Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: SRubqhr7QiVcnktc1habYOqMldGPCol0zWZayLA2xA4=
Subject key identifier: 87:DA:3D:42:9D:5E:84:07:EE:2A:9A:47:73:B3:20:B2:FB:30:EE:9C
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 0194BBCDFD64E745BBFEBD81D41E08093414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 08FE
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: E3w6FTfm0WMptNEjELtZcWH23/9LYn3Asjuhzrsrtcs=)
2: k0ebJfx4OX3BZ7FmMcHzT8cxLzs.roa (hash: P7VX1AhbYROtx+X+LjgL53+vnOlf5ehxXgKP01/WArk=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fd:64:e7:45:bb:fe:bd:81:d4:1e:08:09:34:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=87da3d429d5e8407ee2a9a4773b320b2fb30ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:9d:9e:1f:82:b4:00:28:db:e2:97:da:aa:
49:60:e5:98:74:19:6b:c4:b5:3c:c1:95:4d:0d:89:
ae:91:a1:52:84:96:1f:1d:3d:55:c5:a5:90:d0:08:
20:ab:87:f3:1a:10:cd:2b:3b:08:41:cb:c6:56:66:
39:44:74:c3:6c:10:33:72:85:19:50:b3:35:5f:c3:
ff:8c:73:b6:f8:5a:f5:8b:ec:1f:a1:9e:50:40:2e:
56:6f:ce:e3:6d:6f:e2:e1:33:45:02:6a:aa:c0:a1:
a5:7c:3c:78:f1:59:04:5c:1d:7b:a5:b0:6f:25:44:
24:47:3b:04:e9:5f:8d:7c:65:88:6c:b4:9b:dc:62:
70:52:01:ff:cc:65:94:f9:b0:9b:c6:fd:39:f3:40:
5f:ac:69:d9:d6:9d:ec:45:91:c1:ee:3d:10:ca:44:
da:49:19:87:0c:18:95:b5:b6:23:18:bb:c0:27:b7:
2e:c4:fa:2c:a7:0e:25:fe:df:bc:f1:95:dc:e8:8c:
e4:6f:4f:85:4a:05:86:3a:c2:4e:d9:a9:0c:c0:38:
57:0a:fe:15:d7:51:1b:6d:9a:f8:f1:a2:00:b5:81:
6d:08:ed:f1:30:75:e2:ff:85:93:a5:50:d2:c2:e6:
f8:55:87:7e:7c:7d:8f:85:58:80:ec:bd:92:29:33:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:3D:42:9D:5E:84:07:EE:2A:9A:47:73:B3:20:B2:FB:30:EE:9C
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ff:4e:ba:02:52:8b:ed:1f:9f:f5:5c:75:2a:71:a5:17:e2:
d3:93:43:87:a0:ce:4b:8b:70:f8:21:78:a5:c3:aa:e8:ee:07:
e1:94:2c:25:ba:43:f9:a3:38:55:09:9b:19:3a:06:50:7f:15:
97:24:27:38:8b:f0:1e:30:a7:d8:90:5f:00:a5:be:bb:ab:97:
66:f8:cd:d9:b2:1a:c1:85:70:db:94:07:b2:c5:f2:5d:95:df:
b9:c6:9f:5e:61:4e:80:09:bb:73:24:05:a5:10:b2:c4:85:d8:
ce:60:d1:56:32:f1:4a:ab:e2:2c:be:4c:86:4f:12:b8:df:e3:
a7:79:f4:20:77:c9:df:0c:ba:00:48:2e:bc:9c:46:41:83:26:
4e:8c:83:23:21:74:52:88:d0:eb:1b:12:c3:77:6e:ee:a2:fd:
a1:a0:34:a7:8f:13:c7:3a:ef:fd:9c:75:52:5f:a5:80:7a:99:
ac:b8:d3:87:f0:15:63:06:a3:a7:49:3e:28:d6:a3:03:fc:c6:
25:13:7d:b0:72:1d:01:7a:90:d2:e8:2e:c5:5a:cc:23:15:a5:
bf:29:74:9c:b7:f2:9b:32:37:d2:29:3e:bf:0a:65:4c:b5:70:
18:c6:42:21:12:62:49:dc:44:ff:75:1d:7e:3b:0c:7c:93:f7:
64:6f:bf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:59 2025 by rpki-client