Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: 40zcz4QY0UKNWbtGpV4rwh05Zo9mkGTs+Kj7quYiz8Q=
Subject key identifier: 0E:FB:C8:F7:08:17:F5:10:E3:3A:58:87:F9:6F:14:ED:4B:2C:88:A5
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 0194BBCED855BF188F0D08B1184B19B1B78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0933
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: gN1BbWUwyBC81AV2HYbnBYTH9FlmV4JNmRSAeWb6A3I=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d8:55:bf:18:8f:0d:08:b1:18:4b:19:b1:b7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=0efbc8f70817f510e33a5887f96f14ed4b2c88a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:77:51:18:03:51:b0:ff:a6:48:5c:b7:ef:
17:a3:58:2f:75:23:23:ab:08:72:ac:c0:12:43:51:
06:48:ee:07:39:61:7e:57:c5:01:55:13:e8:65:a0:
48:9a:7d:62:da:50:88:d5:ff:5e:0d:c7:e8:fe:d0:
2d:2e:e7:92:6f:14:79:fc:03:94:da:95:b2:6c:d6:
d3:e4:4b:73:e8:b0:f6:b6:9f:58:82:56:f2:dd:fc:
98:31:63:c4:c5:06:79:e0:1d:40:c6:d4:37:d1:03:
37:45:55:d5:8c:50:fd:fa:55:3a:9c:a0:85:f2:31:
3e:5d:b1:97:48:8a:19:fc:ff:17:ad:09:71:9f:a8:
c8:11:49:73:39:2c:b0:46:42:60:5f:98:a3:f0:91:
89:59:10:12:6a:57:68:00:29:96:e7:81:68:1f:bb:
68:65:d8:ab:41:3d:78:30:f3:8f:4f:94:3d:6c:03:
7c:a8:53:b0:fb:80:7d:5c:7e:6a:98:ec:d6:da:6c:
18:d4:15:7b:1f:48:6b:dc:a8:f5:68:71:1f:17:29:
9a:f0:dd:13:e8:f3:4b:a8:36:4c:90:36:fe:15:23:
27:36:8b:5b:64:ee:38:5f:fa:34:54:d3:ba:00:72:
cc:ea:61:5e:f7:15:00:a7:21:e8:35:77:2d:de:e2:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FB:C8:F7:08:17:F5:10:E3:3A:58:87:F9:6F:14:ED:4B:2C:88:A5
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:df:a4:70:5e:d7:4e:b1:e0:94:32:76:cb:bc:9c:37:d1:9d:
91:6b:a3:40:d3:11:a3:f7:89:44:28:79:a2:9e:0c:c1:7e:56:
b4:db:b1:20:89:65:63:86:14:24:1d:de:ab:9c:a7:86:25:87:
6b:7c:fc:3d:69:ba:3f:82:37:17:cd:52:7d:c9:85:a1:a8:7e:
3e:3b:bb:4d:24:0f:56:1f:e1:c4:92:ec:10:fd:df:c9:4a:91:
ae:66:22:cc:6f:d2:dc:ad:bb:17:92:bd:78:e1:ff:10:f0:65:
53:b5:2b:35:43:72:2c:db:80:d5:6d:5e:e2:0f:01:3c:b5:6c:
87:84:6d:93:c4:63:13:2a:7c:c8:2d:9c:6e:9b:3d:c4:81:5e:
d8:9b:6f:c3:81:db:5c:42:0e:4c:4e:1e:1b:30:a6:82:8a:de:
ea:7f:6e:59:1f:c7:82:05:d2:f0:ac:24:05:9f:9f:0f:e6:75:
fd:f4:66:fb:29:7b:6d:43:5e:39:0e:76:54:b9:42:08:f8:39:
3f:d3:7f:bc:bc:1a:17:08:ea:a9:9e:5a:9d:85:df:cb:ab:67:
40:03:52:9d:7a:ab:e9:72:66:47:30:e2:c2:ee:3f:33:cc:53:
81:84:1b:25:3c:7a:b6:fc:65:8a:38:02:45:21:67:86:19:0d:
f9:75:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:50 2025 by rpki-client