Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: /lEApr8w0/K0dLHC5BWANzq6kGI3y6uRtRSHL5qcPww=
Subject key identifier: 91:6C:FA:72:87:BF:5E:E2:67:4E:B9:82:FE:A0:AC:4C:B3:90:92:F9
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 0194BD4ECBC370D4EFB575AC0331BCFD4432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:45 +0000
Manifest this update: Fri 31 Jan 2025 17:00:45 +0000
Manifest next update: Sat 01 Feb 2025 17:00:45 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: sfbl+M55HopNgt17XwVRdDebh91Cg0G3CrRXUEAtpl0=)
2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:cb:c3:70:d4:ef:b5:75:ac:03:31:bc:fd:44:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Jan 31 17:00:45 2025 GMT
Not After : Feb 1 17:00:45 2025 GMT
Subject: CN=916cfa7287bf5ee2674eb982fea0ac4cb39092f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:b5:8d:43:4e:11:92:8b:ce:ba:31:b1:91:
3c:aa:6a:e2:c6:25:b6:ae:20:c6:c4:c4:83:1f:c8:
76:6a:c5:64:24:04:8a:65:98:cd:dc:fa:2b:dc:b0:
03:4e:18:4d:84:03:80:b4:5b:b8:20:82:7d:0a:7a:
9e:bb:3b:aa:ab:26:b9:8e:08:56:ba:49:eb:be:da:
ca:2d:16:3d:c6:5d:15:27:42:ff:ad:65:3c:a1:44:
b7:2c:78:6c:d2:a0:2d:05:2c:85:56:4d:49:a8:ff:
4c:52:d5:1d:bb:c3:b5:7e:94:c0:9e:52:18:28:98:
7f:4a:52:ab:f4:77:c6:1e:d2:4d:84:e1:cc:04:9f:
de:bf:99:2f:27:e2:2d:89:1a:30:24:6c:27:ac:09:
14:9f:4f:09:43:a6:a5:d8:82:1c:3d:c0:bb:62:6a:
18:ea:d2:16:a9:ed:1e:8e:f9:4f:b2:17:35:61:46:
e6:75:db:c9:9d:c8:67:ee:85:41:e2:10:29:74:29:
f2:9b:76:37:12:99:e4:7c:03:e5:0b:5e:68:ca:96:
8f:df:98:5d:48:a7:67:d1:68:75:49:39:66:f6:dd:
a9:de:50:9a:13:0c:d8:c4:ad:c1:92:f8:4c:6f:16:
5b:3d:fb:0e:ab:74:3f:ed:e5:82:ea:ad:55:5c:c3:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:FA:72:87:BF:5E:E2:67:4E:B9:82:FE:A0:AC:4C:B3:90:92:F9
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:19:83:e3:4d:aa:a5:fb:7a:36:3c:13:e7:52:0a:21:ab:5e:
5e:98:81:6a:53:9f:bb:10:03:07:08:d5:04:60:6a:bd:a1:98:
e0:77:0e:de:1d:ee:e9:88:5c:bb:84:19:d0:a3:5d:bf:fb:53:
65:cf:ed:24:49:37:75:f7:a3:dc:a3:0d:a0:d1:af:a3:32:5b:
2b:5b:01:1b:77:c9:8c:19:86:96:39:0e:f2:38:ff:c0:f6:10:
5f:bd:19:9f:0d:22:0c:23:8d:57:d3:9d:0e:46:75:c2:00:fd:
31:b2:ed:81:c2:37:35:9c:85:51:db:7c:b7:76:ba:89:0f:0f:
8b:1c:07:80:6d:00:f2:13:52:2a:91:ac:4c:9a:97:2f:1c:d3:
bc:f0:49:4d:a9:10:98:33:5e:47:84:a2:56:28:43:c0:98:0b:
6c:2f:a1:72:c5:73:cb:a3:92:54:36:8e:9b:18:58:d6:11:f9:
00:ae:73:fa:40:7d:ca:3c:a5:bc:49:b7:ca:d1:b3:1a:eb:70:
38:d9:7c:fc:d2:50:36:45:10:9b:3f:55:00:bc:26:a4:8a:8b:
38:74:00:63:c8:3c:ea:a8:02:45:18:d0:cd:01:3a:8d:e6:22:
28:02:a7:34:07:a3:eb:40:6d:81:e5:6d:b7:e5:b8:17:ec:1f:
47:87:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:13 2025 by rpki-client