Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: l7Tb41JBrXO4M19nCvJrgkWB2ImVgDJRCiMAnDtY2jA=
Subject key identifier: 9B:D8:DB:0D:39:90:1A:97:B1:E1:2E:AF:1D:37:B7:AA:1D:9C:6D:67
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 0194BD17FE160DF5E54625AD8831529B7DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0545
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: DOP8Mq+cTCu5RDjs+ChosUDdwp/Ee3SuUV4IPxz/vAo=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fe:16:0d:f5:e5:46:25:ad:88:31:52:9b:7d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=9bd8db0d39901a97b1e12eaf1d37b7aa1d9c6d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:d3:92:39:fd:c3:5b:30:07:d5:a4:c1:ba:
48:80:c4:14:32:43:ef:a2:38:64:7d:6a:15:1b:6d:
f9:ab:19:f7:45:fe:13:df:00:3a:c3:c3:ab:9d:b6:
03:72:88:3a:ee:67:aa:d4:f8:cb:2e:54:06:5e:49:
90:ab:8c:52:a0:1f:79:54:1e:30:88:d5:50:b5:de:
8d:e7:d6:2d:39:69:26:6c:d2:c6:d4:7f:b5:46:2b:
bf:e9:98:ad:7e:6a:de:39:51:46:99:3b:44:30:a6:
6b:91:c4:70:ce:6a:2f:d9:10:82:c9:3d:22:08:36:
38:1a:e7:f0:f7:e3:d2:63:de:c9:12:a8:22:3f:17:
d8:0e:48:c0:2d:56:cc:33:0f:a1:f4:4c:54:9d:9b:
71:fc:f3:94:f2:c2:16:96:70:78:86:34:f3:c8:90:
c6:33:0e:8e:fc:35:36:60:65:8d:f0:4e:95:f7:a7:
32:b3:d3:97:ab:71:b5:59:a3:4a:07:c3:df:fb:9b:
a5:24:09:a6:a8:42:9a:2c:ca:5a:0a:0c:e9:e5:81:
f2:13:b6:3f:b1:c8:8f:79:8b:d0:a6:ec:e2:02:37:
26:ca:55:15:54:6a:37:38:25:bb:14:3e:66:06:18:
69:66:55:32:81:d2:05:27:d3:d5:3e:78:36:55:ee:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D8:DB:0D:39:90:1A:97:B1:E1:2E:AF:1D:37:B7:AA:1D:9C:6D:67
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a0:68:d4:63:bd:65:fc:8a:26:be:a4:49:e7:41:7c:df:80:
72:f4:ab:24:8e:90:5f:c6:81:85:49:c5:67:62:7b:40:57:93:
3e:14:22:c3:e3:f7:09:aa:31:9d:f1:b8:80:8d:0c:a3:d3:c8:
94:86:bb:9b:8c:2d:2d:b5:93:d7:e4:ff:0b:15:09:8c:90:cd:
9d:0c:b5:33:ff:01:29:69:3c:8f:83:eb:41:ea:c6:7b:bb:87:
61:1d:2a:e9:42:80:62:96:34:84:73:57:8e:a3:16:a9:96:b0:
cd:40:10:af:25:3c:a6:34:90:5c:47:29:f0:31:52:9a:68:f8:
42:36:e4:81:1e:10:78:6f:04:0e:8d:d9:a6:22:07:77:e6:1b:
05:dc:74:ec:77:90:59:93:88:57:9c:9a:7c:9d:ca:06:96:3d:
f4:02:15:56:12:b9:6b:3d:cd:45:24:a8:d9:8d:33:77:06:1b:
5f:b2:0a:a8:24:bb:a2:35:39:7d:3b:c4:4e:09:ea:87:f0:8a:
e3:48:e6:81:12:d3:9e:d6:93:53:48:5a:87:7f:e0:6a:7f:d8:
79:7d:f1:90:10:fd:5d:34:65:b4:a7:62:b8:de:a3:a4:18:e7:
e7:5d:4b:cd:86:dd:96:e9:58:3f:de:1d:b2:e9:b2:fe:10:a9:
ff:4a:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:54 2025 by rpki-client