2a:b5:f0:fb:62:04:f6:e5:36:f3:
8f:5a:20:a2:2b:cf:6d:47:c4:87:01:0e:8d:af:fc:91:35:1d:
24:42:69:34:35:ff:a3:e4:32:7f:a0:bd:e9:b5:14:ee:04:79:
d9:27:30:e4:df:fb:fd:e2:7c:9f:03:de:01:2b:f4:81:fa:45:
73:ea:fc:8d:71:49:d4:0f:11:89:95:a7:4d:b3:69:19:1f:03:
d8:92:0b:09:f1:43:cf:74:ba:a9:80:26:8f:53:6c:f0:d6:2a:
0b:11:ad:a3:d9:88:28:55:54:ee:7f:de:63:da:78:10:d6:35:
31:fb:1b:f5:d8:e9:c3:4c:81:19:fd:ff:30:e4:dc:86:ae:24:
87:fd:60:1c:a2:b8:51:e1:81:34:09:ab:f2:8c:1c:61:d9:31:
ab:81:5d:a9:12:48:99:e7:35:ee:59:a4:57:26:fb:2b:63:36:
a3:3e:8e:b5:ac:95:f7:e8:b2:f8:82:02:82:85:21:d0:29:4c:
3b:d0:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:56 2025 by rpki-client