Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: H/gjm3d7c86RgydIdTZjsDpwjuWEcVuaZXbspWUzXUU=
Subject key identifier: 5B:FE:37:15:51:5E:00:C3:16:64:9D:4B:9D:C6:C3:E6:3B:97:58:CC
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 0194BCA9EEA542A2E918FB08AD842C783089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 0E73
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: k23f9zLNjGoHA5Y61eeWvnLmNxVFA6S3kh666C0V34o=)
3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ee:a5:42:a2:e9:18:fb:08:ad:84:2c:78:30:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=5bfe3715515e00c316649d4b9dc6c3e63b9758cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:c7:d0:91:a9:8e:60:f2:be:89:d8:1f:1b:
5a:17:a4:95:7d:72:ce:f8:49:f2:60:a8:30:79:8c:
89:13:36:65:9c:9f:50:f6:82:0f:a9:0e:09:3e:e9:
df:8b:c8:76:53:2f:7d:04:8b:ec:0e:7f:9b:51:79:
b4:c1:2d:99:3b:1d:68:e7:b7:ca:9b:f0:fa:21:e5:
80:28:12:79:83:ae:cc:c9:cd:11:3e:84:25:d7:ad:
c9:2d:b2:dc:bd:e3:d2:e1:3e:01:ee:02:ef:27:b5:
1e:73:47:ac:b5:29:e1:7b:c8:d2:03:2b:cb:0d:01:
ec:9e:6e:97:a5:39:62:36:e4:9c:b3:a7:d3:b6:2c:
b5:09:05:c2:59:be:2a:df:78:a4:51:c6:9d:fb:ae:
69:8e:cd:cd:e6:76:9c:c7:4c:77:c7:bb:02:35:5d:
64:eb:51:0d:4d:ed:87:ec:fc:f6:27:ff:79:4a:22:
44:0f:82:91:cf:ac:66:68:89:16:27:10:b6:bd:5e:
e5:83:e7:65:fe:08:f1:f7:c9:7a:82:68:c1:5a:60:
7e:ee:40:8d:b7:1e:7a:98:92:cd:dc:f1:60:c1:2b:
17:f7:cf:77:d6:8c:73:16:fc:96:30:c3:da:de:39:
aa:3b:4d:71:d0:3f:0a:35:0d:95:bd:26:9e:fd:eb:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FE:37:15:51:5E:00:C3:16:64:9D:4B:9D:C6:C3:E6:3B:97:58:CC
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:7b:b4:35:96:e3:89:03:c5:01:d3:d9:93:ed:67:69:17:
1e:47:cc:d9:7c:10:78:ed:93:17:5c:3c:c4:25:25:86:c8:aa:
e3:39:f3:8a:c7:d6:af:14:12:ab:e8:c4:37:df:77:3d:0d:1e:
9f:47:af:5d:0e:f7:d7:f9:aa:fb:4d:7c:a1:fb:56:6f:c1:7a:
5b:5b:76:8a:5a:06:2c:2d:d7:8a:37:55:07:40:02:3b:48:5c:
25:79:f1:b3:44:4e:40:84:8c:1d:2f:36:0f:5c:67:79:6f:46:
e5:0c:d1:b1:0c:88:98:97:f7:29:89:77:de:d3:25:12:a9:ba:
af:e4:27:d8:80:ce:4c:1e:61:cb:24:a2:e1:c4:ae:fc:a0:18:
a3:a6:e9:db:61:da:46:d7:8a:4c:78:68:0f:09:63:78:de:8d:
a9:a8:03:18:e2:13:36:71:39:b3:d1:ec:d9:7f:cf:99:23:b0:
58:81:d5:f5:21:55:44:cf:f1:82:51:18:68:c2:56:76:a3:4b:
6f:25:63:9d:16:d5:93:d1:96:4f:5e:f0:8b:c2:9c:54:97:30:
e1:a8:ad:e4:c2:51:d4:f9:92:0b:23:74:08:4f:57:d3:8a:eb:
1a:46:0c:ca:5b:aa:da:b2:b2:45:95:92:c2:d8:4a:de:0b:73:
e3:20:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:24 2025 by rpki-client