
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: LAG9P8g1b0P9OS38pHMipieDDySRKDqUjN0TBitjzcw=
Subject key identifier: 22:D3:2A:3B:38:F9:E6:4A:E0:D8:5B:56:99:BC:91:B2:8D:34:C8:FD
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 0194BD85922603C416F2F099CB038EA33F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: C4
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: MqXxcJmCSqOnSg/J+/JAFirUYie66SFCGm0dA0ZiTjQ=)
2: jj4Fs6tF4xq0DkAC9XMLg7s4mmw.roa (hash: sivrAn80+5m3Ncmw+RXEZVkYOB9TZa2z37JwsZzW78E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:92:26:03:c4:16:f2:f0:99:cb:03:8e:a3:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=22d32a3b38f9e64ae0d85b5699bc91b28d34c8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:4e:8a:1e:b2:bb:3c:cb:58:33:06:33:f2:
18:68:96:3e:67:ac:79:09:6d:73:4d:bf:10:36:4d:
81:8c:03:6c:df:28:2d:0e:19:c8:b5:99:f4:eb:52:
5b:3d:b7:4a:0c:56:4b:ce:4a:8e:1c:6a:7f:37:eb:
c6:59:1d:5d:bd:a3:34:25:61:fd:bb:9e:62:15:d9:
8d:e2:60:15:b2:65:2b:79:bc:2c:9a:94:27:ab:ed:
80:8d:73:18:7f:2b:13:7c:aa:52:74:66:84:40:81:
fa:8a:b4:c0:d3:bb:cf:e6:79:15:0b:db:5e:d6:02:
cc:4e:0b:f4:ce:21:a0:a8:64:8f:11:8f:52:99:e4:
36:22:45:20:21:eb:88:07:51:7d:d1:3a:c6:16:a2:
2c:08:01:b0:38:3f:8b:dc:75:f8:a5:17:86:de:09:
a7:96:cb:fb:cd:81:a6:d6:ab:db:d7:a6:3a:c1:bd:
77:4e:63:37:4e:43:af:77:d2:aa:80:f3:16:74:fc:
be:7f:ef:d3:cb:2b:7e:a1:3c:ab:8a:b2:4f:96:03:
e2:a8:c5:49:79:c6:90:d4:2f:84:fb:6a:33:15:52:
74:2e:f6:c5:83:b4:d2:04:cc:16:57:22:71:86:c9:
f9:46:0c:c2:6f:aa:75:19:48:94:6e:f5:47:00:1c:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D3:2A:3B:38:F9:E6:4A:E0:D8:5B:56:99:BC:91:B2:8D:34:C8:FD
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:63:2f:a8:61:08:a6:5d:dd:b6:14:7c:97:66:62:9a:73:d9:
92:7f:c5:0f:e5:ad:76:2b:ca:7c:df:c5:0e:4f:09:d2:7a:2c:
81:e0:df:4e:cb:2b:a3:7f:ae:e0:6b:8c:2c:85:3e:ef:37:97:
29:e4:1c:31:88:1a:ee:07:cb:90:15:c6:b1:f0:6c:5b:0d:c9:
d7:78:ca:10:cd:13:8a:a2:b8:48:71:04:87:6b:ab:64:e4:a9:
77:c3:5a:2e:0a:fa:8a:fb:11:2b:f4:70:43:9b:6c:e7:bd:fe:
a6:cf:b6:35:8d:a3:bc:15:ba:2e:f9:43:e9:68:12:f3:bf:bd:
d0:7f:89:2f:aa:b8:e3:99:dc:7b:4d:49:fe:96:39:0a:4e:68:
59:3a:39:91:94:9b:c4:fa:ab:f6:36:bf:d8:0c:b6:49:69:ad:
d9:3b:7b:c9:1a:f9:ec:76:93:70:e7:7d:9b:93:4b:6d:c8:a8:
93:2d:b1:50:ec:3f:06:1e:f2:49:23:ac:0b:ca:e6:4c:3d:43:
b3:2b:f3:bb:f7:63:e1:9c:47:aa:b3:af:6b:8a:96:cb:87:9b:
72:b9:b2:a1:72:c6:47:51:c4:f3:77:6f:c5:36:87:54:9d:b5:
dd:3e:e3:a8:8a:1e:7a:d1:28:3e:30:f1:0f:05:f7:e8:4d:d8:
3f:2f:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:03 2025 by rpki-client