Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: auN/vJ3rVgHq3hG4y0hPomqzvLopxmByUVJiG/YHok0=
Subject key identifier: 5C:D2:2E:79:79:33:68:86:50:DD:FF:02:E8:FB:69:67:EC:A8:FC:04
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 0194BC3C438EACDC66E3B7F23FCA6C84F1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0740
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: 80fTV5AMyz+gqrBrGmMbuTJiiKzR6i+vOjGEtWaRDmM=)
2: _KxvEwb-05zypoulu-kOqoL22-A.roa (hash: iIrzlSKXJeml3wWcOMj0MUUk02aq1R81c8+dmUXm/h4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:8e:ac:dc:66:e3:b7:f2:3f:ca:6c:84:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=5cd22e797933688650ddff02e8fb6967eca8fc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:c3:29:23:47:de:23:e3:28:10:aa:f4:7b:
45:38:ba:70:f8:d0:22:1c:46:6a:80:4d:0c:fd:f8:
ed:28:c2:f9:5a:52:57:41:01:c0:61:af:86:93:05:
50:c0:4a:63:f6:00:d1:ce:3f:8a:17:e5:44:f0:79:
a1:7d:40:fe:48:71:46:d6:41:db:a1:1e:5b:d6:db:
aa:aa:f1:4c:b1:8d:f6:21:73:4a:9f:f1:32:d1:6b:
64:16:ce:0c:bf:4d:20:37:bf:34:b1:da:e1:fd:ed:
d9:db:84:f8:64:7d:97:ed:c2:97:d7:c9:0f:f9:f9:
85:8e:c0:a7:30:5e:a7:ab:55:29:c5:2d:58:90:3e:
53:68:0d:24:1e:66:38:c8:c6:53:f9:66:84:11:e9:
de:a4:eb:92:95:13:c6:8b:31:34:92:94:38:aa:09:
38:72:a8:c3:3c:ce:6a:77:81:1f:6d:d9:a2:26:10:
dd:49:f0:37:6a:bd:e3:5a:b0:e1:51:aa:ca:a5:72:
bb:d5:6f:1c:6a:fb:85:98:01:af:98:7e:65:69:2a:
a8:bc:0a:a8:a4:2c:8d:26:56:fd:98:a4:8d:8d:24:
1a:f3:44:c9:2a:4d:25:80:5d:5a:bb:97:04:13:5a:
bb:13:bc:6e:58:f7:52:c8:52:b5:20:4d:97:e5:33:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D2:2E:79:79:33:68:86:50:DD:FF:02:E8:FB:69:67:EC:A8:FC:04
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fe:1b:33:c1:2b:d1:e0:fc:6f:d2:cc:56:62:d3:c2:9d:9e:
97:9b:2d:26:68:d4:13:27:17:23:d8:2d:d2:68:4b:8d:6d:26:
70:95:98:bc:55:bd:8d:8c:d6:05:60:31:da:8d:6c:1a:7b:32:
0c:4d:04:ba:c8:67:18:55:c3:3e:74:d3:bb:4b:32:a8:2b:e0:
bc:c9:59:36:3e:35:0d:c6:5d:ac:a1:b4:d9:da:00:9e:cd:6e:
21:a0:43:98:85:1e:9b:5f:db:c1:15:30:7b:c0:98:df:4b:bb:
a9:50:f3:48:ab:8b:bd:33:29:58:33:65:cd:6b:d8:b3:84:c7:
d1:d9:ab:08:12:10:71:a0:0f:88:70:99:a8:1c:96:94:50:0d:
0b:b8:3a:c1:2c:ef:25:42:94:92:1b:be:77:e0:72:be:4d:74:
6b:a7:ae:11:0b:57:ac:11:ce:bc:26:1a:4c:6c:ea:b8:b3:0f:
58:5e:bf:5b:66:c2:f2:d7:02:95:42:85:04:4e:c6:59:94:8e:
12:9b:92:9f:95:ad:64:6f:7e:f1:b6:02:92:36:61:47:9b:ad:
9a:be:8d:aa:f2:68:a1:cb:19:8f:f0:77:8b:1a:1c:4a:9d:a2:
da:c8:49:bd:5e:ec:be:5a:57:73:2b:d5:d8:11:66:98:7c:88:
83:61:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:53 2025 by rpki-client