Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
File: V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json)
Hash identifier: eDtfbeTO0WrkkKv9dGfQqJLHgpkMV7EA2WJ2r90n/hs=
Subject key identifier: 77:99:25:0D:2D:9C:D8:53:DF:D0:13:F8:A2:FD:82:D1:B6:0B:1F:DE
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial: 0194BC04BE5F3419F0025AC7BBD9B3B0A406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: EQPOhUSrp_265j0O-uMyhE9jt_I.roa (hash: rrM5XgLKkJnvxVqnAYFYnHJh7gl05YTg1NaJpYIDwHg=)
2: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: Y4Qaq5GipYLXJ2seQJaSX3kJk/9pPHcvLJOap9Q+nvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:be:5f:34:19:f0:02:5a:c7:bb:d9:b3:b0:a4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=7799250d2d9cd853dfd013f8a2fd82d1b60b1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:85:af:96:92:bc:5e:af:b7:a9:74:6b:3f:
b2:27:dc:e0:7b:59:eb:ba:a9:20:ca:dd:af:18:b2:
9f:ac:3a:13:8b:44:d1:c9:86:50:c7:8d:49:35:33:
91:b2:8e:24:93:12:ef:8e:f5:f7:58:12:84:cf:51:
8d:30:50:68:48:05:3f:91:2a:46:05:1e:45:d0:80:
ba:33:82:00:61:16:7f:c0:18:26:04:82:bb:f8:8c:
6e:59:fd:74:43:98:7b:5c:99:b5:fe:d7:a8:50:49:
e3:54:b2:ee:c7:75:b5:88:40:1d:fb:fe:83:a8:bb:
88:41:12:e8:53:4b:08:a6:15:5a:25:63:25:36:ef:
3f:e1:35:ab:59:fe:e2:40:1e:d5:d1:4e:7b:80:2f:
fd:89:25:13:2a:a1:cc:4c:55:d1:66:c3:e7:d8:ad:
81:25:58:3b:d9:c4:8d:2a:83:c0:02:52:a0:f0:3b:
ba:2a:85:a8:bd:53:ba:ec:ec:31:34:79:d9:c3:2d:
32:ce:c4:34:5c:3b:0e:f9:fa:af:c6:54:ab:91:c4:
bf:a3:b4:ac:aa:3c:20:36:a9:75:99:7a:ec:bb:f6:
ea:1b:e6:3c:f4:90:24:41:85:18:22:df:a3:9f:fa:
9e:46:88:16:c3:b8:ed:72:87:17:94:ef:ce:8e:94:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:25:0D:2D:9C:D8:53:DF:D0:13:F8:A2:FD:82:D1:B6:0B:1F:DE
X509v3 Authority Key Identifier:
keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1d:a3:ca:e8:ac:04:ab:71:5e:8a:53:d5:04:c2:62:27:eb:
fd:12:bb:2d:33:be:92:9a:dd:12:a8:d5:40:c7:2a:d1:a4:93:
8d:6e:aa:b8:26:89:83:f5:5c:a7:78:24:c1:86:fd:60:ec:2a:
04:d2:1e:ee:0e:3c:a1:b9:d3:d7:97:17:33:ab:f4:ca:cd:16:
c2:ab:a4:d0:bd:dc:6a:da:46:df:34:6a:d4:73:4a:6a:8c:24:
c4:98:f3:5a:2e:2d:fb:4f:40:34:3d:ac:b6:c4:99:89:e8:9d:
c8:30:27:b2:19:5e:91:e1:99:2c:6c:0d:c2:21:d2:71:71:40:
16:37:18:27:69:72:f9:3e:0d:ba:6b:1d:9d:e2:78:80:e6:05:
10:59:8c:b9:09:78:eb:00:47:cd:f6:b1:7c:a1:af:f0:9d:eb:
37:8c:42:6c:c9:ee:50:13:30:c1:bb:97:2d:34:09:5f:cd:e0:
4b:1b:2e:0a:61:b9:85:f9:01:61:f4:88:5c:b0:9d:5a:46:a6:
cd:4f:55:cf:97:85:1e:6c:c4:41:a5:85:d8:8c:cc:bf:31:ed:
52:7a:1b:58:cb:c1:3e:1d:13:0b:3c:1b:ba:24:e1:84:cd:c0:
b4:e2:15:c5:10:05:13:6f:50:12:4b:ce:9c:a8:3b:24:d2:d2:
1e:03:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:37 2025 by rpki-client