Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: ONND9L+aQGURvYk4u1OzgoOk/pSmW4iRtaR/xcgMLmo=
Subject key identifier: F0:6A:86:B1:6B:E6:5D:54:05:D1:67:F3:88:BE:14:24:20:43:15:02
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 0194BD176AE1BF1D8FECB54394D295374D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: cfSINVFo8DQDHiE6B4s/IH3cVgFjWkiS5+ndXVhmjjY=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:e1:bf:1d:8f:ec:b5:43:94:d2:95:37:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=f06a86b16be65d5405d167f388be142420431502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:f7:84:1d:c7:24:ee:02:8e:ce:f3:a8:73:
48:7d:d7:96:1a:9b:cd:20:fc:0f:e7:87:a6:31:fd:
b6:44:fa:65:f2:5c:86:1e:15:39:16:d0:96:ac:79:
64:bd:2e:e3:d3:66:71:9c:8f:20:7c:49:79:29:c0:
eb:4f:b4:b1:d0:e2:e7:9d:35:b9:76:8e:4c:48:e1:
3d:bb:ac:fd:7c:c7:54:d9:1d:f1:dd:0c:38:35:d3:
85:f2:3a:3f:10:48:ff:83:b7:8a:2b:06:11:3a:fa:
a7:2d:63:14:f3:4b:4b:46:c4:26:5d:0e:4e:4e:a1:
93:d8:71:fa:5c:8a:e1:af:1c:9a:18:d5:9c:9c:43:
49:01:28:8c:53:03:f8:19:7e:35:1a:c4:02:29:86:
da:e8:ae:e8:68:db:4b:24:07:20:28:82:71:36:82:
e8:ac:5b:00:3f:89:29:c4:ae:91:9e:bc:18:00:c1:
83:d3:87:63:47:a2:94:96:54:b9:f0:72:78:34:43:
b4:7c:d2:73:ab:d7:25:69:4c:16:21:ee:63:7c:59:
ec:e2:4c:6f:3a:66:0a:d8:22:26:c3:64:ab:b4:24:
f7:4a:12:9e:3b:46:3f:ea:aa:ba:a0:d3:fb:00:f3:
ba:89:9f:35:9e:5f:ac:ef:7c:2b:62:5e:01:59:e1:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:86:B1:6B:E6:5D:54:05:D1:67:F3:88:BE:14:24:20:43:15:02
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:06:a8:1f:d8:68:92:c7:b6:c9:03:3d:d2:80:4c:2f:29:86:
e3:b0:04:f3:f1:0f:d5:4c:06:67:b5:7e:47:43:78:0e:0d:13:
ba:5d:50:85:5a:6a:aa:b4:d4:8e:70:3a:94:a2:ba:29:ad:ae:
65:fb:b9:b2:6d:18:a3:24:7f:ad:07:7a:bb:60:a4:6d:03:da:
01:7b:68:28:0e:f9:73:22:d0:a3:de:8c:47:17:ca:dd:bc:93:
1e:b4:92:28:45:7c:5a:96:bd:38:28:c1:2e:59:35:f9:f3:92:
4d:1f:58:7a:86:9c:b1:cc:d9:21:f2:36:ca:9b:0c:56:b6:e5:
64:61:0b:8b:43:e2:17:51:1b:af:ab:3e:b0:b3:c5:4b:12:b7:
9c:92:70:ef:43:a4:0c:6d:37:6f:c4:24:56:b4:3b:73:1a:5f:
b3:a8:31:e4:4c:c6:e9:05:8f:e6:05:8b:aa:c7:fd:ee:45:34:
e2:61:3b:52:09:66:91:e2:9a:7d:ea:37:2a:ed:4a:c9:fa:52:
be:66:61:93:04:c4:4a:c7:44:82:e2:31:ff:3b:7a:8c:30:b1:
30:68:46:76:6d:b7:f6:5f:9b:71:00:05:e6:20:8a:7d:af:3c:
dd:12:0e:ef:d3:33:74:3c:2a:c9:9b:99:e0:dd:d7:87:4d:e4:
c4:0c:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:29 2025 by rpki-client