Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: 7GyDKr/+539IIFScnYI3/8AMRDuZB2IX5ZfqfMfl91w=
Subject key identifier: 5C:79:98:CA:98:68:3C:6D:CF:02:50:DC:B1:F4:B6:52:9C:87:28:91
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 0194BD17506A050698F7185315713DCE2888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: knAabXlrJNA3Dg5VrddZD/iWHBSWLyGsqP4U0JExn4c=)
2: Tp4BAItGYlXYP71Yl1jvkjdBkns.roa (hash: BUC2R1hzU4lwEDEogKCUTPLUZZa/Hz8pj9j9ce25uwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:50:6a:05:06:98:f7:18:53:15:71:3d:ce:28:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=5c7998ca98683c6dcf0250dcb1f4b6529c872891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:42:19:e1:f6:07:c8:38:99:5a:fd:bf:c6:
57:8a:11:05:6c:21:bd:10:71:cc:ee:95:b0:23:24:
ef:e6:e8:4d:86:47:bc:a4:ae:f1:fc:22:1d:e4:5f:
9c:d0:0b:8a:35:29:2a:a1:32:49:d4:17:0b:e4:3f:
72:f9:64:a7:37:7a:a5:f0:c6:77:46:ad:b6:4c:95:
a6:b7:18:1b:38:9b:45:12:92:5e:b1:56:68:4a:ab:
c9:9b:7d:5b:47:cf:ce:e4:37:53:53:ad:ff:6d:1f:
57:5e:c8:bc:47:39:eb:29:29:07:18:79:a8:29:bf:
74:cb:9f:b6:48:3c:07:75:da:db:50:3f:c5:4e:87:
3f:be:de:96:c1:9d:9a:fe:96:0c:09:bb:17:78:bd:
b6:d3:0c:24:67:cb:c6:67:7e:ce:4c:59:78:44:18:
be:3c:26:dd:a3:50:6c:8f:3d:15:20:00:3c:a3:68:
5e:b9:1d:77:ab:b3:1b:f7:69:e9:ff:7a:10:00:31:
a9:27:49:e8:76:94:d1:25:f1:2a:40:49:c5:a8:7f:
8e:7e:09:45:62:00:bd:7d:50:f0:83:6a:b9:7e:43:
09:a2:8b:56:a9:6a:86:c5:88:4b:a3:0e:4f:d4:14:
61:68:ed:5f:f6:e2:4e:2d:7e:f4:ff:c3:c0:7a:be:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:79:98:CA:98:68:3C:6D:CF:02:50:DC:B1:F4:B6:52:9C:87:28:91
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:57:ca:11:de:ad:d4:0c:6e:85:42:c6:24:d1:82:54:48:
1a:2c:cd:c2:a1:3d:23:5a:96:be:5a:a1:7a:e1:e2:31:b3:dc:
81:81:82:08:91:ad:d9:12:0f:03:c2:e6:8d:35:28:aa:7d:85:
a9:f6:f1:b0:b2:3a:90:68:e9:67:09:eb:b7:ed:e1:20:01:22:
06:b3:e1:51:19:df:2b:5b:7f:c3:5c:18:5e:02:90:e1:fe:7f:
0b:5e:a1:a8:b0:83:0d:6f:ff:a0:5b:19:e2:92:ff:c1:7e:1b:
fa:17:07:dd:82:5f:d5:8e:a1:35:1e:44:b1:d5:a8:e3:a1:ac:
1b:c4:4e:f8:8c:ce:9c:cc:7e:30:3c:ae:f3:d9:92:eb:ca:33:
8f:1d:cd:91:66:ba:bd:24:fb:8f:9b:a0:fc:08:a6:c1:b0:84:
eb:b1:e5:cb:de:38:67:6a:47:f8:d9:61:fc:9e:6b:4e:33:86:
9f:cc:d3:18:13:a4:ae:e2:f7:98:c7:ee:8d:60:df:2d:4f:c3:
54:2f:61:a9:d9:42:d7:72:eb:6a:d6:56:ff:29:a2:48:83:da:
67:1e:a5:a4:a1:0d:1a:44:50:37:70:3a:b2:e9:3e:73:bf:91:
87:28:99:9b:64:61:ac:b7:1c:03:d5:f0:4d:dc:2b:d2:aa:51:
55:9f:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:50 2025 by rpki-client