Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: JIF37vTaxbPcQExh6QX0XLBKWtSBpVNxunWjNrMGYYw=
Subject key identifier: 74:A5:23:1E:03:3E:17:0C:17:9D:26:17:FB:02:DB:B4:F0:54:4C:F5
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 0194BC04BB91FB69435809BE5E590BFDC4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 0FAF
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: Qi26U8ljho5Z5aeSJ1ZeYP79Pwv07uAuJCMipDuiVzw=)
2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:91:fb:69:43:58:09:be:5e:59:0b:fd:c4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=74a5231e033e170c179d2617fb02dbb4f0544cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:13:87:5b:22:96:95:99:c1:7b:5a:37:01:
80:15:7d:34:f9:3d:2e:06:ee:6b:c8:5a:d2:7b:7d:
6a:eb:68:18:2b:aa:5c:5a:c7:d9:13:6a:85:d7:36:
1e:2d:0a:61:a9:ff:34:30:a3:26:48:a9:09:9f:88:
d5:e6:4a:ee:c7:18:74:49:05:52:81:9e:71:08:cb:
49:aa:c2:82:d6:c3:12:7b:d5:be:22:15:1f:76:49:
e7:f2:f3:6f:18:6b:13:33:e8:16:f1:01:90:e1:fd:
0c:85:ce:f7:f3:57:26:05:a0:9d:f0:82:19:11:a5:
8f:18:95:c6:34:7a:3e:55:7e:9a:02:1a:67:e4:4f:
6f:7d:91:52:ee:e4:79:03:d6:f2:e4:48:b2:31:ff:
4a:74:c1:b7:b3:3c:35:e9:2d:b4:e0:76:a8:d4:63:
dc:aa:45:4e:f7:fb:60:eb:6c:9b:74:fb:6d:87:ac:
23:09:78:ef:7c:fb:08:a3:c5:8b:58:c2:6f:ae:6a:
34:fb:26:b0:52:4f:21:05:a1:76:94:e2:15:6c:0d:
71:84:77:56:69:77:0f:7d:3f:58:0f:9a:10:dc:d4:
1f:19:77:0f:7f:99:f9:c6:69:1e:ee:32:ba:3c:08:
0a:66:0b:32:82:ec:8c:c1:64:79:05:86:d9:9e:4a:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:23:1E:03:3E:17:0C:17:9D:26:17:FB:02:DB:B4:F0:54:4C:F5
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4a:e6:ab:b8:d1:66:82:b5:4d:ea:98:2a:69:7c:37:9b:60:
96:da:31:ab:41:4d:2a:3a:4d:68:0f:b2:ba:d9:ca:81:0d:07:
52:55:78:e0:be:15:30:00:80:f0:4a:e3:5c:60:73:35:a3:f9:
bf:15:9e:12:86:98:48:93:bd:76:c1:a2:e6:d7:fc:7b:20:11:
43:59:bf:76:0f:0c:e7:01:30:e9:f7:35:b9:ec:39:a9:22:a2:
d8:a5:9f:e2:49:24:c3:08:ae:40:a1:b8:91:bb:e1:c0:5b:3c:
78:f8:36:a7:c9:27:46:07:c7:86:9b:9d:b4:d9:05:6e:ab:e0:
51:41:8e:c6:9e:7d:db:b0:f3:42:8e:2e:6c:d7:d4:8f:fd:04:
01:f6:a4:25:0c:55:0d:fb:6e:25:86:6f:92:7c:96:15:b8:8b:
fd:80:7f:32:e5:5d:aa:e3:45:aa:30:27:09:2d:46:28:c9:b8:
3b:8f:59:65:fb:a2:c8:df:e7:b0:3e:61:22:36:f7:d3:74:c5:
94:af:1c:99:18:39:26:35:3f:c0:db:21:37:48:a2:4a:9c:ab:
52:91:99:76:36:e9:8b:3a:41:68:a3:ab:38:4e:3f:6c:e7:99:
5f:42:a1:66:0f:28:55:f9:b1:13:de:e1:8b:5d:d7:35:38:35:
44:5f:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:58 2025 by rpki-client