Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: Oh/UI/07oXXzAFczNVf5Z7+ImCrV9iTbXRL6dfk/B2o=
Subject key identifier: 1E:10:E1:04:73:C8:C9:FA:D5:9A:E7:30:D2:D6:92:98:48:78:66:26
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 0195E07D91C03FBB2C575F0F725AD43A38F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 1154
Signing time: Sat 29 Mar 2025 06:01:20 +0000
Manifest this update: Sat 29 Mar 2025 06:01:20 +0000
Manifest next update: Sun 30 Mar 2025 06:01:20 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: Lk5wYZX405VegTxDakJ/+dkyIjFRRrP9J7otrIin/Dg=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:91:c0:3f:bb:2c:57:5f:0f:72:5a:d4:3a:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Mar 29 06:01:20 2025 GMT
Not After : Mar 30 06:01:20 2025 GMT
Subject: CN=1e10e10473c8c9fad59ae730d2d6929848786626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:6a:76:5c:db:ca:f6:8f:63:ef:f5:0d:da:
eb:0e:69:48:90:7a:da:51:d4:bc:46:b7:26:6e:ba:
fd:24:40:9f:49:ce:b5:4a:ad:b4:26:12:de:fa:e9:
96:6a:39:4b:d1:cf:69:3e:d8:88:aa:13:c4:a5:1f:
a8:6e:c1:01:d0:34:79:fc:81:05:19:76:6e:69:f4:
a1:ae:e5:c9:0f:95:2c:d7:58:f3:ec:78:b6:cd:5e:
c4:19:2e:f0:30:be:3e:24:87:1a:f4:6f:74:ad:27:
52:f8:33:04:4a:20:9f:80:9c:5e:65:b0:79:69:fe:
ab:51:de:88:82:6f:33:6c:aa:4f:4f:1d:0a:c0:07:
9d:d0:b8:e7:28:9a:bf:81:09:f0:de:83:59:87:f0:
e5:d8:93:a7:c9:4d:03:6c:44:92:cf:5d:e7:22:18:
a5:8d:6e:6d:2b:dd:e4:91:20:1b:9b:b2:9a:17:cb:
2d:6a:9b:f6:44:45:7f:b8:0d:d0:d2:fd:27:c3:a4:
74:5d:83:c5:fd:49:0b:e7:88:25:7e:35:81:9f:bb:
1b:ed:02:e8:3c:ff:30:0b:3c:aa:e6:cd:a0:1b:55:
8f:9d:66:9f:af:69:91:56:11:f2:13:4e:3d:d1:09:
65:73:9e:2b:09:c2:7b:8c:cc:41:3c:a2:63:09:72:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:E1:04:73:C8:C9:FA:D5:9A:E7:30:D2:D6:92:98:48:78:66:26
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:93:d2:89:a9:e3:81:75:cb:51:cf:10:a5:ae:f9:08:27:9c:
a9:56:5f:c1:67:0b:51:51:4c:87:24:04:ee:98:d5:ac:5d:ea:
d9:06:3d:02:a2:49:ce:8b:5f:36:25:55:d9:85:4c:5b:2a:a1:
56:5c:b8:50:1d:e0:be:72:6c:8d:01:3d:9a:39:8d:7c:9c:86:
a4:58:ab:89:24:c1:b3:27:57:3e:81:8e:a6:b1:46:ad:19:10:
e2:e3:94:5f:88:27:a2:5e:6b:7c:10:e4:bb:7d:01:00:e5:81:
b6:8c:18:f5:94:f6:ba:21:5f:1a:bd:01:fe:43:d8:b6:ca:26:
1c:cd:95:21:30:a5:bb:32:9f:01:2a:d6:2f:05:da:b3:b3:04:
ce:6e:96:b9:08:2f:46:79:52:2e:64:64:29:d1:05:1a:f6:8a:
7c:eb:eb:0a:cb:c1:b5:68:8d:61:37:b2:37:b7:6f:0d:85:a8:
b2:29:dc:c6:05:f2:88:18:b9:62:b9:19:84:63:79:f2:c2:3e:
ea:ea:69:5a:0a:a7:9a:c3:28:79:a9:f9:91:a3:e3:a3:a0:d0:
84:72:bb:5a:40:18:0a:ef:bb:7d:8d:bb:2c:f9:d9:62:05:47:
67:c2:09:d9:c5:d7:8b:08:2a:2e:26:30:68:57:19:1e:e2:cd:
a0:a4:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:01 2025 by rpki-client