Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
File: 1HzOipfiAqi0Syb1f09wlQIY5Sw.mft (raw, json)
Hash identifier: ziIxhhvjaMcdEoi0DlusQFB8OLWygNYyHaWKrQEsjh8=
Subject key identifier: 32:97:D2:8D:F9:14:CE:95:6E:B6:25:D3:5D:FF:98:2C:41:55:88:FD
Authority key identifier: D4:7C:CE:8A:97:E2:02:A8:B4:4B:26:F5:7F:4F:70:95:02:18:E5:2C
Certificate issuer: /CN=d47cce8a97e202a8b44b26f57f4f70950218e52c
Certificate serial: 01932FEB85DA2CA7FF60C432947F4AC024FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HzOipfiAqi0Syb1f09wlQIY5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
Manifest number: 135B
Signing time: Fri 15 Nov 2024 13:03:04 +0000
Manifest this update: Fri 15 Nov 2024 13:03:04 +0000
Manifest next update: Sat 16 Nov 2024 13:03:04 +0000
Files and hashes: 1: 1HzOipfiAqi0Syb1f09wlQIY5Sw.crl (hash: F/5N970L0QGg3ecsRSOMEN6sHRdE4JIxRhfVMzo1ndA=)
2: CdGWG0aXiAsGLPUNOk7AhXTL9XE.roa (hash: 3H/RxL9TDxwSfyX3/fSr2GyxuXMODweC7zGhAJGw3yE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:eb:85:da:2c:a7:ff:60:c4:32:94:7f:4a:c0:24:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47cce8a97e202a8b44b26f57f4f70950218e52c
Validity
Not Before: Nov 15 13:03:04 2024 GMT
Not After : Nov 16 13:03:04 2024 GMT
Subject: CN=3297d28df914ce956eb625d35dff982c415588fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:ca:73:1b:ae:a0:e4:ab:cb:63:fa:ba:ed:
28:a0:d8:94:79:66:69:08:98:00:14:66:e6:88:90:
3b:f5:31:44:b4:9e:7e:d3:b9:f5:e1:11:fa:ad:39:
c8:04:bf:cf:9c:9b:1f:56:d8:30:67:c5:be:23:22:
c4:89:bc:6f:30:94:a6:7c:be:f2:d6:ce:06:43:46:
52:0f:e8:f0:8f:2d:72:60:86:75:81:8e:52:f2:1c:
d1:39:3b:f3:1e:59:58:2c:a3:53:e2:10:df:62:42:
06:41:ff:71:7b:9c:79:fc:2d:65:d9:bc:2a:9f:47:
23:0a:17:3f:e5:88:fe:61:22:ae:f7:c0:09:8d:c2:
d8:ce:19:99:55:72:f6:8e:f4:eb:ab:84:89:75:ce:
df:af:09:51:33:cd:da:63:38:94:7f:70:d3:4a:0e:
55:98:5c:d4:47:10:fb:8b:af:7b:86:c3:9b:44:1a:
7d:27:da:47:5c:3b:6e:71:75:b9:d4:11:ef:c2:32:
01:dc:ab:86:9a:aa:a9:f4:9c:b6:01:c5:f3:62:5d:
7d:fa:42:91:2c:55:dd:cb:1d:0e:b8:11:c2:2f:fc:
d6:3b:a5:90:bb:13:3f:aa:05:df:c2:5a:3a:ed:00:
ed:35:e3:9d:e9:21:32:2c:0e:2b:be:aa:90:37:62:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:97:D2:8D:F9:14:CE:95:6E:B6:25:D3:5D:FF:98:2C:41:55:88:FD
X509v3 Authority Key Identifier:
keyid:D4:7C:CE:8A:97:E2:02:A8:B4:4B:26:F5:7F:4F:70:95:02:18:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HzOipfiAqi0Syb1f09wlQIY5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f1:e8:13:73:2c:e6:e4:ad:d5:97:61:6e:29:b7:02:b3:d4:
7a:71:21:fb:2f:8e:a7:b6:17:4d:9f:6b:86:fc:ad:13:cf:f3:
da:1d:d4:47:88:fa:5d:c9:27:ac:d5:65:07:78:9d:24:19:4c:
61:2c:52:da:8e:1d:13:4f:53:92:07:4b:7f:10:ab:bb:6a:fd:
ba:a3:4f:e6:2a:a3:37:cc:89:2a:5e:fc:12:74:7e:ff:13:bd:
9f:5d:f3:cc:25:48:79:84:07:e3:58:b2:3a:b6:ec:9e:4b:3c:
77:80:c0:08:3e:19:a5:64:e5:16:d4:22:53:e7:67:ef:29:e9:
2b:8f:96:d2:eb:05:0e:f0:14:d9:09:b4:5c:50:74:57:52:99:
94:37:84:81:a3:9f:c0:9d:33:32:b4:27:87:1a:c4:7f:ce:9d:
b5:3b:8f:cd:c5:b4:4c:46:11:fc:24:18:c7:58:f3:22:84:15:
62:28:7e:a9:d8:fc:33:bb:06:a8:bc:0b:de:05:5b:b4:b9:8e:
17:6c:81:11:5d:48:82:bf:1a:cd:4a:8a:c0:7e:29:94:af:e4:
df:e5:dd:ac:c3:32:63:21:f0:73:97:49:50:b4:51:dc:17:6d:
d3:94:ff:78:70:22:7d:d5:ed:8b:37:1f:bc:e9:11:7a:57:85:
1f:c6:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:47:22 2025 by rpki-client