Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: yugO9JkbDnTUNMCc9fuAbWUnbRC62fXfVgs1J7/IWUg=
Subject key identifier: 7A:94:AA:36:C9:75:15:97:B6:C3:53:AA:25:AD:64:2B:91:FA:B1:B8
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 0194BD4EB600953EA86C2008F895B85BF3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=)
2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=)
3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: 709yIZKzr5/iKjAx/i5fuNPPy6TcbdhXVpkDPpIce9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b6:00:95:3e:a8:6c:20:08:f8:95:b8:5b:f3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=7a94aa36c9751597b6c353aa25ad642b91fab1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:7a:0b:21:57:85:88:23:35:67:2e:e0:6c:
91:8b:1e:ba:76:c1:ee:e8:12:cf:01:81:53:78:1f:
df:51:68:55:9e:49:43:75:af:be:2f:44:6c:8c:71:
45:26:bb:7f:f2:63:7f:99:cb:6c:69:93:36:02:32:
86:61:21:59:33:5e:c2:f9:b3:a2:e3:a3:9d:89:89:
e6:31:9b:eb:89:9b:30:06:fe:c0:ac:f7:b1:bb:75:
ea:7b:0c:79:ff:37:54:4b:ec:cc:d7:cc:9b:c3:82:
50:4e:69:ad:ce:7d:98:b6:f2:ab:21:9f:66:da:f9:
f1:6b:63:29:3e:e8:9b:4f:5a:61:3f:65:74:c1:8b:
53:c4:a5:e1:2b:71:f3:43:a1:9e:26:2a:7a:c7:3f:
81:b0:a7:0f:43:71:1a:fc:d4:c9:97:4f:38:8c:1e:
a1:87:6e:92:6a:bf:1d:ed:1e:59:8e:37:1d:0d:45:
bf:9a:bd:71:23:56:c2:a3:75:5e:87:01:e9:e3:4e:
bd:e7:a4:d1:91:e5:69:f2:fe:1e:a1:34:2d:5f:f2:
fc:ce:91:e1:b6:b5:9a:56:63:de:35:92:44:68:8c:
27:79:77:04:15:5c:e9:33:8a:2e:8a:44:4a:34:54:
e9:94:19:ed:e5:6c:c2:03:25:d0:3d:4c:fe:73:5b:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:94:AA:36:C9:75:15:97:B6:C3:53:AA:25:AD:64:2B:91:FA:B1:B8
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:29:58:c8:2c:9f:47:7a:68:1f:9c:7c:4f:1b:09:c3:be:20:
4a:72:8f:8f:ab:50:d9:b0:3d:90:68:2e:e1:0d:13:75:80:d0:
48:9e:93:0c:ea:14:9d:48:3c:84:6d:a5:fd:16:51:2e:2d:c1:
d3:07:4d:78:cb:ab:a4:85:63:72:36:c4:d8:6f:18:40:37:2c:
8c:67:0c:ec:c9:50:a4:7a:22:4d:95:86:41:fb:d9:f1:8d:c2:
db:4c:fe:25:76:ee:8a:33:d9:41:12:0c:a1:42:80:cd:c4:15:
e9:08:7f:19:3f:dd:81:99:55:e2:81:d4:a6:65:fe:3d:75:19:
f0:69:77:94:77:52:b0:3b:d4:2d:74:f1:5b:5c:d9:8c:71:89:
97:3e:40:6f:92:90:f6:be:d1:18:b1:ba:ba:dc:3e:4f:6b:28:
4b:3d:7e:25:07:8c:41:e7:51:33:92:64:1e:64:09:01:7e:cc:
34:6d:8a:e5:a5:d1:d1:41:35:d4:f6:cd:79:1a:69:70:81:c5:
72:fe:ce:ec:00:2a:21:55:b8:84:d9:6d:bf:55:06:70:d0:35:
f6:05:3a:6f:81:82:09:a9:0c:e3:63:e3:31:e5:4f:15:95:2d:
f3:a8:77:7e:3a:57:2f:ca:97:6d:2b:1c:4f:5e:98:8a:02:cb:
1c:b4:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:12 2025 by rpki-client