Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: iO8iAoSlJAXWR5nbPCXn5lZ9biA2ozf1lYU+P7MiU/o=
Subject key identifier: AB:D7:12:91:77:9D:2C:01:2D:72:4C:D2:B3:D0:57:49:38:75:C5:C6
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 0194BBCDF83F06E514788E3F1EA20D2691AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0929
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: O5vKSViNMELuocNR6KtTMIiMnzy1FwMfcR/13kD1uvM=)
2: 5hvMdLYnfsXTSuV237JH9FWLZN0.roa (hash: +NNavIzbs+bo3gjOvC6npGrxT+kBJ6ESc9cDAGFiB9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f8:3f:06:e5:14:78:8e:3f:1e:a2:0d:26:91:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=abd71291779d2c012d724cd2b3d057493875c5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:5b:8d:e6:c1:e4:aa:cd:8c:bf:5a:a1:be:
a1:03:7d:d6:dc:8f:73:45:8d:f8:86:12:d1:c6:b3:
de:2f:c2:16:26:93:2b:d5:c4:9f:07:9a:ab:7c:96:
80:0b:6b:d6:51:82:d2:87:01:e2:68:7b:e6:43:e1:
79:3b:1f:bd:80:b2:63:5b:d4:24:33:53:74:71:a8:
ff:1b:c3:99:b2:15:a1:e9:bf:e3:62:03:6c:20:7c:
46:5e:f8:98:62:eb:01:30:e0:c5:fa:74:b6:2d:24:
71:01:b0:9a:62:90:4f:1b:e8:db:9c:95:14:72:8e:
57:af:33:28:86:5e:de:93:d3:bd:9d:81:8e:83:41:
7b:20:08:57:dc:66:2b:25:b3:fc:1a:40:52:a3:c5:
8d:48:ab:aa:77:51:40:5d:55:2c:e2:e0:e5:cc:6b:
38:48:67:a6:0c:9c:0f:3f:6c:8c:f3:78:8d:7b:99:
8f:b7:01:20:c7:82:9f:31:93:5d:b4:50:93:0d:a3:
66:b0:0f:c5:f5:f1:ee:2c:32:7c:45:e1:8a:4b:7d:
00:1d:f1:29:9a:46:2d:70:40:be:46:8f:fe:e6:98:
ac:49:b0:41:b8:f1:12:d0:22:b2:c2:4c:bc:47:57:
8e:99:80:25:11:72:fc:38:26:5f:6e:9b:80:46:54:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D7:12:91:77:9D:2C:01:2D:72:4C:D2:B3:D0:57:49:38:75:C5:C6
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:da:d7:c3:b1:6b:fe:cc:b7:56:05:88:b4:ff:aa:00:c1:
e3:af:b1:eb:3d:9a:bf:0c:cd:23:23:56:d7:34:cf:72:f8:3f:
fa:74:3b:42:ba:e4:42:ea:62:65:50:03:da:63:fe:5c:08:04:
70:9d:44:e5:ce:d4:b7:18:84:c4:2e:73:8a:a0:d7:5b:3b:29:
51:b6:a2:71:30:c4:5f:b4:a1:cd:9b:b1:11:7c:11:e7:54:c7:
16:e6:a6:3d:0b:61:58:e7:90:55:e5:40:ee:ad:e3:55:09:ae:
9e:23:96:d3:0d:b0:38:1c:85:78:f3:a1:d0:3f:d9:d9:9f:46:
76:e3:db:93:0c:f1:ff:f4:5b:84:69:11:84:ee:9b:ca:6f:ae:
ec:13:60:39:6c:bf:1d:0b:a1:d7:30:a8:36:e6:b4:57:42:bd:
a6:15:ea:06:d0:ac:a4:cb:97:e0:11:b0:74:3c:1e:5e:27:2c:
be:5e:78:7e:79:ff:62:ab:43:0d:d2:84:97:ce:e0:6f:b6:10:
74:2d:24:54:0a:ca:ca:f9:6b:3d:ef:53:f9:b9:de:36:ba:b3:
4a:3a:ad:eb:5c:15:9d:38:cc:cc:86:a1:fa:cc:45:a3:52:f0:
78:bc:e8:e1:ee:9d:cc:78:75:20:f3:cf:a3:50:8b:84:12:43:
86:43:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:20 2025 by rpki-client