Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: b9Pr1fUWU2pstysHRfBUJl5xVdYjS3Moz0JE5hLRTaY=
Subject key identifier: 8F:2C:0F:5F:03:E7:D0:1E:9C:D7:DA:F7:69:B8:F1:AD:47:8F:F0:FD
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 0194BC72DF8BF3726DFC8FDF88FA5195B945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: JtWfM5CicEund4nZ1mFfvdm+huf+u6CzfFhfJ5lkN/U=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:df:8b:f3:72:6d:fc:8f:df:88:fa:51:95:b9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=8f2c0f5f03e7d01e9cd7daf769b8f1ad478ff0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:fb:a0:77:fd:0c:73:e4:6a:c9:90:0b:fe:
62:8b:24:e4:64:67:4e:9f:69:5d:8b:49:ba:25:e9:
90:43:56:b3:68:d8:6c:4e:28:cb:02:a6:5f:2b:92:
a7:59:c8:3c:df:92:17:e2:4a:e3:d7:49:c0:ae:f8:
00:6b:77:11:30:8c:de:7d:88:7a:af:86:2e:6b:44:
10:75:f6:02:b2:05:f2:46:cb:08:31:d5:e9:89:33:
fb:00:30:da:f3:f3:cd:f9:43:c1:93:51:18:29:3b:
0e:43:d2:33:08:08:22:4d:13:25:cf:0b:fa:3b:e2:
c8:96:5f:15:01:e9:83:9f:6b:bd:82:60:c7:3d:6b:
66:c3:a6:2d:06:cc:9b:10:be:d1:74:e6:ac:9c:7f:
5b:78:68:51:7c:11:6d:dd:a2:47:e4:a5:44:e2:84:
39:52:1c:b1:52:c4:6d:d2:88:ef:9c:07:b2:37:46:
9e:6e:0d:27:33:a8:ed:4d:18:05:de:c2:95:8d:fc:
e3:e8:8c:69:bc:28:fd:32:8a:ea:7f:e4:a5:4c:ee:
47:77:63:8c:02:c1:70:9f:9a:ab:25:ea:7f:fe:d1:
eb:d2:03:89:89:87:a8:02:5e:18:e9:07:10:29:de:
5d:9d:e5:b4:c0:aa:6a:b8:35:9b:00:3d:3f:17:c3:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:0F:5F:03:E7:D0:1E:9C:D7:DA:F7:69:B8:F1:AD:47:8F:F0:FD
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e8:f2:95:2e:6a:b1:e3:16:f2:5c:ed:3c:3e:41:42:48:80:
3a:d4:cd:e4:03:55:e4:7a:ca:dd:26:54:d2:9d:10:57:cd:8e:
ed:e3:8d:ab:d4:d8:9d:c6:4e:03:17:5c:fe:89:41:2d:6e:f1:
4a:af:34:39:d9:35:f0:24:ec:09:23:53:d0:6e:ec:1a:7c:e9:
02:03:6b:aa:95:bf:5d:f2:a1:5c:2c:8e:aa:49:28:45:61:5f:
76:d3:fd:77:6e:0d:2c:fc:cf:ad:cd:73:14:5b:60:4c:a3:2f:
66:26:f8:9b:fa:b6:78:cc:0a:37:ce:34:9e:c8:29:7c:0b:2f:
13:ea:28:ca:22:b0:b8:25:9b:7f:87:e0:29:c0:20:81:7e:b8:
a9:6c:52:b0:d4:6f:29:1e:e2:f0:e6:ae:5d:27:d7:74:8e:44:
bb:22:b6:cb:20:32:f9:28:94:8c:19:8e:60:6b:3e:36:ec:f5:
bc:0c:43:ed:eb:eb:5d:bc:3a:5e:76:fd:3f:5d:7f:e1:b0:0a:
4b:34:92:fa:11:53:f1:c7:a7:2d:36:ac:4f:e5:01:d4:fb:2d:
53:ef:27:3a:14:34:0f:f4:56:07:9c:f0:c5:d7:9b:a5:5b:1b:
eb:6a:5b:71:f5:4f:da:5f:98:48:e8:1f:53:5c:e5:2f:f8:08:
da:e8:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:01 2025 by rpki-client