Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: T5+hIiQ8trE4Q2HdH1hcHfCX6ksg5S714TUXJHddrow=
Subject key identifier: 8E:38:53:AB:6F:C4:12:E0:B9:45:39:ED:EC:19:9F:97:31:CC:1A:5F
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 0194BBCEED7126F370C04C5423729E647DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: rwIJj+EWmM7TblVD0eNhP+5Xuhv+VUjlrjbEtiqT31M=)
2: zKQIfOeURvANDMREU7yI_nE_KFw.roa (hash: rsODojes6psnJwHqpB6iZWFEwYShL6Rps2nkmwoPbsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ed:71:26:f3:70:c0:4c:54:23:72:9e:64:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=8e3853ab6fc412e0b94539edec199f9731cc1a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:66:73:82:ff:22:26:b3:2a:34:68:3c:6b:
c2:2d:97:36:4d:e3:71:d5:9f:5b:c8:2b:0e:28:be:
77:61:35:46:99:48:0b:51:31:21:70:56:47:b0:fe:
58:fe:04:23:9c:24:79:6c:f7:14:c2:87:1e:28:ba:
e2:59:c8:f5:cf:86:18:3b:c7:07:ec:23:10:1c:d3:
87:08:d3:52:f4:d3:58:df:71:ec:8c:a8:6e:e4:49:
af:02:73:5e:ed:35:d0:71:88:91:14:4f:7a:06:da:
72:82:dd:77:b8:43:33:2b:be:8e:bf:42:a0:6e:43:
73:1c:9b:b0:66:41:17:bf:33:c0:ab:2e:d8:d3:16:
4a:6c:c0:58:25:1a:c2:16:b0:1c:26:8b:05:d2:62:
f8:cf:89:82:eb:65:46:8d:94:a7:2d:74:b5:1c:2f:
29:30:8f:69:b2:ad:51:3c:36:3b:03:31:9d:56:a0:
2b:bd:15:67:5e:75:9c:90:32:1e:0b:7c:fd:37:11:
a9:f1:56:3b:ba:27:8e:19:2f:6a:84:cc:67:a7:4a:
ad:86:30:6b:b0:0a:8d:3e:74:5e:5c:ea:a3:37:85:
a4:a5:39:f0:d3:dc:4d:e3:d5:d6:7c:87:ba:20:4e:
7d:f5:21:9d:4c:0a:78:a4:ab:20:ab:57:54:aa:10:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:53:AB:6F:C4:12:E0:B9:45:39:ED:EC:19:9F:97:31:CC:1A:5F
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d0:0a:0d:29:14:0a:cf:8e:19:80:64:2c:f7:b4:07:a7:71:
40:28:f0:fd:10:66:e9:5c:23:9c:b2:60:0f:ca:89:a6:bd:96:
3a:07:40:91:aa:02:e2:53:39:70:17:ec:3e:5a:8d:9d:b9:56:
88:dc:88:e3:58:2e:87:a8:ad:3a:d1:da:83:63:e4:d6:6d:20:
b3:91:e1:cd:4a:43:5b:4f:73:84:63:f1:54:55:e1:47:a6:22:
ab:65:c7:95:61:c7:15:8a:77:74:1a:14:eb:05:cb:8e:49:ae:
18:a3:b5:4c:97:8d:53:1a:de:64:4d:6d:5b:7f:3b:e6:f5:d9:
05:54:e5:ce:08:85:05:ee:a0:24:40:8d:83:85:c5:35:58:90:
7c:7a:21:f3:e5:22:dc:af:44:49:54:fc:19:db:db:03:bf:c3:
64:0a:eb:c2:d0:6b:eb:52:25:09:ca:e9:66:28:58:08:76:6e:
a7:72:ec:be:90:5b:9e:e5:1a:a2:31:47:f4:c1:09:e5:6d:17:
51:12:76:8e:d4:63:81:89:eb:2d:59:4a:c4:64:57:e9:ba:e3:
2d:e2:f1:79:a4:7c:7b:47:76:e3:64:92:b6:92:6e:69:9a:fb:
97:0b:37:94:c5:6d:32:8f:9a:c4:d8:e6:11:84:5d:ae:1e:51:
7b:be:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:53 2025 by rpki-client