Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: BLX+fMDYQYNzV9Wv0tzIIJpqcEj8HFgfy4Ebl7vYu0U=
Subject key identifier: 02:E4:21:2E:5C:E9:0B:84:58:D1:1B:4A:9F:89:5F:56:05:70:D5:83
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 0194BD17DC972F3333F86622522026F1A92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: unr3jG11dv0ljieTspbw23ZDCPVKmyPx1O4fdC6MM3E=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:97:2f:33:33:f8:66:22:52:20:26:f1:a9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=02e4212e5ce90b8458d11b4a9f895f560570d583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:15:26:8d:14:69:fc:d4:fd:3f:a6:cf:21:
0d:99:fa:05:d3:51:4b:0f:d8:73:12:9a:1f:32:84:
0a:55:48:d6:60:43:e4:6e:f4:a3:f4:ba:ef:5a:0a:
b3:14:0c:0e:5c:3a:6f:c5:86:84:f1:35:bc:44:2a:
a1:78:79:a6:47:d1:78:32:c8:49:ac:97:4a:ce:2e:
91:df:0d:cc:2c:2b:a0:3c:e7:c7:c6:ae:dc:ca:da:
d4:a0:bd:6b:ba:95:bc:b9:3e:aa:9e:d5:84:d3:a6:
34:46:d5:b0:7e:03:c8:87:f0:7e:88:18:59:20:19:
93:2c:76:ec:d5:e2:c8:c2:fd:37:60:b5:5b:eb:2b:
61:90:b3:5f:03:12:20:a1:96:e9:b1:02:cd:88:e1:
69:f2:5b:97:f3:97:5c:9c:28:eb:7d:76:08:42:33:
f2:d2:6a:40:c3:a4:10:71:45:16:00:bf:37:26:95:
af:3f:f4:cd:88:95:36:28:5f:dc:9c:e9:83:9c:f1:
4d:14:b2:07:44:b0:64:39:24:b6:fb:72:68:fd:d8:
86:21:5c:8e:9b:66:70:7c:89:a0:d5:7d:ef:11:4a:
81:09:40:73:a8:39:14:b0:26:d6:dd:b8:e7:81:80:
6c:0a:af:d0:e1:cf:e0:67:ff:98:23:8d:71:63:6c:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:21:2E:5C:E9:0B:84:58:D1:1B:4A:9F:89:5F:56:05:70:D5:83
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:38:c2:c2:16:df:3a:0d:b6:df:82:40:76:f9:f3:2d:a3:79:
83:81:52:7a:c0:fd:51:61:3c:44:ba:47:e4:ea:a9:3f:25:37:
8d:eb:13:1b:18:0c:34:84:d9:b2:16:6f:15:32:9c:57:e1:2b:
6d:80:5f:ef:a8:51:31:7f:f9:5f:72:01:9e:b6:ab:f2:5a:48:
8c:c9:7f:47:c0:01:0c:36:be:ea:6b:3e:b2:5a:72:8d:36:a1:
9e:24:d3:10:a8:aa:89:ad:9d:3f:91:0f:81:fa:81:20:fc:b8:
5d:70:e2:4a:a2:57:bc:ef:30:1c:64:8b:36:45:5e:06:00:2b:
49:9f:b2:26:fd:e8:ae:4a:52:c2:1b:a4:87:9e:e0:c8:33:11:
67:ea:6e:22:a3:49:8c:70:dd:25:93:7d:38:a8:df:02:c2:6d:
93:fb:10:27:81:78:85:ec:3c:a9:0a:ff:7b:53:c6:cc:95:ab:
af:78:6f:14:3c:b6:61:b1:a4:83:c6:05:15:f9:7b:d8:a6:1f:
84:b7:17:7d:9c:7e:69:4f:b1:ea:32:05:7a:27:07:68:60:fe:
d6:3f:fc:8d:0e:7d:51:61:f1:89:ed:bd:cb:44:67:8b:7d:ba:
0c:95:e3:d5:0b:f7:d2:c9:a4:80:66:0d:f9:63:93:eb:cb:34:
f6:8f:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:54 2025 by rpki-client