Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: okUXpCRu+V0fi0as8Mi6gOL3juzpqs+F0/4+djzx398=
Subject key identifier: 6A:8F:88:1C:DE:7D:26:9A:88:C2:BF:C9:A5:45:D6:53:7D:D2:67:A0
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 0194BC050E9B29040FAAAD6FCB10245B5270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0571
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: wNXulsEfsOo97mt8Ih2P5T5/rrgDfFITCf1hJn9IZFw=)
2: 6r4H1bkA6HQBHKzqndzkbGN-fLc.roa (hash: aHRcxKC7eM9v241orSIrtl55ETVWmoxd9czIqtemS2Y=)
3: yZKr3MkjOL236i5PxJm5JOrjeZQ.roa (hash: P3Sg9X6HUsmoHVeRhUz452rlFrDzI8l8SS7MoZsVvQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:9b:29:04:0f:aa:ad:6f:cb:10:24:5b:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=6a8f881cde7d269a88c2bfc9a545d6537dd267a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:c8:57:06:f2:fc:6c:a8:1d:6f:83:a4:6e:
1b:24:a6:8e:3b:e5:3c:3c:42:1c:4b:8d:26:1f:4b:
61:52:bc:2b:db:49:62:26:1e:83:f8:da:dc:4b:fd:
8d:a5:52:0c:98:c5:6c:6a:0e:b0:5b:0d:4b:f4:8f:
91:9b:b5:37:8b:0c:78:dd:6d:87:29:12:40:36:b2:
ed:37:f3:7d:3b:01:8a:89:02:5c:b9:77:56:97:8b:
e5:f4:8a:08:f4:b0:3c:64:c8:f4:24:bc:2a:01:2f:
cf:d2:12:f9:c6:f2:46:f9:f0:76:6a:b9:e3:05:25:
48:84:69:c7:15:f7:05:6b:e7:1e:31:98:9f:53:79:
fe:69:f2:d0:dd:db:5f:82:79:03:0a:e8:e7:b5:5f:
ab:ee:f4:e9:a0:17:46:3a:6c:0a:ad:7e:85:54:9b:
eb:2a:98:c6:bb:af:91:44:4d:54:53:6b:22:ff:51:
b9:67:7b:66:63:40:96:9a:de:3b:bb:f2:f5:46:3d:
5f:04:c0:3b:51:90:13:9d:fb:e4:b9:79:6b:66:5a:
e1:19:4f:40:dd:34:d3:d9:c3:e3:8f:ff:4f:32:26:
46:e7:e3:5c:dd:3d:64:45:a0:cc:ad:f8:b9:62:d8:
d5:7b:75:f0:64:be:6e:77:ab:20:59:27:2b:b3:ab:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:88:1C:DE:7D:26:9A:88:C2:BF:C9:A5:45:D6:53:7D:D2:67:A0
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6f:fa:1f:ef:cb:96:a1:3f:77:ab:aa:ca:94:c0:56:2b:5d:
47:62:c1:c1:f2:f0:44:a3:e2:75:ca:c1:27:38:d5:63:6c:22:
8a:4d:65:a4:04:15:68:3e:86:57:cb:01:77:32:c7:79:30:35:
46:b9:d9:50:df:cf:9e:a9:d5:34:57:b7:50:99:00:9c:24:39:
a0:b1:c6:f4:ce:da:d3:85:d5:ce:f1:91:60:6b:1b:39:4c:cb:
e6:6d:e2:19:3b:00:c1:f7:dc:d4:b9:e6:0f:33:a9:d1:17:92:
a9:dd:84:35:5f:86:4d:3b:1e:a2:ba:7c:6e:a8:1f:98:e9:74:
ee:fb:64:0a:33:61:07:47:af:82:37:a6:ce:b4:7a:49:cf:a5:
96:39:1a:08:3f:a2:c2:1a:9d:9f:01:11:2d:89:66:a7:ee:0b:
94:86:da:dc:8e:dd:18:a2:0c:a5:97:00:49:bc:49:43:c7:49:
6c:29:a6:29:35:2a:5c:e0:28:b9:12:3e:45:aa:24:cc:3a:37:
fa:0f:7b:c8:b3:92:ad:0b:82:80:bb:aa:be:ea:5a:a2:8d:6e:
ff:d4:02:35:26:cf:24:b6:14:29:39:3d:df:56:6b:b7:df:e6:
77:3a:1b:81:6d:04:1c:e4:8c:85:fb:87:31:0d:8e:d6:ce:4a:
9d:16:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:55 2025 by rpki-client