Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.mft
File: 1Age7jsu4zJbU-f01tibZAHiUiE.mft (raw, json)
Hash identifier: dLCCt2G1TMlVKF2FeTqd9zDDNcvfiM/Ep0rvbWKFUrM=
Subject key identifier: 7D:B1:31:99:60:89:1E:59:7E:8D:36:CD:A7:82:F0:4C:E3:3E:34:F5
Authority key identifier: D4:08:1E:EE:3B:2E:E3:32:5B:53:E7:F4:D6:D8:9B:64:01:E2:52:21
Certificate issuer: /CN=d4081eee3b2ee3325b53e7f4d6d89b6401e25221
Certificate serial: 01941703096C0E653BB71C4706E6E61630EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Age7jsu4zJbU-f01tibZAHiUiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.mft
Manifest number: 0A8B
Signing time: Mon 30 Dec 2024 10:01:02 +0000
Manifest this update: Mon 30 Dec 2024 10:01:02 +0000
Manifest next update: Tue 31 Dec 2024 10:01:02 +0000
Files and hashes: 1: 1Age7jsu4zJbU-f01tibZAHiUiE.crl (hash: xcZUxB9oFj/fVGnzphqOcibyBcd5eiQdm3xZ+XfVsa8=)
2: GsrPfv5N-UiBRH9RR--TBVcqYRE.roa (hash: vv9qzP/SWJG1f2bz8IRZ5ulLWijDut+vyBKn1yuj3JM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:03:09:6c:0e:65:3b:b7:1c:47:06:e6:e6:16:30:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4081eee3b2ee3325b53e7f4d6d89b6401e25221
Validity
Not Before: Dec 30 10:01:02 2024 GMT
Not After : Dec 31 10:01:02 2024 GMT
Subject: CN=7db1319960891e597e8d36cda782f04ce33e34f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:a6:20:14:2b:d4:67:b5:f4:a6:b6:4d:90:
e2:03:83:4a:b6:31:06:27:2c:00:84:36:76:15:d5:
74:f9:fd:80:93:9e:7c:be:f8:0d:5e:34:9d:c3:c6:
13:8c:e1:d5:f8:c5:84:91:7d:e1:15:e1:5d:37:08:
b2:e9:9a:f4:54:2e:0a:12:2a:c0:2b:de:46:fb:e3:
a9:2e:13:2c:1f:ea:dd:2e:81:1b:7b:00:cc:58:1d:
8a:ab:28:b8:1c:e2:d5:2c:f0:7b:05:22:6c:4f:e2:
9c:5e:73:58:6b:fd:e5:6d:10:a4:ea:e9:74:4d:5e:
5a:92:03:f0:8e:19:7b:a1:6d:1c:5e:8e:b4:be:cf:
5d:56:aa:fa:32:bb:79:a6:ac:81:df:17:80:9b:64:
05:1f:c3:22:c1:b8:07:e0:d0:a9:78:cb:08:98:4e:
d6:bd:45:b1:f1:06:48:54:3f:f7:b5:84:56:f3:ae:
52:7c:9d:a0:83:e2:2d:12:e9:4a:64:aa:d4:e6:2f:
7d:fc:d0:33:35:df:ae:0a:15:79:88:72:a8:3d:06:
b8:2c:b0:58:8a:b7:54:75:fd:a3:f8:51:d1:88:b4:
82:b5:df:2f:16:3c:16:91:0a:6a:cd:08:92:ed:d2:
54:8f:a7:57:4d:35:5e:b2:67:ba:48:f9:51:92:f1:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:31:99:60:89:1E:59:7E:8D:36:CD:A7:82:F0:4C:E3:3E:34:F5
X509v3 Authority Key Identifier:
keyid:D4:08:1E:EE:3B:2E:E3:32:5B:53:E7:F4:D6:D8:9B:64:01:E2:52:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Age7jsu4zJbU-f01tibZAHiUiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:64:4f:aa:74:41:39:68:97:78:5c:99:c0:e7:f5:12:d5:c5:
d6:d8:ba:f8:ee:03:b2:69:cf:b9:bf:fc:d0:57:04:46:68:64:
69:37:38:99:d3:2b:62:c0:2c:48:26:52:2d:43:4c:0d:fb:eb:
3d:ba:a1:ca:2e:54:38:4e:92:6d:81:e4:72:78:0b:aa:c1:a3:
68:c7:0a:ac:0d:28:1c:ea:d3:67:80:7a:30:73:e8:f6:0f:ed:
07:59:e4:d2:5d:6e:b4:20:13:15:93:46:1d:98:65:6c:81:85:
43:4f:30:b2:9b:64:74:54:cb:d0:bd:07:7e:3f:c4:dc:e9:56:
8e:85:c4:1d:58:cc:14:09:03:82:fc:46:b2:13:c7:03:46:9b:
2c:09:0e:a8:8a:7d:b2:bc:66:f7:54:e6:87:45:93:68:c3:3a:
1c:88:76:79:4b:1e:b6:9b:2d:54:b3:55:4b:a6:12:31:9c:b2:
a8:08:50:04:55:d5:c7:a6:d6:63:6d:6b:26:d1:fd:22:07:84:
50:00:7b:31:54:9e:ac:7d:99:26:03:2c:e7:a7:40:56:a4:cd:
bf:0c:6f:fb:dc:3e:db:c1:c6:a7:37:12:36:91:a9:33:14:ff:
7d:69:57:16:da:69:e3:90:84:c2:84:1f:7c:6c:1a:b4:36:6d:
ae:16:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:35 2025 by rpki-client