Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: oJ4LW1mtmvIsWOPNwr+hpVWZORyUTfl412IH6/J88HY=
Subject key identifier: 48:CE:DA:07:ED:DA:82:FD:7B:01:2F:63:35:51:FE:BD:90:20:C8:4B
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 0194BD1755742219A0A372A69A97A7FFEC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 0DF3
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: vWGjnvWstW7ytEesv8efNfORWavXssxl3jBDWb6Vheg=)
2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:55:74:22:19:a0:a3:72:a6:9a:97:a7:ff:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=48ceda07edda82fd7b012f633551febd9020c84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:c2:c8:7c:99:2f:14:45:b9:d2:a0:d2:6f:
67:ea:5b:15:8c:13:ec:53:60:ed:b8:02:22:bd:ac:
a7:90:eb:5e:c9:08:81:65:55:13:8e:27:0b:39:85:
d2:19:10:c8:6d:54:5b:49:97:ff:cd:a5:40:14:b0:
fa:5d:0d:d3:e3:b9:e9:69:f7:89:28:70:d1:83:9a:
2b:0c:0d:f8:e9:a2:7d:10:1b:c4:0e:9a:77:c8:89:
74:7a:b5:1b:36:f8:d5:ea:24:3a:52:f9:47:54:68:
5c:d5:a3:2c:2e:80:77:1c:11:dc:01:f2:ec:ce:fb:
9c:7f:cf:df:de:82:ca:2e:a0:11:5c:09:de:38:4a:
aa:bb:2f:78:c3:85:b5:31:59:3c:57:c5:c7:e8:4f:
29:43:89:c0:f4:7f:fa:f4:a6:c1:55:05:b6:b7:c0:
10:4f:e1:ea:73:d0:de:51:99:df:6c:6f:7f:98:fd:
b4:8b:41:12:cb:5d:62:fa:1c:2a:23:4a:d2:bd:f6:
56:df:80:4d:10:0c:a6:df:74:87:48:fb:35:b4:ae:
02:c7:ca:93:5a:8a:48:13:6b:7a:f7:2f:0a:ea:44:
96:44:70:3a:67:7d:11:ed:69:02:72:46:43:f3:44:
3d:fc:71:d9:2c:50:f3:be:cb:24:07:40:43:ce:86:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CE:DA:07:ED:DA:82:FD:7B:01:2F:63:35:51:FE:BD:90:20:C8:4B
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d8:87:79:ac:0b:ee:96:ad:4f:79:39:45:1d:1c:0c:3b:40:
85:5f:0d:03:50:4b:02:f2:77:36:93:93:8e:5d:16:ea:25:74:
95:bf:8d:f3:f3:ab:88:52:c1:ab:32:e8:bc:b3:cc:19:7b:e1:
60:16:d2:62:28:37:33:b8:fe:70:0d:17:de:e2:16:41:a0:31:
5c:04:85:5d:61:52:29:54:30:d9:0a:cc:e7:4a:98:8d:ee:18:
af:5a:1f:f1:f8:3f:65:9a:1b:28:9b:bd:65:b6:87:bb:b1:64:
0b:87:aa:ab:bd:41:40:0f:8b:9e:9a:71:5b:5e:84:b0:d8:90:
d2:41:4e:0c:cc:38:71:3f:00:12:87:e2:d0:79:2b:f9:a9:10:
14:46:df:92:e5:26:27:36:c1:71:44:6a:a5:6a:a9:58:85:16:
48:c2:20:21:7d:a1:df:47:7d:9f:3f:40:ae:32:c5:aa:10:80:
08:38:92:52:2f:4f:2c:7a:3f:b9:8b:86:99:40:41:2d:53:a7:
46:1d:10:01:fa:fc:06:47:1d:4d:5b:1f:8e:27:66:08:6e:e6:
88:e7:20:fc:9b:61:39:25:66:29:24:4b:c3:8b:94:8d:f2:d7:
dd:cd:fd:7a:cd:dc:98:1e:17:18:f1:06:f8:6a:3e:54:86:eb:
28:0f:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:12 2025 by rpki-client