Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: QH7JVQZbRvOmTQp/W7rh7jZ12pYXBEMqgQDGo6UfR/E=
Subject key identifier: DC:70:F2:B1:24:EA:16:B0:66:A2:E4:24:5F:21:7E:99:F7:A6:51:56
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 0194BCAA333A699C7ECC9817D8B60CDFE899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: Lqe5vcwgWue09k7p7ctNg9AlXcM.roa (hash: YaDYxTi/SH2+EMKhFcDi7OA2pSDfUeTirPWPAhdJeo0=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: SRnvQA+guut1HM5aHDKNMXeIIDk04NvvFcW4zf1pFK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:33:3a:69:9c:7e:cc:98:17:d8:b6:0c:df:e8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=dc70f2b124ea16b066a2e4245f217e99f7a65156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:03:0e:43:98:06:9a:0b:da:2f:4b:41:ac:
6a:16:a9:3b:88:5d:02:a2:2e:54:39:6e:b0:b0:10:
ca:11:bd:c7:84:d7:27:84:93:c3:66:ab:f8:08:c3:
17:27:11:60:a8:e7:e6:05:c9:84:02:02:d3:a0:b2:
62:ac:c6:f4:78:ac:2a:55:7f:e6:0c:79:8c:ec:ef:
95:99:68:14:04:21:89:65:e4:6f:2a:2f:2f:ac:9a:
26:73:bc:8a:d8:6a:5e:a5:ea:c0:18:00:39:02:e6:
33:01:c8:bb:a9:1e:4a:61:34:dd:d2:de:d6:80:83:
eb:a3:07:fc:5a:bb:cd:49:f6:69:db:4f:61:33:07:
52:a6:63:3b:ac:ed:40:52:02:0e:4a:fa:ec:b6:87:
c5:9e:96:37:6b:aa:e4:29:ff:15:61:37:af:1a:5c:
fb:46:d8:a1:8d:91:6d:9e:61:cd:8e:ab:ba:51:0f:
46:7b:52:99:5e:32:45:2e:58:63:95:ff:52:ff:d3:
90:34:f8:d1:39:d0:5d:75:52:42:ea:c7:25:55:c2:
2d:c9:a0:1c:c2:43:22:85:7d:b9:31:cb:47:a4:8f:
4d:a0:45:fa:8b:dd:d6:32:02:73:57:62:d3:dc:36:
a3:34:fd:48:79:07:93:2b:8d:46:d5:e4:35:ec:a6:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:F2:B1:24:EA:16:B0:66:A2:E4:24:5F:21:7E:99:F7:A6:51:56
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3d:8e:81:03:58:27:d1:80:a6:e6:7a:12:29:bf:b4:1f:ad:
70:14:b6:57:95:fd:50:e5:4b:88:ff:99:e4:d8:c0:e9:80:3b:
d4:dc:df:02:86:87:35:9a:db:4b:0a:8e:a3:d9:b4:ce:20:43:
8e:2a:90:70:44:e9:bb:7c:2c:d9:8b:27:00:99:dd:91:84:4e:
8d:de:7e:73:09:bf:f3:f5:3c:69:8a:19:66:e9:13:fb:ab:09:
85:df:15:a7:70:78:6b:e6:8e:ed:3f:50:27:90:aa:70:67:d2:
4f:29:22:94:be:36:2b:02:b3:82:55:82:3b:d7:58:24:58:5f:
27:19:61:3d:11:00:f0:0d:ac:88:8e:0a:c8:b9:04:a0:ba:9e:
13:ef:0d:59:ca:0e:96:c6:10:a5:48:1b:73:45:e4:ce:a0:99:
b9:11:2d:0a:0f:e8:69:37:2d:79:11:62:b7:75:72:c9:01:9f:
b4:65:bf:e9:61:d5:a2:ee:6b:80:0b:2e:7d:8c:48:ae:f4:5c:
d1:6f:87:d3:c5:51:ef:3f:80:66:5d:e1:2f:80:d4:d4:7e:aa:
f5:15:04:c3:a5:75:d3:1b:d9:1e:e3:d4:65:d0:3e:16:0c:ad:
53:01:a6:13:c4:0d:df:7a:dc:f9:ea:02:31:3b:df:08:27:f0:
08:d5:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:00 2025 by rpki-client