Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: tNpJAHzolJ5k1m5rSGVwP3yrsy06nrNCN/HIm9yOT7U=
Subject key identifier: 80:92:AB:08:07:73:08:C7:4F:71:2A:9E:38:D2:59:82:FF:93:56:B5
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 0194BC72CEA1D34F4DA06AB8A64C0E6D6B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: CGZ3PDldUl8/aBT7j5E91uSafQAWwjwCg5+PasUP+0U=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ce:a1:d3:4f:4d:a0:6a:b8:a6:4c:0e:6d:6b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=8092ab08077308c74f712a9e38d25982ff9356b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0f:16:93:56:b5:1c:87:18:cd:ce:37:9e:9a:
76:3d:d0:92:c7:73:15:2a:94:4d:35:19:3f:83:f8:
d0:94:84:af:f1:16:ca:44:5b:14:b3:b6:bd:d6:b7:
7d:67:74:fe:61:75:8f:4b:04:8b:63:92:55:ed:bd:
e2:bd:0d:4f:4b:93:ad:18:5e:23:67:6c:5f:62:43:
90:ae:84:b9:4a:b2:a7:56:de:d0:28:fb:9b:ed:ab:
6c:a9:c4:05:be:a3:f1:9c:e1:de:a8:79:fc:68:46:
7b:1d:99:34:a7:e2:10:d0:1e:77:92:6b:c2:14:8d:
d4:c4:4c:83:c3:5b:9b:4f:4b:58:fa:a8:ec:df:18:
9b:a1:57:23:03:93:e0:3d:13:d9:b2:72:fb:f2:cf:
ce:02:bb:1b:a9:88:71:bb:a8:c6:36:39:9b:a8:d4:
cd:d5:d0:2d:7a:85:21:34:52:53:51:bd:b6:65:10:
04:49:ab:d0:a9:81:ad:de:9d:be:a2:8c:49:ec:a7:
34:47:c3:88:66:e5:ec:48:8e:d7:51:84:53:fc:61:
17:1f:37:e3:99:b7:48:d9:fd:2d:d8:71:d3:27:6d:
b8:64:47:e5:25:1b:7e:67:ed:22:6f:c3:7f:83:1b:
7c:04:84:10:b4:25:48:cf:bc:3d:d7:19:1e:8f:59:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:92:AB:08:07:73:08:C7:4F:71:2A:9E:38:D2:59:82:FF:93:56:B5
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5c:8d:f9:13:a7:eb:08:29:e2:23:92:fb:7a:6d:2c:d2:aa:
4d:af:98:0b:5a:92:c8:6c:47:da:58:71:96:6c:19:76:90:ea:
7f:2f:05:6b:59:9c:45:61:6d:dd:17:d9:cc:e3:34:13:33:8e:
54:04:24:49:39:6c:d1:24:c9:36:53:98:e2:1d:8d:53:34:e8:
46:af:80:31:77:66:db:eb:e8:a8:86:02:94:a3:a0:e2:53:8d:
56:31:6e:3c:48:eb:e9:4d:55:18:a2:76:b5:27:08:bf:7b:c7:
a6:af:1d:a0:28:20:a0:12:b8:50:c7:8d:dd:cf:a6:47:91:18:
28:6c:32:49:b8:8f:c7:17:de:65:f9:75:64:67:c7:c9:36:da:
b5:e5:26:b3:fc:d5:f8:a1:f9:17:0b:fe:33:dd:98:b0:62:03:
db:5c:eb:26:34:2a:32:47:34:f1:ac:13:ec:c2:c1:ea:89:00:
74:b0:1f:15:94:30:01:14:66:37:db:96:5e:85:cb:ce:e9:08:
a1:d4:a8:ba:c8:b6:12:ae:a7:a6:e8:38:53:22:70:67:d1:d8:
46:eb:f5:e6:53:a6:40:09:92:1a:10:af:6c:73:c9:99:2b:eb:
f0:ab:ad:93:b6:5a:51:7a:b6:b3:7d:c9:ac:a5:4c:08:f5:79:
ee:5c:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:14 2025 by rpki-client