Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
File: D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft (raw, json)
Hash identifier: l34ma6TpQxv2y00Vrqo21P98nUnXgxniN3n+YskR/4c=
Subject key identifier: 9F:43:BB:2F:BF:30:DE:BD:34:54:8C:39:3F:6F:35:4F:96:67:62:6C
Authority key identifier: 0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
Certificate issuer: /CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Certificate serial: 0194BC04A64F5DB937A724F487E8A0EAE97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl (hash: 0/mv5vA+TmDvqYoAGmGLe6Ws2kn0M+bIbBrGXCV4DQg=)
2: PuHdQeDappRzDRm2Yyr-4eDAbVk.roa (hash: KGFP0rzHxbDYdX45bSQF+vCgYcGUoxOEmhLFhQ5K8ZI=)
3: VUuhainjhcYV5YRCiyXmkzZq9Bw.roa (hash: sqr3lmMmKZCw5Sb02g6kZwXmBiAXlMXLjjLm6QDb9BM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:4f:5d:b9:37:a7:24:f4:87:e8:a0:ea:e9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=9f43bb2fbf30debd34548c393f6f354f9667626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:9e:1b:8e:72:72:ff:02:69:d6:7d:64:5f:
cb:1e:95:13:66:a1:47:68:1b:49:cf:30:b6:0d:e3:
83:6f:6a:d0:da:74:03:11:7d:15:3a:72:5c:d6:10:
be:be:f1:74:0b:5b:e3:65:5f:77:d6:b9:d6:9a:20:
c3:9a:30:11:7b:b4:ba:4d:51:5d:be:72:c5:89:91:
ab:f9:34:81:f2:dd:b1:ac:e0:54:b7:16:ec:0f:e8:
61:5a:44:ad:7e:1e:6e:c9:91:26:23:ae:73:6e:52:
8b:7d:4a:fc:e3:91:1d:5e:63:8b:fd:37:4a:b8:fc:
63:88:d9:60:da:40:8b:9d:ce:83:99:f7:37:76:2d:
d8:ef:ee:cf:87:9c:89:60:30:85:a8:06:0f:57:9f:
ca:02:4d:cd:1a:1a:ac:2b:56:0d:89:c8:cf:fa:a6:
77:cf:38:f0:7b:1f:f6:bd:6f:bf:6f:2e:e9:98:bf:
9e:5f:6b:96:2b:c3:43:e3:e3:dc:1c:1c:73:68:94:
70:a6:b2:40:70:55:30:4c:e4:85:6e:7e:3a:6e:df:
df:0a:ca:6a:25:ff:5d:7e:cc:eb:bf:ba:68:8f:f1:
b9:d1:1a:bf:e3:c3:f9:38:81:75:1a:ce:2b:a6:62:
33:fc:aa:36:d6:bc:84:f9:55:47:60:72:b6:93:52:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:BB:2F:BF:30:DE:BD:34:54:8C:39:3F:6F:35:4F:96:67:62:6C
X509v3 Authority Key Identifier:
keyid:0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:37:61:cf:d2:f5:f0:67:70:0f:3d:e8:b7:73:18:49:7a:98:
eb:71:c8:63:05:84:f3:8e:16:0f:65:7c:2b:bb:97:02:0d:7b:
0f:05:d6:36:af:d6:68:a1:fb:68:04:b2:06:ef:e9:de:7a:e8:
96:59:da:16:59:44:d5:5f:6e:d5:71:fe:91:27:4c:18:c8:51:
ed:d5:d0:14:ba:91:57:aa:00:55:49:94:77:89:6c:48:c4:61:
b9:7a:3b:55:14:22:91:1f:a1:a3:3d:ee:f8:66:26:b9:b9:58:
61:e6:d0:8a:db:41:6c:b1:ca:02:29:5c:92:76:d3:f4:9c:fb:
5d:bc:dc:77:d2:df:9f:a5:da:e2:69:9b:7c:97:99:0d:24:9e:
4b:80:cc:11:95:38:bd:65:25:4d:7d:7d:5d:e0:5f:4e:8b:47:
5f:eb:31:ca:8d:e4:ac:70:9b:61:25:5c:ab:d7:03:f0:99:03:
e5:d7:52:96:d7:51:ae:8f:16:4c:47:6f:49:7e:c5:d1:dc:4c:
fa:c5:89:3e:d0:4c:47:9f:03:16:61:bb:d3:25:c1:44:fe:45:
5b:72:fc:2c:9e:5d:ce:33:15:71:0f:ff:e5:37:2a:12:a0:57:
af:9c:9a:eb:fc:aa:a8:07:b2:b5:f5:3d:c1:91:05:46:33:09:
8f:61:6a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:45 2025 by rpki-client