Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier: VH7S0WVXqwbI7dHiOP3iRAt9/pJfn3i/RA+tgK972Uc=
Subject key identifier: 43:69:89:5D:7D:5A:C0:2D:75:3D:67:B8:84:9A:0B:6C:05:73:1D:ED
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 0194BD4E9B8BA658DD90F18693D893BE286E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number: 0BC5
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: puIvFrY58o+ASkAFQimwAPZv6D6RAMN3AyIy2QrzHo8=)
2: ejFgtEL_yvwBtcTkPUKqVp7iqdE.roa (hash: 91fqX0EGnVHzpPjrAaOzm7AgDnbWTA0eBRKoj2PIzpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9b:8b:a6:58:dd:90:f1:86:93:d8:93:be:28:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=4369895d7d5ac02d753d67b8849a0b6c05731ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ae:2f:0d:39:3a:5d:54:3a:34:51:3a:43:d1:
96:51:1d:1e:7a:1e:be:85:e4:1f:cf:92:d6:01:22:
46:5e:57:f4:29:6f:a6:af:7b:43:b4:c4:96:46:8f:
f4:68:5b:2d:16:89:67:1c:8e:8c:b5:b1:6c:ea:43:
3f:4c:32:a8:a2:a2:bd:3c:38:14:46:79:60:6f:fe:
a6:c5:0c:7c:d7:9d:79:e4:b8:6e:0a:99:79:7b:2e:
b6:d5:e6:c4:81:ff:ba:51:4e:3f:92:6c:f8:8e:8e:
22:a8:98:f0:95:dc:ae:03:fd:37:45:42:93:ac:90:
37:76:ec:29:02:e6:1a:17:5d:99:b7:4c:3d:62:64:
5b:a4:60:7b:6f:27:5f:f3:b7:c0:6b:66:62:a4:6c:
4d:99:04:42:92:39:69:3f:db:97:67:e8:3a:9c:e2:
95:6c:6d:69:17:06:3b:2d:b7:5c:59:ec:a7:3f:5e:
5b:aa:2b:15:fd:8b:ba:c9:00:62:f4:4a:56:21:9a:
e8:96:33:e1:ee:2c:cf:eb:02:5b:fb:33:b9:c8:e3:
75:09:af:27:6a:4e:14:3b:26:02:c3:09:f5:c1:58:
bb:c5:19:9f:bd:b4:18:d1:74:2a:a4:c3:f2:ed:c1:
35:f1:32:d8:8f:47:98:39:bb:2c:55:10:c9:9f:d1:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:89:5D:7D:5A:C0:2D:75:3D:67:B8:84:9A:0B:6C:05:73:1D:ED
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:70:74:f2:fd:7d:3e:b7:cc:21:f6:fb:22:fc:67:de:2f:ea:
bf:30:ed:8c:35:bc:63:06:e8:f5:85:a1:e1:a5:7e:b5:f6:81:
6e:b0:f2:55:5f:f4:eb:06:28:8f:40:a7:87:aa:4c:d0:a6:1f:
24:7d:ff:04:65:43:13:d6:3f:83:42:df:01:00:db:68:49:73:
ad:a9:9e:e0:76:86:00:71:3d:1f:a3:66:83:0f:1b:75:8f:6f:
30:1c:02:64:c2:d6:c3:9e:c1:92:e6:2e:22:c8:8c:b3:f0:63:
71:56:c0:5c:9f:25:73:f5:ee:b1:ed:7d:9f:b0:16:e8:4a:f0:
bf:6e:a2:fb:dd:88:78:43:f4:98:6d:5a:28:2b:8e:cb:c3:50:
f7:16:d6:af:ea:c7:6b:d6:d9:90:77:5b:0b:2a:39:2c:93:ec:
db:26:44:c5:48:46:53:ff:37:c6:cc:1d:81:58:5a:8f:3b:b7:
e5:84:ed:c0:d7:03:94:a0:70:c4:11:ba:12:cc:e9:98:b0:77:
88:b8:66:37:62:9a:20:a3:63:88:69:b6:38:bc:5e:2b:df:5e:
5c:1a:99:59:13:60:76:d7:70:80:b2:6b:d1:18:45:89:40:0c:
ae:76:54:bf:9a:11:a6:b2:c6:6c:03:8c:17:f0:2b:97:70:f6:
c1:ef:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:58 2025 by rpki-client