Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: kU04NpRc3+97DCm4AUz64Vr7FW971nAlMNpuM5YXDdw=
Subject key identifier: BD:07:E3:F5:D4:45:14:FD:27:B1:C0:BE:0C:9E:EC:E5:2B:F5:6C:BE
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0194BCE0C5293C04BBC4FFAFB6AADE0AD115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: 6XIp7u7CpzAozonVBASaYVNLAjCpvrYdalfIt+A0sto=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c5:29:3c:04:bb:c4:ff:af:b6:aa:de:0a:d1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=bd07e3f5d44514fd27b1c0be0c9eece52bf56cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:2f:15:08:72:93:34:70:96:95:e4:15:de:
be:94:02:7e:25:07:97:c3:46:ec:b3:76:c4:ca:7f:
a1:f2:67:52:6e:95:c0:39:e0:6b:a8:d1:08:7b:92:
e3:60:10:b5:93:5c:b1:69:b0:92:d8:ad:8c:13:70:
73:ca:9f:23:07:a4:f5:16:bd:27:22:5a:f6:2f:ee:
1f:12:6c:02:96:3a:aa:61:cc:d3:83:44:68:0e:d8:
5e:e6:9e:62:c8:73:2b:e1:8b:ad:a3:63:c7:cb:ad:
33:01:ef:c7:2f:22:2c:7a:65:be:b3:cd:70:85:cd:
40:7a:8c:0a:d2:95:c3:f4:82:fa:ba:fd:c1:93:d4:
70:4b:a3:1e:df:cd:4d:79:3a:69:64:a7:79:15:a6:
2c:42:ca:f7:87:3c:5a:b6:17:e1:3f:78:06:8b:31:
35:28:ba:44:40:8e:6d:a1:5b:66:b6:55:2d:55:19:
cc:cb:d0:76:a1:3f:24:5a:09:41:53:af:c5:4b:fa:
01:3d:e8:93:09:89:97:9b:7a:bc:e3:ac:e5:f9:f8:
8a:4a:f6:1a:52:2f:0f:70:bc:be:49:7f:c0:84:92:
eb:ce:4e:1c:e6:26:95:37:60:74:47:f2:94:4e:bf:
7c:eb:c8:0e:fe:89:43:12:9d:13:52:89:1b:7f:fe:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:E3:F5:D4:45:14:FD:27:B1:C0:BE:0C:9E:EC:E5:2B:F5:6C:BE
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5d:b8:f7:72:85:da:0c:f2:35:07:15:5a:5c:54:77:13:39:
c1:c1:45:d1:be:91:b6:b4:5a:dd:b2:35:95:33:21:06:01:25:
2e:b9:f8:78:85:7b:17:b2:c5:fe:ac:e1:2f:3e:d3:96:71:6e:
dc:8b:cd:ac:7d:2c:8c:c2:04:d1:0e:d7:66:85:5b:23:51:f9:
2a:75:a8:45:9e:0b:89:ca:6c:a4:97:82:70:58:05:ea:b1:95:
3d:01:54:ed:d8:13:7f:97:b1:42:91:c9:9b:41:e5:4c:9e:4e:
85:1b:c3:b1:4d:ff:d9:89:51:0a:2d:a1:f3:68:d4:8f:ca:6d:
c5:e3:e9:fe:bd:39:a7:d6:44:10:d3:20:59:96:13:d4:04:d6:
b5:b8:c2:81:34:98:45:78:57:00:6e:7c:cd:67:fc:27:7f:f9:
fb:4d:f0:fe:c2:56:17:85:09:ef:9f:51:2e:b3:11:7f:48:69:
15:bd:08:3a:24:17:23:05:56:62:67:7f:ed:1e:a7:f3:44:be:
50:e2:59:c6:05:77:6b:af:41:77:a2:f5:e6:51:4d:ba:ba:f8:
ce:72:43:57:ac:0a:0d:91:7f:0b:e7:3a:78:9e:5c:dc:5d:57:
37:4f:f8:0b:41:99:7c:f7:71:2f:53:14:93:a1:5d:46:f8:30:
24:ac:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:42 2025 by rpki-client