Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: anViakIOvZfxaQTWvg1Oz4ohfeCR6rPBn60HVnbORD4=
Subject key identifier: F4:70:48:AC:AA:81:E5:AA:0C:CE:F1:86:9B:D3:9D:5D:5B:AB:68:72
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 0194BC3C4CB4BB6548B5B5E083C811284136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: SKQ55kL+/2rspINVFYgYHjTBqXHJBhI71fsuJUPMEcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:b4:bb:65:48:b5:b5:e0:83:c8:11:28:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=f47048acaa81e5aa0ccef1869bd39d5d5bab6872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:90:53:09:42:dd:10:30:06:fe:dc:d0:67:
c9:03:d6:bb:c1:af:d1:e1:a1:11:fa:77:e9:fb:7d:
d6:ac:8a:99:9d:8d:65:9f:05:99:91:74:f7:88:54:
49:07:03:ab:4b:3a:e5:0b:1b:ed:45:9c:dd:55:46:
f8:35:7d:c4:23:e9:8a:2e:87:eb:50:dc:58:c5:2d:
27:fe:bb:90:4b:41:b6:66:50:8c:40:3d:a8:55:5a:
5f:26:8c:a2:32:c5:02:c3:5d:05:5a:04:57:20:18:
d3:93:de:05:35:2b:10:1c:44:bd:72:88:14:e9:2d:
a4:af:05:a4:43:ed:00:4f:f4:2b:6b:63:b4:48:ea:
1c:0e:96:04:dc:15:1c:d3:51:3b:f6:a3:ca:6e:af:
b1:b7:a8:83:d5:68:62:95:eb:e7:15:f6:1f:78:6c:
ea:57:cf:51:c7:a3:50:8a:0c:9c:97:18:98:8c:69:
6c:2b:0c:f6:7f:3b:b8:7e:a7:7c:09:e0:a6:b0:13:
39:29:57:fb:d3:c5:f0:42:6d:50:90:08:e2:8b:05:
5d:74:6b:fb:95:f0:59:e5:3b:00:98:3b:e0:62:91:
b3:e3:84:ce:8e:d2:09:b8:6a:fa:aa:7a:b1:48:55:
06:b0:82:f5:fe:2d:44:b9:90:bf:d6:8e:6b:fe:43:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:48:AC:AA:81:E5:AA:0C:CE:F1:86:9B:D3:9D:5D:5B:AB:68:72
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cc:4d:58:3e:b6:d2:51:4f:96:63:1c:bc:ca:74:bd:73:9f:
1d:dd:c0:dc:21:16:bc:a6:48:fd:ff:35:02:e2:49:71:90:81:
27:74:0d:18:77:50:e6:49:f5:63:90:49:07:11:56:9b:e2:2e:
f5:90:d5:05:49:5c:50:b6:69:ca:b2:82:82:7e:ed:69:97:66:
8d:13:bb:72:76:b4:de:a4:25:49:79:36:df:1b:e0:b2:22:da:
e7:e1:f3:4d:8a:d8:f1:94:4c:d8:29:67:b7:7a:c2:c1:93:bb:
6f:c2:ed:54:aa:1b:dc:ce:2c:93:4e:1b:b2:bf:bd:b7:bc:2b:
83:2d:75:84:1a:57:d5:b6:63:cb:21:56:3b:63:76:4e:d5:32:
18:e1:68:c6:e4:52:a6:eb:af:88:c2:28:8b:cf:36:ea:e4:31:
43:78:3c:e2:98:7f:08:b3:d3:4e:e2:5f:f4:c4:b6:c1:da:6b:
25:d3:12:fe:17:2d:06:15:52:ce:ae:1c:09:5c:c1:b1:e0:0a:
13:76:11:a1:9e:40:e5:c5:c9:5c:22:8e:15:15:07:f4:6a:ae:
7a:23:f5:a4:f4:84:4e:f0:7f:32:87:5d:ab:c4:bb:3d:8a:bc:
91:00:88:39:49:a9:c2:64:c0:28:8d:7e:d1:2c:9a:9b:bc:a7:
08:b7:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:53 2025 by rpki-client