Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File: 0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier: YaJ6ytRfKUpdQ9vHEcVOVk73DzDn4dI5JWVjZJebIgc=
Subject key identifier: 8E:F6:34:92:71:CF:1C:26:66:1A:D9:74:A3:00:95:5A:7B:07:67:D8
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 0194BD8538933B9B1FF4A877C06F73C08700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (hash: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=)
2: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: qudwN/roSdLEVCHfFELKNLjvX+tXkCO/kSAbwtuXCUY=)
3: 7CJziOdAfq9jwl7KYFdQlPSS2HM.roa (hash: oYgf2+8vVMNQWr/UIAh3TmOHiKE3yvmzUsWvpHQBY4E=)
4: DIBDcfC37l85oqFsgOXhqMZ5XvY.roa (hash: RwBJKMojavCNydnUMuiFD7B/06k4RerB9S2BH+amD4Q=)
5: NKe-wrE2WicgBb0c0Ud-bVOtGPw.roa (hash: gADDqpEfldBNZqdg/FkPxqfMdnRA+6kZ643uxJ4620k=)
6: Ww4bmXfusTZ-UgY768aiSzmcTbk.roa (hash: yrQRX7fxWnMaL5LeyXLUjZwEkWSzkh7ey8djXSwJQ3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:93:3b:9b:1f:f4:a8:77:c0:6f:73:c0:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=8ef6349271cf1c26661ad974a300955a7b0767d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:47:f7:b4:55:03:6b:da:ab:ee:1a:5e:f9:3d:
fc:fc:e6:be:0c:ad:c2:bd:34:3e:e1:b1:7b:55:db:
fa:d0:38:6d:4d:74:aa:e8:34:23:8d:9b:6f:4b:d6:
56:4f:f7:a6:90:d9:77:5e:c0:90:9b:b4:fc:76:55:
1d:6d:a2:67:0e:c0:91:83:a8:be:af:9c:41:0d:1a:
82:ff:f7:f1:0d:6f:48:0f:d1:a1:2f:e1:05:d7:46:
95:70:66:f7:94:c4:fe:70:b1:5f:99:02:fb:8c:50:
cd:a4:49:c9:b2:58:63:3d:ac:67:45:2c:51:93:2a:
b7:9e:66:33:47:23:b3:6d:78:83:5a:a7:d3:88:ae:
b7:79:d2:80:c6:5a:d4:bb:26:a7:7b:cb:cd:d2:d2:
16:72:71:0a:01:ae:1a:ef:45:a3:52:7d:ec:7f:c8:
7c:00:21:77:1d:b7:b8:21:d9:0a:e4:21:7d:c6:2d:
21:f7:42:bc:76:89:5d:04:88:64:32:77:8b:c7:02:
51:d1:8b:e7:5c:8a:9c:f2:70:99:98:74:ef:5c:a1:
60:84:68:ec:5a:24:fb:5f:0f:a4:71:64:55:4f:6d:
a3:42:fa:fd:ac:d5:50:a8:d1:54:e6:99:86:8c:fc:
d0:86:28:52:5f:8a:98:01:ed:d9:a7:2b:89:2f:39:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:34:92:71:CF:1C:26:66:1A:D9:74:A3:00:95:5A:7B:07:67:D8
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e6:62:d5:83:f8:93:bf:da:62:10:1b:f8:27:81:ce:7f:ed:
82:3c:74:28:de:0e:16:2d:4f:87:d8:2e:77:83:55:5f:10:d1:
0b:f3:24:08:5c:6e:c4:f4:77:50:47:1c:04:2d:97:1f:ff:70:
58:b0:12:ab:7b:39:1b:4e:42:4b:80:d5:2d:95:bb:d5:53:c6:
62:e3:ae:29:f7:d0:eb:c9:04:49:c4:91:88:ea:81:72:65:d4:
33:90:78:7e:54:e9:75:33:df:e1:70:42:c5:bb:e6:a6:d4:c5:
8c:e8:10:8e:fb:ba:40:80:1a:02:ce:d0:e5:13:79:db:3d:8b:
d9:38:42:0e:f1:06:86:1c:2a:fa:eb:1a:f2:e3:ca:8b:45:ce:
48:32:51:db:57:ff:ed:42:f5:a7:f1:da:65:c3:d1:6d:9e:38:
cd:5e:57:44:f9:af:e8:67:29:90:0a:7c:fb:14:f4:04:e2:96:
06:8b:bd:9d:4d:b3:b9:b8:80:f4:b8:15:21:5b:62:03:59:b6:
40:74:0d:4a:e5:67:6e:c4:d6:a6:54:6d:9b:86:40:eb:7b:b3:
fc:46:bd:10:dc:ba:55:a0:33:e5:87:32:00:17:61:57:c6:bd:
ff:b8:f9:11:1f:f5:3a:18:ad:b2:15:32:d8:72:48:15:9d:db:
25:1f:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:37 2025 by rpki-client