Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: CTgxUWmCCmnV7E3El4nCT+LL59UBNNvSUnKkIJ6jfS0=
Subject key identifier: 81:FD:40:C9:49:35:E6:21:55:B7:77:03:9F:44:22:AA:D9:B0:E6:86
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 0194BD85433CF0CA32872A8C78887ACF58CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 087E
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: isbs5yd3JX7LtOc7n1/TtcnUjMRjMYZc0UCVru3Ry4Q=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:3c:f0:ca:32:87:2a:8c:78:88:7a:cf:58:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=81fd40c94935e62155b777039f4422aad9b0e686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:02:49:49:e6:9d:cd:49:43:c1:d8:b8:f7:
e2:3d:cd:00:f7:07:5d:e2:0f:c8:65:e6:86:f7:3b:
89:44:af:cd:2d:d8:52:f7:ac:5b:28:9b:ee:4b:75:
41:66:79:ff:e1:ad:fa:20:5c:75:b5:29:e1:d3:58:
11:18:ed:0d:9a:d8:c5:d3:8d:48:5e:56:c7:6e:51:
a5:98:49:23:d7:6a:0b:d1:b9:58:02:76:27:38:69:
e7:b0:d4:92:0c:a4:59:47:5a:f3:54:b0:54:3f:33:
2a:2e:01:ea:d2:76:f8:a0:83:08:8d:7e:fe:d7:34:
9f:10:96:ee:1a:5e:b1:02:2b:90:68:88:2e:b2:ef:
93:d5:7d:15:48:bd:3b:62:f8:d1:3f:29:b0:e3:e1:
1c:27:5a:ae:08:58:29:a5:87:37:c5:56:66:81:91:
e6:b5:f4:e6:00:bc:b3:36:31:ce:4a:ed:c3:41:98:
c1:f0:99:d1:a4:4a:e1:5f:86:82:d6:f8:f1:a8:ee:
39:2a:b3:e0:eb:8f:9b:6b:50:90:2a:72:7c:71:9e:
cd:4c:27:9e:06:cd:fc:7a:f5:e7:31:37:d5:12:40:
7c:cf:1c:e4:b1:37:cd:05:aa:4f:5d:8b:cc:97:85:
35:27:0f:10:e4:f3:b0:45:0e:69:bc:01:e5:6e:9d:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:40:C9:49:35:E6:21:55:B7:77:03:9F:44:22:AA:D9:B0:E6:86
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5b:30:eb:a4:d8:15:94:9a:07:bb:70:f2:f2:f6:a3:bb:95:
25:f1:ae:f0:dd:73:cc:d9:e6:bb:3d:1b:77:ab:90:ee:ae:65:
a2:0b:29:af:ce:69:9f:b4:77:67:27:ea:bb:5b:99:58:97:d1:
44:45:b0:70:96:82:6a:3e:8b:46:39:3c:3e:99:1b:60:83:82:
b7:01:4c:ef:bd:06:2e:f6:d9:55:68:43:80:db:c5:ec:9d:8f:
c0:0b:b5:11:df:d6:be:83:7f:c4:33:fc:da:48:23:7e:74:b7:
a9:86:59:fc:fa:21:bc:74:30:17:93:de:58:8c:19:65:cf:df:
f3:29:88:94:36:fe:9b:66:b3:08:14:a0:53:cf:db:c3:11:59:
41:98:2c:11:28:64:d7:98:1a:55:c2:a8:44:6f:bb:52:f6:26:
ea:16:b8:2d:94:45:98:cf:d7:90:15:ed:6f:cf:58:5e:0f:0f:
0c:2a:e5:e5:f9:a6:6d:d1:55:b6:fa:8c:3e:26:84:be:c3:fa:
c5:3c:b9:89:bd:26:3c:c9:7a:64:42:e0:b1:cd:11:8d:1b:f0:
8e:35:36:6b:d9:4a:d7:fb:ca:2f:41:82:87:19:92:78:dd:d6:
76:2d:ae:fd:df:de:44:c4:39:44:3d:45:64:ec:75:28:35:ce:
eb:6f:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:42 2025 by rpki-client