Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: dSiAiT5eZ6eTqYOJm+bQxnahrfEV+tdXX2uOF0/hDeQ=
Subject key identifier: 6C:16:1C:2E:BB:19:8C:54:9A:DB:8A:AF:A0:C3:83:BA:9B:C8:00:C7
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 0194BCA9E84A349E2BC065ED5562EB5C81EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: J89JpAV0d6kyA2hKZMuQk1R9Jp8vvhK7xrukBXda6Ng=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e8:4a:34:9e:2b:c0:65:ed:55:62:eb:5c:81:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=6c161c2ebb198c549adb8aafa0c383ba9bc800c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:6c:e7:5d:24:2c:fe:de:31:a2:f5:e4:b0:
8a:5e:78:42:6f:18:dd:72:32:b8:40:7b:b0:47:2d:
30:cf:e1:f9:3d:fa:dd:a3:b4:f5:fa:36:4c:17:f6:
1d:61:29:32:ac:bd:f4:77:94:3d:5d:88:a4:aa:75:
08:8c:e8:a4:c7:72:03:5b:85:eb:63:97:73:02:3d:
7a:6f:a7:ee:4c:5c:9d:7f:31:79:27:dd:8c:37:c9:
04:9b:b3:04:e3:8c:bd:60:1d:76:cf:c9:08:e3:7c:
50:37:5b:d2:36:07:bf:25:50:84:20:6a:36:2c:e8:
d5:e5:5d:3b:ba:5b:dd:42:f2:ff:50:f7:9e:f2:c7:
31:d3:39:0b:3f:ca:8a:c1:ef:ea:66:08:ac:89:3e:
84:8e:37:99:b6:25:1a:33:f4:d3:7a:a9:0e:b9:b8:
ed:8d:8d:8c:81:b3:1a:b5:9e:f4:f4:ff:d3:0e:2d:
0b:dd:ce:47:20:b1:67:8a:4e:7c:e4:d1:44:45:55:
8b:59:30:11:77:7f:e8:66:95:38:b8:1a:d2:fe:d2:
c5:ac:c1:fb:5a:72:0b:a9:73:44:cd:c0:08:ae:41:
1b:5f:79:2b:45:2e:48:89:78:5d:b2:57:19:3a:34:
eb:85:42:e3:75:55:2c:50:8f:b9:7b:d9:b5:d9:55:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:16:1C:2E:BB:19:8C:54:9A:DB:8A:AF:A0:C3:83:BA:9B:C8:00:C7
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:91:cf:aa:b9:51:4c:e8:e0:5b:7d:be:57:21:2f:1c:e3:af:
90:d1:43:cc:64:29:f3:fb:13:c4:8b:83:eb:63:d1:9f:bf:d2:
3e:6b:b8:00:db:90:34:50:96:a5:b4:e5:18:86:07:83:f7:48:
64:66:9c:85:85:e5:a3:3c:55:7e:17:6f:5f:66:0c:66:08:f1:
d4:17:fd:57:38:f5:25:f1:3a:48:65:5c:19:58:78:c0:e0:ce:
ca:ef:ae:79:42:d0:20:42:51:ec:39:22:bc:bd:4f:00:c7:d5:
c7:23:ee:18:44:dd:4a:b0:2b:39:bf:a2:5b:58:ec:9b:d8:9a:
ff:2d:2f:90:10:13:8c:53:fb:d5:c3:a6:68:2d:5b:4d:6f:1e:
26:17:aa:e4:a8:e6:3d:d8:bc:a0:67:84:a9:97:4b:5c:04:75:
0f:6d:0a:f2:13:70:d6:ec:9f:2c:8b:18:9a:74:ea:a9:fc:00:
09:55:b0:ec:58:c1:f0:74:42:53:c7:8c:73:2a:6d:ab:e8:96:
87:de:63:fc:78:b8:d3:26:ab:24:b0:86:6f:07:00:bf:d6:dc:
91:67:1c:ac:38:4b:e5:41:67:59:5c:ad:10:c8:2d:61:54:59:
e0:fd:39:d9:a2:9d:cf:a0:a7:46:74:4c:d2:ae:2e:bf:ea:53:
bb:59:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:49 2025 by rpki-client