Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier: rqZmdw4B0rzDRITQ7vNVw5D2T1YRx1hdpI1FgFYCwLQ=
Subject key identifier: 37:49:FE:22:6F:1B:B9:F8:38:EF:D1:5B:9B:96:52:B6:27:5E:1C:A0
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 0194BD85962460F75438C5E698AFDDDB1EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: 7kxmS4S/0anOTQilxApYD1Zhgjl3VW3J8sJeMx3JYnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:24:60:f7:54:38:c5:e6:98:af:dd:db:1e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=3749fe226f1bb9f838efd15b9b9652b6275e1ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:34:df:62:c4:3d:63:b3:9f:ba:f1:82:e3:
4d:93:91:ac:f0:20:4d:5c:b3:ac:b8:a7:01:fa:54:
5a:18:33:c9:23:d8:ca:44:71:56:8b:58:9d:2d:e9:
a0:90:b8:a2:09:3d:4d:c7:78:70:b2:0a:1d:44:1d:
f4:d8:0b:ee:2a:f5:31:d6:17:75:fc:3e:c4:73:dd:
c3:de:4a:28:5a:58:40:5b:01:b1:62:2e:30:cb:8b:
80:94:96:12:24:24:a8:43:c1:22:60:29:5b:78:10:
89:27:e6:e4:6f:13:58:08:26:e4:c3:f0:4a:26:36:
45:3d:74:25:00:09:be:98:71:c1:7d:31:ec:65:4f:
7b:d9:f2:89:04:67:78:7c:3f:f0:fc:82:a5:13:af:
6f:e3:ad:08:e9:4f:f9:db:2e:fe:e6:6c:f3:ee:99:
d6:36:88:9f:53:ee:a9:2b:7e:d3:8a:55:18:80:c2:
f2:df:25:4b:09:0a:d6:0a:68:de:3d:57:c9:44:e5:
8a:85:96:3e:29:b9:80:7d:75:e2:70:b3:df:6e:de:
fd:4b:21:a8:0c:ed:36:0e:c6:4c:40:ac:2e:4d:86:
e8:56:2e:fc:70:63:7f:d9:ee:56:7a:3e:41:e4:d5:
d0:a1:94:81:6c:42:ee:16:81:da:27:c3:a3:fa:dc:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:49:FE:22:6F:1B:B9:F8:38:EF:D1:5B:9B:96:52:B6:27:5E:1C:A0
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:e8:c8:66:1f:30:7e:20:08:4d:66:1b:cc:87:f7:55:3b:
c8:f2:19:e7:ec:71:4f:4c:d0:0f:23:1e:bd:f6:3e:32:5b:81:
e1:6c:1b:f2:20:d0:d2:2f:4f:d6:f5:e9:8f:de:67:b8:1c:94:
f5:4b:d9:17:3a:e1:5c:7b:d4:c4:7f:a3:a1:14:1c:ca:c8:35:
ac:18:38:27:87:21:41:39:d6:da:58:42:51:ad:dc:89:97:8f:
39:6c:1f:cc:df:2a:29:1d:2e:3a:42:c1:b7:e3:d8:be:90:46:
42:44:0c:90:ba:81:98:1e:25:1c:bc:ff:a7:40:04:a6:e7:90:
ff:e8:ed:66:67:7c:e8:4d:23:d0:31:c4:2d:dd:af:39:b8:a8:
25:a0:89:c4:fd:61:a1:3d:6e:85:99:d5:be:b7:42:6b:a4:34:
05:83:e6:86:72:d2:fb:a3:78:24:b6:2d:82:0e:6d:c0:1d:b0:
80:f8:ae:7f:38:e8:d8:3a:16:e7:b5:a6:b7:d1:bf:c9:07:50:
f0:a2:35:0a:5b:83:80:fa:79:0a:a5:b8:58:8d:e2:e9:e2:1d:
05:a4:a7:60:b4:13:22:1d:f3:e3:a4:07:b7:35:ce:97:d1:dd:
23:97:ec:ad:8c:47:c6:e2:fe:ff:1b:55:7b:8c:a7:c7:3d:92:
1a:82:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:04 2025 by rpki-client