Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: jhJrm42tBjUAFz5TDwemQHZEb9/qP5T7FJFTfHQgwYk=
Subject key identifier: DE:09:3B:2D:56:56:7B:29:92:13:2E:42:24:AA:D5:6F:99:A6:2F:D1
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 0194BC72B2AA1265792037494D298F7FFE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: 9NLLVefdPWONlbrdvyDWi5NMu6PogDKmqq1/4HAB/z4=)
2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b2:aa:12:65:79:20:37:49:4d:29:8f:7f:fe:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=de093b2d56567b2992132e4224aad56f99a62fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:27:09:a9:0c:46:0c:36:bb:10:52:cc:fb:
9a:48:51:d0:6d:2b:9e:15:08:75:dc:e3:1d:b6:ca:
e0:88:d0:1e:41:ab:9b:e2:1d:0f:d5:0a:34:31:2e:
01:2b:a7:a6:5e:06:01:2f:99:b0:99:1f:27:80:39:
f0:b4:15:fa:4a:f9:d0:1d:5c:0d:78:1c:2a:ca:4d:
f2:65:6c:d6:0c:e3:58:57:aa:93:23:1a:20:1c:1f:
d6:9d:3d:15:e3:9a:66:4b:40:bd:06:ef:c8:ad:86:
b2:a8:80:cb:f7:ef:c2:b6:05:69:3d:1f:33:0c:2e:
7b:99:09:88:03:98:d7:6b:16:5e:d4:94:f8:de:85:
ef:e3:45:35:21:0a:a5:0f:dc:96:72:c9:41:c2:e0:
ca:ab:30:ee:36:8e:4f:69:d8:d5:57:24:af:10:45:
55:fc:91:48:78:e5:9c:c8:6e:ca:ae:9a:21:d6:9d:
7a:32:8f:95:c2:b4:6b:17:31:5d:c9:54:0d:23:58:
7f:1e:b5:57:41:84:7e:70:76:8b:ed:eb:84:8e:bb:
11:b5:b5:f1:e2:b7:9f:bb:fa:5f:38:58:28:82:0f:
47:fc:92:fd:8b:9c:2e:53:39:ae:95:cd:62:75:fa:
0c:1a:a4:13:5f:1e:e6:88:96:5c:2c:da:04:27:23:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:3B:2D:56:56:7B:29:92:13:2E:42:24:AA:D5:6F:99:A6:2F:D1
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:86:bb:98:92:3b:f7:34:da:11:27:91:e9:d4:e9:c2:bc:
56:47:55:38:fc:82:b8:c6:0b:3d:30:4c:70:f6:28:05:fb:04:
97:8f:8b:87:15:dc:01:0d:89:44:62:46:c7:3a:02:e7:38:70:
20:9c:52:06:5b:66:76:cc:f1:02:a6:be:9b:4d:67:bb:f2:ba:
ea:10:65:c8:d5:36:a8:71:f3:cd:79:45:8e:82:d9:09:ca:90:
a9:c9:7d:a5:3c:4e:1d:0c:5c:e1:23:d9:3c:42:23:1b:82:42:
89:53:fa:47:08:4e:b1:91:ee:f5:97:93:0f:8e:9a:c4:c7:b5:
db:a1:2e:dd:9d:09:78:89:5b:31:de:e8:88:7f:b5:61:a6:bf:
66:de:d1:58:6f:96:2b:c0:5a:8f:7c:f3:1f:c1:f0:ea:70:20:
5a:9f:38:ef:40:49:4e:f2:4c:a0:be:65:02:41:1d:94:bf:1b:
29:06:42:17:54:45:9a:c7:31:0a:33:bb:02:92:f9:c3:0d:46:
39:64:87:46:57:ca:db:7f:35:26:0e:ed:18:f7:af:7c:8a:82:
c7:65:25:2b:28:06:b0:b5:fb:f2:e9:5e:58:5a:0d:f4:09:9c:
48:ae:08:44:c5:99:9e:ae:a2:88:b8:ac:c3:d1:cc:3a:04:4c:
69:8b:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:48 2025 by rpki-client