Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: 1+P8HXo6l5atOIIedBRubj8Hsr4qAm+h4S8ezpWonG8=
Subject key identifier: AE:66:B9:3F:16:D3:4A:5A:8C:37:D7:DE:B2:8E:6A:5C:D3:C3:35:88
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 0194BD85663F08662E8F1A362ACE09F2DD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 125F
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: UxPNYZsizGm+ATX+a4m/sE1aesUAPKaT1+BTakNoYAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:66:3f:08:66:2e:8f:1a:36:2a:ce:09:f2:dd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=ae66b93f16d34a5a8c37d7deb28e6a5cd3c33588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:c1:3a:c1:f7:6b:fa:67:af:19:7b:ae:0a:
f6:14:b5:1b:88:35:04:5a:f4:83:b8:09:f9:e7:f7:
9a:98:0a:86:c6:4d:63:ca:eb:9b:0d:53:60:11:3f:
52:14:77:d2:df:c8:ef:c5:52:2c:d5:07:20:17:e8:
dd:83:df:4f:8c:21:49:b5:9f:44:e3:12:06:7f:ae:
c5:2d:17:a1:b6:69:73:66:bd:bf:b8:03:a8:3e:20:
88:cb:80:d7:b4:84:9d:11:a4:82:fc:c3:2a:33:11:
1b:56:80:4e:71:d9:c0:25:8f:23:ec:ce:90:39:36:
79:6f:92:3d:e8:4b:0c:6e:73:5f:75:ac:48:6f:5b:
f3:39:4c:c8:e7:2b:db:7c:4d:e0:93:d6:24:75:7b:
eb:f7:aa:29:f8:2a:7f:a0:61:d1:9d:fc:62:99:90:
fc:c7:5a:1e:1d:5c:d2:e7:44:89:b1:cd:c6:4b:9a:
ca:fc:85:86:36:5f:2a:9b:80:a4:57:d0:e7:11:36:
35:53:86:71:75:5e:98:2d:54:35:6a:67:b8:8d:8f:
63:8c:4d:25:a3:76:dc:9b:43:30:61:5e:f0:10:eb:
7f:79:b3:d0:6a:95:a8:1d:6d:a8:e5:cb:83:0d:c9:
9c:dd:d1:de:ba:2b:93:ed:fe:ce:c0:13:20:da:a0:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:66:B9:3F:16:D3:4A:5A:8C:37:D7:DE:B2:8E:6A:5C:D3:C3:35:88
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:67:60:7b:e1:35:92:bd:cb:8a:16:e4:6e:86:2c:7f:70:94:
f3:9b:21:2c:ec:a6:7d:19:e4:76:ba:30:2b:42:f7:4e:0d:f7:
b5:9b:8f:36:2b:d0:df:e9:78:45:91:c8:a5:28:bc:20:d7:9a:
dc:0b:77:e2:b5:2b:a2:98:7d:8d:6e:9b:1a:c3:75:2c:75:e1:
f1:40:64:c2:2b:d5:b8:54:5f:01:aa:8c:8a:1b:25:20:d6:8b:
61:a9:6a:08:46:e1:2a:d2:0d:8e:fb:42:d6:4c:8c:c1:76:f5:
88:0d:df:b3:8f:56:74:31:c4:15:96:bb:55:4c:8a:fd:09:2e:
dd:aa:2b:d7:b0:88:9f:a2:91:87:9e:a9:01:ad:36:8c:be:b3:
dc:fb:62:0d:8e:f7:e4:23:1b:c3:c6:d4:50:bf:51:26:75:8e:
01:75:b1:64:ff:e2:1c:36:1f:91:11:53:ba:40:e4:b7:57:04:
16:a9:a3:26:e4:23:2b:3d:b8:3b:4c:39:db:56:31:ca:9d:59:
f7:88:5d:64:e1:13:53:84:93:fb:5d:82:8d:48:50:b7:0a:bf:
7a:46:05:fe:e4:d8:82:0a:f4:b5:b9:ea:68:0b:1a:b4:28:60:
d4:0a:f3:48:9b:6b:b6:d3:a1:4c:7b:dd:64:40:84:39:a5:f2:
77:95:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:13 2025 by rpki-client