Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: Z0yUr/6fR89bLehQzwqMBqruF4W6TEOnZmc9ggWZCC4=
Subject key identifier: C7:3B:53:EC:3D:6D:61:19:4A:3B:54:0B:CA:D7:82:40:BC:3B:F7:DE
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 0194BC04DDCA401DEB8F81304644E81DD978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: UHrt3bgT9MTQ7whVEBCi3S7Ug4C64zVZ2lZjIpuVdRY=)
2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:ca:40:1d:eb:8f:81:30:46:44:e8:1d:d9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=c73b53ec3d6d61194a3b540bcad78240bc3bf7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:5c:f3:20:51:6c:44:52:93:e0:68:68:ac:
0e:1b:f4:13:02:89:fd:07:f1:2e:c8:5e:b3:8a:f8:
0d:56:01:f6:fb:d8:c7:bc:98:6c:45:e1:c1:ba:17:
b9:e0:b4:8c:93:8c:d3:d9:14:7b:9e:f6:c6:08:a4:
71:dc:0f:1d:1b:a3:92:38:bb:f3:2f:6b:13:98:02:
15:6f:e8:bc:60:4b:87:d6:3d:77:58:45:73:28:86:
98:c6:e1:27:84:c5:a4:08:e8:52:8a:c2:67:81:05:
36:a2:3b:f6:88:70:d0:05:83:4d:6a:44:6f:23:e3:
c8:e9:72:13:2d:e2:07:6a:9a:32:04:cd:82:18:95:
ce:bc:5f:34:63:eb:f5:ac:bd:6a:22:ce:ad:6f:03:
7c:90:5e:4a:29:c4:cd:d4:f5:1f:a3:84:c9:d9:8e:
3c:9d:5e:08:3d:48:42:77:27:0b:7b:71:a9:95:0d:
e6:06:60:29:10:c2:3b:2f:d4:36:67:a8:4d:fe:7e:
e6:24:e2:cd:19:09:43:b9:14:c1:7b:db:a9:22:45:
c5:db:b1:54:21:20:d6:cf:09:6a:2d:f5:1c:f5:0e:
b6:64:2e:17:77:00:fd:37:3b:8d:4c:83:3c:01:9f:
de:f3:46:34:a7:76:11:db:18:33:42:f8:5f:d2:e9:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:53:EC:3D:6D:61:19:4A:3B:54:0B:CA:D7:82:40:BC:3B:F7:DE
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fe:2e:f8:c2:d2:6c:4e:bf:55:90:30:2b:00:2e:66:2c:f6:
94:c3:f2:bd:64:23:96:3d:3d:29:84:9a:76:93:85:09:ba:e8:
37:22:bf:b6:02:89:c3:56:8c:f4:00:87:77:18:50:e3:02:29:
09:eb:5f:6e:75:3c:bc:7b:ee:51:da:6f:c5:b5:be:81:44:ea:
72:1b:a3:d5:33:f3:8f:c8:c7:b3:42:0f:d3:03:a0:69:b0:14:
7d:95:10:35:e4:5d:66:34:59:b2:02:67:fb:c4:f9:7c:42:55:
56:1c:1e:f6:34:37:d7:19:f4:44:9f:0c:bc:07:a1:26:f3:f4:
99:52:8d:35:78:05:9a:ce:10:16:d7:c3:ae:2d:d2:0f:42:88:
94:78:0c:b9:13:7b:cc:22:b7:06:3e:86:93:40:c5:ef:06:4b:
15:32:0c:08:82:0b:f9:a7:f1:f6:f2:49:74:b3:33:5b:cf:4c:
04:e1:25:de:5c:fb:4a:56:31:8c:d2:42:aa:61:db:1f:39:5b:
f3:9d:d3:d7:d4:ae:9d:3f:9c:b6:91:95:cd:49:62:24:7b:d0:
b2:93:2a:ba:98:eb:d6:15:2f:06:f3:ec:2e:86:c7:a4:5f:57:
85:b5:26:33:3d:24:2f:fc:82:81:be:cd:78:a7:19:05:f0:be:
db:1c:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:25 2025 by rpki-client