Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: EgR2yCnvFILbzDbKfKqj1H+6FVZx0jMTEAETvjmgyAU=
Subject key identifier: E1:DC:90:A3:18:4D:C3:B7:65:72:25:CC:B3:08:B9:91:1B:ED:0C:AE
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 0194BD85484FD802968B0A88945EE5BE49FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: iFM8GVYSLu5ZskN9/Q2oB8Yj5oF3RLI8x6jAFWdbgBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:48:4f:d8:02:96:8b:0a:88:94:5e:e5:be:49:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=e1dc90a3184dc3b7657225ccb308b9911bed0cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:a2:2c:34:81:e5:81:b3:92:73:9d:23:6e:
df:d5:d4:7f:03:eb:9a:9a:4e:3f:ff:6e:4b:a6:5e:
4d:4d:69:cc:55:c7:40:ee:18:e6:fd:d0:f2:d9:1a:
2f:4d:26:38:69:78:1f:2f:88:96:1e:55:9b:0c:36:
6a:51:c8:50:4d:e4:fc:c4:8b:45:b7:f8:96:c3:c7:
28:6f:e5:26:58:7a:58:ac:fe:87:a4:f6:4e:0b:a8:
27:be:37:e3:88:c4:e3:6f:27:8f:25:a6:89:da:f2:
45:cd:03:dd:f7:70:f8:3a:d3:28:32:a8:82:41:df:
08:5b:a5:f1:e1:e8:73:9c:ce:0a:55:00:5c:36:e7:
54:56:bb:e6:2f:db:00:93:42:6b:d2:7d:81:ef:37:
65:98:88:d2:70:35:1b:f4:4d:83:ee:ba:c2:04:d0:
52:0d:2c:53:37:b8:dd:e6:ca:90:06:1a:e3:c4:2b:
96:56:49:03:94:1b:64:8d:9f:0f:36:94:c2:5f:8c:
2b:bd:ba:47:cc:55:05:fa:c2:7e:da:a1:64:db:be:
76:8c:d8:67:1a:cf:e2:71:91:a3:d3:c7:99:c8:45:
1d:f8:33:90:e6:62:47:52:23:e3:c5:fc:14:f2:ce:
ca:13:d7:24:63:49:c7:a6:79:52:85:10:96:5a:83:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:90:A3:18:4D:C3:B7:65:72:25:CC:B3:08:B9:91:1B:ED:0C:AE
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:be:22:2d:dc:a4:37:19:f6:83:dd:72:c5:0f:76:fe:64:
c8:4f:9d:bc:d5:43:00:d0:98:d5:96:1b:c3:f0:5e:c4:aa:82:
50:ae:5b:7d:dd:b5:9f:b6:30:8c:72:b9:a9:db:a8:21:4b:06:
15:f1:3e:ef:02:7a:bc:1a:b8:07:4c:2a:7b:b6:4a:94:cb:4c:
af:e4:25:d2:ff:3f:43:08:22:bb:f3:de:0f:59:a0:2c:e2:bb:
08:40:b5:e5:50:5f:c0:fe:b9:ea:ee:c3:30:fe:54:0f:0a:1e:
5d:95:bb:20:78:59:d5:a8:07:b4:07:95:96:8e:98:1b:4c:19:
3d:52:d5:46:5b:ac:0c:fe:40:5f:9d:6a:df:36:8b:e3:c8:a2:
c8:b4:f9:2f:c4:b5:37:c8:e6:ff:01:a1:25:28:86:b1:8f:b3:
41:10:d4:15:e3:87:5a:90:9f:c3:14:e2:b1:0b:a7:25:b6:85:
86:5f:79:3a:49:d3:63:c6:a7:ee:f5:2b:b3:fc:94:65:78:a9:
ea:50:c7:1a:c5:45:8b:52:82:ac:1d:b4:23:c1:87:64:08:ee:
d5:32:a0:f6:87:36:cf:d6:8e:5c:eb:e8:bb:a0:27:be:8e:56:
55:e0:1a:e3:76:dd:83:ad:27:c6:bf:f8:fe:57:b4:ad:09:63:
7f:2f:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:06 2025 by rpki-client