Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: xVuyRc0PP2/YQxtleVPh0M7NuHO74SOBFdZ29s0ikD0=
Subject key identifier: 22:B1:FC:8A:C8:D9:A3:E4:D6:EC:74:1B:9A:56:78:EF:F0:64:7F:D0
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 0194BD176EBC6B5B0D7F21B2B72AFC265A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: LwPsOEbvQrWE8SybIknPIgy/5y727jb+UoOj7XekMfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:bc:6b:5b:0d:7f:21:b2:b7:2a:fc:26:5a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=22b1fc8ac8d9a3e4d6ec741b9a5678eff0647fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:71:06:5b:46:b3:f8:15:73:4f:e0:88:7b:
87:c1:14:3e:6c:56:38:9d:4c:47:c7:2a:52:94:29:
0b:a7:e8:8d:c5:87:9f:4b:10:16:db:79:e6:dd:a9:
69:f8:2a:78:73:7e:ce:f2:ee:73:ae:6c:e2:e7:23:
26:bd:f2:4f:88:4f:bc:4c:93:3b:58:bc:ed:d3:19:
7f:8c:7d:2c:c7:bc:e1:78:47:bb:6e:da:1f:a0:6b:
2b:21:88:c7:10:52:0d:28:bd:85:06:cb:7d:0a:ab:
6a:f1:f6:b9:2c:99:7b:66:01:80:36:f8:85:a7:f5:
95:3c:1e:bd:8c:09:91:83:f9:24:e0:38:c1:8f:c1:
eb:7d:e2:32:d3:ce:53:36:5f:c9:f2:1b:59:ef:8d:
14:75:b7:fd:aa:29:bb:a7:37:65:51:74:0f:ea:ba:
71:c7:0a:ff:35:0c:9e:60:5c:9a:ee:79:da:bb:c1:
5f:db:f8:9e:60:73:fd:b6:57:38:fc:40:86:cb:67:
3e:6b:9b:13:cc:27:69:63:04:70:9f:7e:ff:f5:81:
52:42:bd:50:04:cf:b0:51:e0:32:34:43:8e:7f:ad:
f2:9e:1c:26:fb:87:45:03:9f:3c:62:07:00:06:43:
48:28:7d:af:a8:48:fd:28:97:c2:dc:27:8d:f9:47:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:FC:8A:C8:D9:A3:E4:D6:EC:74:1B:9A:56:78:EF:F0:64:7F:D0
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d4:6b:41:9a:bb:e2:8e:22:eb:f0:8b:f8:01:7a:4f:6d:25:
42:b3:e2:94:a9:c6:77:60:78:34:54:09:77:cf:c6:43:fa:df:
4a:ad:82:66:44:44:a9:a6:ff:90:55:8a:b4:13:3d:63:44:df:
6a:01:49:99:0e:26:34:0b:23:d5:b1:21:f5:f6:11:4d:c6:fd:
77:22:84:6f:02:30:21:d2:21:dc:4b:04:93:b0:50:17:8b:a5:
49:68:85:f5:3b:63:1c:c7:b7:cf:01:f5:e3:c1:41:3d:05:b7:
bf:3b:c9:e5:f1:63:87:e0:b8:43:f7:01:a0:27:6b:84:03:67:
3b:12:2f:fb:13:ee:ff:32:48:81:4c:ae:85:e1:27:2e:ef:a4:
83:31:7d:26:c5:e9:46:8c:36:b6:f7:85:a5:91:b0:1c:1b:fa:
ac:81:ab:34:cf:a6:9a:f7:c5:1c:13:08:a5:3a:c0:c4:aa:bb:
50:3e:18:fc:0a:5f:95:14:4c:4a:d0:d4:0a:91:08:d7:db:51:
6c:21:84:a7:c4:5d:48:89:95:92:11:1a:d2:b3:31:49:5d:bd:
7f:31:60:a8:f2:8c:b7:99:a8:4f:38:92:e2:a8:19:a8:c2:4e:
d8:63:cd:08:84:07:2f:ef:d4:d9:f6:57:96:3c:c6:87:5f:4a:
ab:df:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:08 2025 by rpki-client