Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: /ZOaU1KhxUzxd/VIrBqzkL8lHEfo8tIH3BJu1M9yLCY=
Subject key identifier: 24:47:37:CB:64:0A:CD:F8:48:42:8A:15:E7:7F:25:AD:7A:94:DE:36
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 0194BCA9FC4C5C918CA7369C6EEDD84B9609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: J74VSs0C04bF48fdAgA0VuS0bGk8A5UOcJyTHsvgF1g=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fc:4c:5c:91:8c:a7:36:9c:6e:ed:d8:4b:96:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=244737cb640acdf848428a15e77f25ad7a94de36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:af:1a:25:43:44:19:f2:a5:cc:99:0a:f2:1a:
aa:6a:a4:34:6d:6a:70:72:d4:c0:d8:59:8d:00:3d:
b0:a3:62:a5:11:46:2d:be:0a:7c:78:e7:b2:4f:76:
e9:d3:97:f5:fc:ec:7b:ea:bd:8b:e9:de:88:05:62:
10:6b:90:99:e4:6c:52:82:80:38:88:75:68:8e:3c:
1f:b7:c5:c7:e9:1e:42:3d:16:d6:99:1d:47:cd:b7:
fa:d5:28:88:eb:10:d8:ca:db:2c:03:aa:da:25:91:
43:70:f9:d4:92:62:09:05:df:4d:e7:c8:3c:83:c1:
1d:7c:84:21:84:26:36:0b:a6:62:92:47:5f:17:e5:
63:3e:d1:15:fa:ce:da:9a:a9:52:b7:78:13:d6:48:
d6:5a:0c:48:fa:77:8e:03:f8:a2:80:78:7c:77:f9:
f3:c4:b3:31:a4:54:ad:81:98:2a:87:e6:bf:ac:47:
c6:50:5c:c3:25:35:07:67:51:b5:0c:8d:af:3c:7a:
0e:44:61:b4:a0:6f:a1:aa:f9:76:aa:97:c7:ec:cb:
87:67:e9:fd:0e:06:7b:21:3d:bb:39:6a:49:ef:97:
fc:1d:5b:20:50:c9:07:70:32:60:b0:b9:30:62:f5:
56:2b:51:4b:75:7c:ee:48:4e:af:0c:47:eb:13:09:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:37:CB:64:0A:CD:F8:48:42:8A:15:E7:7F:25:AD:7A:94:DE:36
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d2:68:44:49:4a:40:da:55:f4:27:bb:e8:82:e2:46:99:15:
f6:7c:13:10:17:e0:09:f7:b8:82:47:a4:86:c5:ec:30:94:e1:
b9:23:f4:f2:0a:4f:98:0e:e2:50:7e:53:69:91:cc:7c:e6:9e:
5f:2b:68:aa:e6:d0:52:6d:e9:89:ed:1d:03:77:79:e6:ed:37:
db:92:30:b5:81:6b:b1:6b:14:73:94:4e:3f:c6:01:11:99:fe:
f3:2b:3a:b8:01:85:c5:98:dc:e6:dd:8a:e2:d3:71:17:c1:29:
6b:6f:85:eb:48:27:f2:71:d8:b6:16:58:7f:d1:46:3e:08:fc:
eb:8a:4e:2e:b2:a2:9f:98:71:4b:85:3e:22:cd:e9:e0:6e:50:
c8:e4:91:38:44:cf:f9:8f:c0:a3:56:98:1b:86:ed:7f:3c:03:
45:6b:7f:42:93:45:cc:b0:03:86:ad:64:e4:14:1e:4f:f9:f7:
ab:f6:40:b5:32:36:f5:d3:0c:2b:41:c7:92:1e:ce:80:53:eb:
5b:9e:95:2c:d6:6d:27:d4:a5:38:84:4c:cb:84:08:b0:4e:4f:
ca:76:4b:84:bf:7b:94:8d:df:97:83:50:e2:22:5e:b6:93:1b:
67:ff:5b:c1:66:4d:36:58:c3:6e:b2:9b:b7:91:ee:0b:7d:74:
99:40:cd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:41 2025 by rpki-client