Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: /9p/u1yVv15yZQGUVHzgUgKlH9y9nCCSyjU+uZyvbHw=
Subject key identifier: BA:7E:DC:0C:78:9B:93:A4:65:6A:BE:DC:B8:55:29:74:F6:BD:2B:C3
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 0194BD4EC620873437A752E789334DA70209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 0F58
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 2iqxebxKO5AmHZhcdqFElwa2mKnrG7wUpcu98kFZte8=)
2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c6:20:87:34:37:a7:52:e7:89:33:4d:a7:02:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=ba7edc0c789b93a4656abedcb8552974f6bd2bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:be:3e:77:3e:35:ee:77:e4:b5:5a:2e:b7:
b7:88:d8:f0:37:ca:e4:84:96:a2:ce:1d:64:09:17:
4f:ab:95:0b:85:32:21:5f:54:7e:f9:42:91:c3:e3:
6a:83:01:93:b4:a7:9b:f1:42:4b:af:5a:d0:84:66:
5a:46:1a:91:36:84:b2:95:fd:6c:bf:14:03:e9:76:
4d:07:4e:08:e1:38:86:d5:71:4f:6f:73:1f:f5:d0:
c2:b4:09:78:94:01:51:e5:2c:bf:b9:d5:db:6b:16:
f0:4e:63:e3:3c:01:26:5c:2e:c2:a6:bc:62:cd:dc:
95:a2:21:ed:02:1b:dc:41:83:d5:17:0d:25:5b:46:
ac:34:15:85:6e:ef:77:41:52:9d:32:f6:bc:3c:a0:
b2:38:c1:fb:18:81:a2:c9:fe:5b:12:49:bc:b0:dd:
26:a3:4b:ed:ef:44:61:40:64:33:89:9a:a0:67:1f:
e9:4b:0a:e5:e9:08:2b:f7:12:ae:10:08:8a:54:42:
b5:6e:5e:17:27:39:de:52:a5:7a:1b:22:a5:ea:5e:
0d:9a:ca:d7:fe:a6:05:f5:bf:06:1e:b1:48:b8:5b:
c6:e4:15:13:0c:c9:43:45:3f:20:a2:f0:7d:1d:22:
a0:82:f8:51:00:46:db:91:8a:20:cd:f2:2a:fb:46:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:DC:0C:78:9B:93:A4:65:6A:BE:DC:B8:55:29:74:F6:BD:2B:C3
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:05:49:c8:ff:fa:1d:ec:00:7e:d0:91:ad:2f:bc:f4:c3:74:
31:04:db:ac:7a:b7:da:64:83:77:41:f0:63:b3:83:d1:4f:b9:
2f:c6:bd:02:6d:78:75:a5:42:2c:91:4d:35:bd:19:48:34:df:
bf:08:6d:3f:6d:5d:d1:e5:1d:5c:f3:42:3c:45:d0:75:a8:16:
d3:fc:f4:93:25:53:b4:09:c9:e9:4f:db:e8:ab:21:99:f3:6e:
5c:0f:cc:2c:39:30:f4:88:89:8f:f5:63:58:a5:e6:df:11:54:
dc:21:f8:52:e7:dd:65:55:b1:e7:ef:27:96:d7:63:13:f3:73:
9f:2c:9f:35:e6:7b:c8:d0:44:2f:5e:6f:ab:da:40:71:b3:2d:
eb:3a:a2:d2:e4:18:7f:0b:9c:1c:de:e0:97:52:86:b5:7f:19:
63:7d:6a:2a:bb:eb:2d:68:42:d2:71:12:49:91:6a:e3:fc:b4:
1b:d2:77:2e:cc:0d:6f:a5:1a:a2:b4:00:b1:00:b2:9b:78:f9:
c6:aa:15:a3:eb:de:36:cc:24:28:c8:10:8a:67:1f:e6:76:fc:
8d:c2:71:e8:f0:5e:9b:9e:be:cc:09:d6:64:07:ef:6c:ff:8f:
01:b2:8e:39:25:dd:cc:2d:42:43:4d:c4:e0:2f:e2:94:99:a8:
e8:e4:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:15 2025 by rpki-client