Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: fF2pwqjoHPqmFYW+tYObOAhxYPob/zQmTIl1X4PnLRE=
Subject key identifier: E7:02:0D:12:08:CA:A6:54:A0:01:07:F6:CF:D6:EF:AB:E2:B1:01:83
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 0194BD4E61168EDBA07ABFA1FA433AB0F2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0C2F
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: 9z9zF+RoeJBorJHQVHV5WcqkKL6Q9Ukw8elN1+I2rko=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:61:16:8e:db:a0:7a:bf:a1:fa:43:3a:b0:f2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=e7020d1208caa654a00107f6cfd6efabe2b10183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:ad:28:ca:f9:11:c8:29:9b:c3:07:0d:6f:
bf:b1:c1:77:93:37:ab:8c:20:13:b0:8e:d8:8b:74:
a6:84:60:3b:3b:57:ed:92:d9:75:ab:a2:1c:6a:0f:
e3:52:fd:43:f3:fe:d7:80:2b:9b:e7:e3:f8:53:f5:
99:3f:ae:a3:1c:2a:87:d9:f2:6b:b1:04:99:67:40:
7c:59:24:33:2a:86:8a:96:d3:eb:9f:dc:79:e2:61:
70:9f:6d:24:57:e8:df:42:86:0b:1c:9f:cc:58:d4:
fe:6d:36:63:d1:a0:62:5a:89:47:4e:f7:74:50:1f:
cc:be:27:35:b3:97:a5:06:ca:fb:9b:38:12:6d:b1:
16:ca:6b:e6:11:d5:e8:55:40:e3:28:1d:15:7c:94:
66:80:f5:01:b8:c9:b7:5c:2f:79:d4:90:75:f3:a2:
80:5d:dd:a4:14:a9:5a:75:3e:7b:01:10:8b:3c:d5:
92:43:bd:71:1b:68:97:76:16:bd:98:8f:2b:3e:7e:
a1:da:58:14:e9:ae:d9:d9:3a:eb:68:a6:42:7a:67:
f8:fd:9e:18:43:4e:dd:b6:75:1d:09:1f:10:7f:f7:
45:8c:a4:b1:66:07:bc:d0:4f:66:96:57:eb:79:07:
97:e3:d1:ea:ee:f1:a8:75:b8:ca:6b:70:26:d8:76:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:0D:12:08:CA:A6:54:A0:01:07:F6:CF:D6:EF:AB:E2:B1:01:83
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f5:30:fe:85:35:9f:8f:c0:f4:58:59:99:df:6d:fa:fd:8a:
f7:92:1f:5b:c6:74:b0:ad:5a:51:8c:0c:b0:16:a1:e5:24:82:
a5:d9:0b:cc:e1:2f:30:34:e0:76:93:f3:50:02:17:44:0f:fe:
28:18:ee:ba:62:5d:f9:b4:13:dc:3b:94:b8:11:d8:26:29:40:
fd:64:8b:99:da:01:4f:11:67:96:39:a0:0f:c4:49:77:0b:52:
e5:d2:df:f3:27:0f:33:89:00:a6:18:8b:00:a3:f6:0d:1a:2b:
65:34:84:63:74:8f:a1:d0:3c:29:03:88:c3:7e:21:da:b7:70:
9b:b6:dc:25:db:87:46:c2:c9:0f:9d:ec:8e:ea:4f:4b:9d:3a:
76:d8:d4:0d:82:48:3f:c9:81:4d:05:17:ab:30:b0:dc:56:b8:
5c:df:41:e7:78:5f:b4:70:b7:4f:74:c0:63:5d:f3:d0:50:d7:
33:fa:95:63:07:cf:66:b6:d2:37:63:6e:a1:d4:40:36:ca:ab:
47:9c:9d:b6:a1:22:a9:e9:55:bf:99:56:5d:6a:4b:3f:e2:7c:
f1:ea:2d:40:64:9b:f0:de:f2:ec:1f:2b:8f:26:3a:ba:c4:5e:
35:6c:45:a9:1b:8b:2a:56:ba:64:6c:47:4f:67:98:29:e2:4c:
2f:c3:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:22 2025 by rpki-client