Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File: mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier: LrqL/fAzbwiotT9MbAYpxT8Bbt6goBHvNb887pT2N4A=
Subject key identifier: F1:DF:95:75:0D:E0:45:4A:E2:8A:31:39:F6:D5:43:CE:6D:65:C8:C3
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer: /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial: 0194BC3C911E4DFAFFD7CE221298E723215C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 6VEj8hFX83dP4cTfcpFmDeB3WK4.roa (hash: 9iNEtr8XsCFGn75dg2M+2IpdUdlrA9H+OLDn6Iw/O78=)
2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: aPLjEdc+1rJERZabBiGFLvZgpj45nNVrD5sa517LBB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:91:1e:4d:fa:ff:d7:ce:22:12:98:e7:23:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=f1df95750de0454ae28a3139f6d543ce6d65c8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:08:4f:14:f8:0e:14:e3:b5:dd:e4:b7:1b:
63:d5:bb:32:77:ef:3b:9a:39:7e:e5:f1:c7:68:4f:
d3:3e:df:fa:75:6b:50:33:ea:14:ef:c0:65:da:45:
67:37:b5:f9:8f:07:11:fc:cb:f1:d9:59:e9:e5:e6:
be:1d:81:63:83:8f:a9:a9:6d:bc:2f:94:2d:76:15:
a9:14:6b:14:61:54:86:bc:da:af:e5:78:3a:02:23:
0f:b6:22:2e:64:d1:8a:78:5e:11:6f:6b:53:ba:36:
51:14:57:eb:3d:a9:2f:df:ef:12:6e:57:6e:3f:da:
3c:50:a4:ac:19:cf:1a:15:ae:f0:a6:54:ac:a1:87:
ce:06:4c:20:b9:d1:83:1e:98:6b:91:83:17:82:22:
48:ec:a8:e6:78:be:4d:1a:5c:cd:bf:dd:61:e7:92:
ca:01:c1:35:96:58:33:d6:f5:0c:08:aa:c6:d4:eb:
3c:5c:b9:a9:ad:76:db:bc:d8:73:ad:bf:c2:87:5e:
76:63:ff:89:82:1f:c6:59:17:82:bf:29:8e:22:98:
61:9d:1e:91:1c:bf:07:1c:81:a1:0f:84:c7:aa:91:
a9:2a:d8:0c:f4:3f:49:98:eb:92:4c:7d:0f:c4:e6:
d3:fc:82:6f:8d:d5:f1:f9:72:f2:6d:f2:2b:ff:27:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DF:95:75:0D:E0:45:4A:E2:8A:31:39:F6:D5:43:CE:6D:65:C8:C3
X509v3 Authority Key Identifier:
keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f8:25:80:85:56:f1:dd:99:ba:87:ea:ad:5f:45:5c:b7:d6:
90:e9:49:1c:55:0c:23:78:19:32:7b:03:5b:ec:cd:e4:bf:7d:
fa:10:54:b3:8e:9b:e5:ee:ed:9c:dd:af:1d:4f:fd:bf:df:54:
a6:65:c7:d4:35:22:01:05:ee:48:71:cd:80:d2:ff:0c:26:3c:
8b:77:08:7f:6a:56:ab:aa:a8:0e:02:50:6b:30:6f:32:18:d7:
91:d8:db:8b:e0:0e:5e:7b:54:c2:33:6f:a7:1b:a5:34:1e:12:
59:9b:df:74:22:55:fa:77:8f:b1:83:bb:35:24:7f:53:dc:48:
9e:e0:ea:e7:ef:ff:e1:ad:31:76:49:c5:77:d8:cb:02:0b:55:
fe:a4:21:78:89:4e:f0:e4:2a:77:63:53:34:50:bb:b4:af:b6:
5c:7e:54:b4:d4:5e:7d:63:d0:4d:af:67:18:91:cc:db:e7:f3:
79:7e:65:ed:82:8d:17:ba:7b:f8:ac:85:7d:47:7f:5f:10:f3:
af:54:45:f1:e9:c0:58:a5:8d:f1:05:5d:47:23:2d:ba:a7:76:
62:fc:9e:3e:d4:3a:d6:18:2a:d1:c4:da:fe:00:76:84:09:24:
b9:24:e8:87:15:67:91:a2:b0:9f:45:17:a4:d5:68:ea:f1:18:
d0:93:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:41 2025 by rpki-client