Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
File: 1HzOipfiAqi0Syb1f09wlQIY5Sw.mft (raw, json)
Hash identifier: 8n+HG46LDS5h+9l7fwt6e4i+7JJnhuDHzsZUOqwWvbQ=
Subject key identifier: 6B:B8:F6:C0:0D:87:EC:20:E3:EB:98:29:31:25:3A:3C:7E:79:A0:30
Authority key identifier: D4:7C:CE:8A:97:E2:02:A8:B4:4B:26:F5:7F:4F:70:95:02:18:E5:2C
Certificate issuer: /CN=d47cce8a97e202a8b44b26f57f4f70950218e52c
Certificate serial: 01932DFC8668208A618D1C1CB5E4CBDBD44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HzOipfiAqi0Syb1f09wlQIY5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
Manifest number: 135A
Signing time: Fri 15 Nov 2024 04:02:24 +0000
Manifest this update: Fri 15 Nov 2024 04:02:24 +0000
Manifest next update: Sat 16 Nov 2024 04:02:24 +0000
Files and hashes: 1: 1HzOipfiAqi0Syb1f09wlQIY5Sw.crl (hash: g9Tr+oh7QUlcyUwInGE4FvNMp4svz418TgWM7urquSM=)
2: CdGWG0aXiAsGLPUNOk7AhXTL9XE.roa (hash: 3H/RxL9TDxwSfyX3/fSr2GyxuXMODweC7zGhAJGw3yE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2d:fc:86:68:20:8a:61:8d:1c:1c:b5:e4:cb:db:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47cce8a97e202a8b44b26f57f4f70950218e52c
Validity
Not Before: Nov 15 04:02:24 2024 GMT
Not After : Nov 16 04:02:24 2024 GMT
Subject: CN=6bb8f6c00d87ec20e3eb982931253a3c7e79a030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:f0:66:c7:ae:66:50:5c:d5:fa:5c:3d:a1:
61:18:65:bd:d5:a3:72:f1:f0:a2:99:ac:1f:c6:7d:
a7:f6:2c:1c:cf:95:e5:96:93:48:f8:1f:43:3b:95:
aa:19:25:02:67:de:29:15:da:3a:0e:0b:5b:e1:26:
68:e3:c5:6e:f8:de:4b:ab:10:f1:87:c9:db:0f:a4:
c9:38:2e:72:f4:b4:01:59:c6:2c:7c:a3:7a:5b:41:
98:86:cc:f6:51:56:0c:a6:eb:b0:bf:31:55:fb:35:
93:7f:66:ea:35:27:40:3f:99:95:dc:f8:3b:71:6b:
f6:20:65:75:47:5e:56:aa:b0:bf:21:be:e8:6f:5b:
dc:17:54:d3:5e:45:55:e1:36:23:f8:79:1b:e0:45:
01:dd:16:dd:76:c4:b3:7a:ea:d0:87:1e:8f:5e:86:
ba:5f:1e:0e:24:5a:b1:ac:8b:0f:7d:5e:74:44:e7:
00:0a:a7:70:6e:14:24:59:28:6b:74:09:d2:f4:06:
dc:b1:48:54:61:90:ef:1a:f4:e6:1d:8c:80:8c:c8:
f9:53:d8:f9:c0:49:fb:c1:cd:dd:14:71:fa:09:51:
97:86:c3:1e:12:13:87:9a:31:df:b8:9d:f8:c4:23:
88:3a:45:c0:ec:e8:e9:4b:0c:c9:4c:1d:2c:c0:42:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:F6:C0:0D:87:EC:20:E3:EB:98:29:31:25:3A:3C:7E:79:A0:30
X509v3 Authority Key Identifier:
keyid:D4:7C:CE:8A:97:E2:02:A8:B4:4B:26:F5:7F:4F:70:95:02:18:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HzOipfiAqi0Syb1f09wlQIY5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:60:96:0a:8d:ce:70:ab:47:77:08:d2:54:8f:40:aa:66:df:
33:d6:2e:ba:cc:3d:af:8f:29:cb:2b:18:16:96:ee:01:1f:0e:
2f:af:9a:c4:f0:fa:98:d3:27:39:f4:60:88:04:a1:d5:4c:d9:
7b:8a:a2:ba:0f:54:7d:ba:00:29:f3:14:7e:b5:95:0b:10:e2:
32:06:82:54:7f:20:d4:9a:57:a2:47:ad:be:e9:77:a5:d2:53:
82:af:9c:50:04:7a:f2:1e:14:01:b0:5a:61:34:69:aa:bd:eb:
9f:7b:19:81:cb:82:af:b0:6a:ce:ea:ea:16:94:dc:31:42:7f:
50:45:f1:a7:a1:14:18:8c:ed:2d:b5:e7:dd:de:e5:8c:13:30:
44:c8:7c:72:7f:ea:2c:f7:74:59:92:4f:3a:0b:d1:e3:b6:db:
bd:76:4c:91:9f:ce:96:8c:3d:cb:7b:df:a9:f3:5e:f5:0d:44:
58:aa:3c:b0:3d:6f:f7:8e:37:7c:21:57:9e:65:75:fe:75:f8:
a4:4f:4e:25:e3:2b:92:f5:4d:84:11:25:41:8b:21:f6:7f:9c:
7e:95:8d:2a:62:05:3c:ae:9a:e0:5f:7f:33:64:77:3d:f5:1d:
52:e4:00:db:c8:a9:8b:1a:b6:53:9b:d6:f2:01:7e:31:c1:1c:
07:2a:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:03 2025 by rpki-client