Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File: 57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier: Cno19vSgvaIEPZR3+/89XDOMjH9HWDkw8NXO3t6Awlc=
Subject key identifier: D3:6E:3C:99:75:7B:40:BE:78:3F:60:60:1E:BB:54:A0:96:96:7A:98
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial: 0194BD4E6C088180C6BA2597E2E838C7A30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: /vdFYgNZlNVQgBVuRiB8Nr9U0Jd4RpB7Il2yt0Ir1X8=)
2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:08:81:80:c6:ba:25:97:e2:e8:38:c7:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=d36e3c99757b40be783f60601ebb54a096967a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:9a:7c:08:f5:32:d9:28:c1:36:88:b3:e7:
61:ef:79:7b:14:72:dd:fc:8d:0c:0c:12:91:20:ad:
70:88:ba:02:3a:16:39:05:97:cb:fc:39:cf:a1:e7:
fe:c9:c7:ea:66:6b:12:b3:53:4f:ec:be:93:b1:18:
06:30:a2:27:66:7e:62:67:f9:d6:1b:29:87:d1:3c:
fb:f3:b8:57:51:f7:ca:f0:63:a1:89:1f:f4:84:e3:
3a:26:db:cb:e0:47:12:b6:34:68:8e:5b:6a:d4:f0:
b7:a7:73:88:3a:0d:f2:5d:1f:be:cd:c1:e7:09:65:
7c:ed:f0:d7:4a:dc:a1:cf:92:54:d0:c5:2c:1d:fd:
57:b9:73:22:63:60:c6:7c:d8:36:2b:7a:b9:ea:fc:
91:39:1a:83:09:0c:fd:f7:98:99:31:1f:db:1c:26:
bd:c6:f7:b6:24:81:a7:27:c3:20:62:cf:cf:2f:80:
a3:1a:02:c6:7c:f5:21:53:dc:19:a9:13:d2:a1:66:
81:52:49:ff:75:27:0a:fb:72:91:f3:e3:68:23:0f:
27:f4:e8:ea:83:7a:4f:f3:20:f3:1d:a0:75:af:5a:
df:94:f2:4b:ca:7d:6d:f3:1c:12:13:1d:cd:f8:2f:
0e:5f:29:47:68:03:f8:e2:12:87:5e:7c:69:13:28:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:3C:99:75:7B:40:BE:78:3F:60:60:1E:BB:54:A0:96:96:7A:98
X509v3 Authority Key Identifier:
keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:71:79:bb:24:57:dc:30:c8:c4:e9:66:07:7b:ce:75:63:ea:
42:16:48:a5:bd:a7:af:42:cc:ad:8c:a3:41:27:a8:21:3d:63:
82:e8:91:f7:d4:95:c8:d0:34:b5:7a:d3:d6:1e:2c:13:6b:ec:
3f:bb:64:19:7f:b1:ff:df:5b:7e:72:c1:a8:e8:4b:43:88:70:
1d:bc:a5:05:bd:00:75:5f:24:29:e3:b6:bb:33:ee:05:72:06:
47:c0:31:9a:6f:8f:8e:7b:df:ba:a6:07:e4:8d:3d:1c:2c:fe:
69:6a:40:bb:9e:5c:8e:3a:a1:ad:0e:78:c9:a1:f6:34:6b:98:
d5:a0:8d:53:ce:6f:24:36:5c:17:49:a5:11:b9:b2:6d:d9:59:
8f:eb:04:d6:23:d8:fb:b0:3a:64:91:70:89:c6:61:21:78:d0:
40:f8:34:25:65:af:8b:f5:45:98:80:80:38:e8:e4:31:3a:a5:
4a:d6:29:40:e4:05:07:66:b1:24:59:d7:a7:5e:c0:58:86:ca:
f7:94:91:89:20:57:16:9b:7a:a7:58:b4:8c:28:77:26:61:81:
77:60:56:09:46:3e:e0:3f:3d:be:0d:e4:f5:52:f0:6e:00:f5:
98:6f:8f:11:1b:b3:8a:17:dc:33:76:0d:1c:2b:05:8d:2f:00:
c3:c3:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:29:50 2025 by rpki-client