Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
File: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft (raw, json)
Hash identifier: ySqQWv9pCnP6crY8cKH/56JaLaYOl6aWVRWFTTtHqLQ=
Subject key identifier: 13:B9:11:CA:F9:04:6D:E0:22:D4:22:22:B5:1E:0B:39:65:6E:E6:53
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 0195E0B48487FDD5F0B589243B9D1A5A2C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
Manifest number: 14CD
Signing time: Sat 29 Mar 2025 07:01:21 +0000
Manifest this update: Sat 29 Mar 2025 07:01:21 +0000
Manifest next update: Sun 30 Mar 2025 07:01:21 +0000
Files and hashes: 1: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl (hash: 3MTBsQwuxvQF5VvZz8v25OFai0Do4tG3ZdxkiN7owgc=)
2: SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa (hash: z3DEUmnDk72CZ2z3i1AK8FkYVNV6rEs5/0h0eR+TClE=)
3: USACkltJE4QqwVVNlMM3MAOHbI4.roa (hash: JKLOLgv3d9BtTTCj6wlSjdzlBfme6YgxxZZXaxE+z9Y=)
4: dbrSfqG4yJ8e6RjT1uN9s6dEGrQ.roa (hash: o+ewDMF8kuHL4BLfo2Z0qsDG7FEYFuX7LdWzLtyg2Y8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:84:87:fd:d5:f0:b5:89:24:3b:9d:1a:5a:2c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Mar 29 07:01:21 2025 GMT
Not After : Mar 30 07:01:21 2025 GMT
Subject: CN=13b911caf9046de022d42222b51e0b39656ee653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:dd:ce:96:56:3e:ef:53:a2:c2:74:6f:13:
91:11:63:7d:9a:da:47:d4:48:4c:98:ae:f5:6a:e8:
89:38:4d:6b:ea:88:52:36:9d:d7:3d:86:ce:2b:d7:
85:df:69:4a:cf:32:fb:2b:27:95:a6:94:73:c4:08:
84:3e:d8:4a:c1:a9:3c:1f:75:4a:ab:db:50:ce:cc:
f8:5c:02:56:37:19:d9:ee:1b:e4:0a:a4:75:4e:12:
b5:21:bf:53:f1:1a:a6:9a:e3:ef:96:4f:f0:f7:89:
79:b7:2f:b6:ea:17:25:f9:d0:73:4c:7a:da:5c:72:
c6:33:45:f0:c0:af:64:e9:54:7c:02:52:22:75:8c:
80:14:46:cb:c3:36:25:5b:10:a3:a4:bf:7e:5c:e7:
cb:f4:54:98:1f:f1:b5:c4:c1:ac:03:06:30:35:d4:
01:8c:c7:d2:00:f7:56:ac:ae:f2:79:87:54:1f:7e:
d3:92:cf:c9:ce:5b:b6:19:0e:c5:f7:ba:ac:3a:f3:
72:a2:64:5b:42:7f:27:cb:df:00:3e:41:02:04:28:
1e:bf:5f:10:02:15:da:1c:94:d8:3d:dd:42:16:19:
03:d2:b4:9d:92:90:b1:e1:36:bf:6c:80:b4:5e:36:
b6:69:8e:a0:aa:b5:e0:99:8c:8e:58:78:65:29:fd:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:11:CA:F9:04:6D:E0:22:D4:22:22:B5:1E:0B:39:65:6E:E6:53
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:fc:83:bd:51:5f:27:63:f9:dc:c1:84:81:95:da:ca:c1:
10:30:e9:ae:3e:c3:ff:e2:88:f8:85:71:78:a4:0e:75:50:b0:
68:43:10:b0:66:88:8f:70:06:92:a3:6d:fd:be:a0:e2:9b:b1:
f0:67:21:fa:69:0e:8c:6c:be:f0:65:bf:4a:c4:9e:d0:4a:de:
46:36:7d:80:d5:b8:2c:0d:f2:b0:e0:2f:f1:80:fc:48:8d:40:
02:ed:48:b3:c9:ea:de:f5:f5:76:a5:56:e2:ec:d0:3c:75:be:
12:f9:fc:37:b1:cd:50:76:04:18:bf:bf:ab:6a:88:ee:8e:35:
c5:1c:7b:1d:0f:a8:c6:a5:a6:23:fe:9c:0c:ff:83:dc:7c:a6:
d5:5c:ac:15:26:4d:4b:84:06:1c:45:8b:71:3c:4a:39:93:2a:
ec:d9:fb:d9:4c:d8:ab:76:e7:3f:81:c2:bb:bd:fd:e3:eb:7b:
6b:56:6e:04:94:7a:7e:76:71:9c:67:98:ef:b2:46:f3:23:11:
a7:67:96:88:eb:f9:ec:2c:d1:99:df:3c:46:75:d1:cb:a3:21:
99:0c:f3:ba:4e:28:80:60:ef:62:d9:13:81:8f:66:ff:79:9f:
59:80:be:71:81:3c:54:11:c9:46:ff:aa:df:e3:c9:86:4a:4e:
6c:b4:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:15 2025 by rpki-client