Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: 28fYz6PXL3jJBuGgzIRiTMHsbtoO5ERPpzrgPD2pHo0=
Subject key identifier: 4D:88:95:43:D8:F0:FC:5C:1D:79:61:2E:20:00:F0:5D:18:E3:C4:07
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 0194BBCEB4FD13B92748FC746C04A2493A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: sycoaJcnRS7LqhnQ4WhCXaoObGBoD71gPwDDEJxxHP0=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:fd:13:b9:27:48:fc:74:6c:04:a2:49:3a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=4d889543d8f0fc5c1d79612e2000f05d18e3c407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:5f:07:ed:5c:2b:4d:14:23:0f:d6:c0:14:
5e:ae:d1:b9:66:44:b0:7f:e1:65:00:4e:d9:bd:31:
dc:2b:4b:05:48:87:ee:17:05:7c:5c:78:fa:e1:f7:
e8:d8:54:74:d3:7f:74:e4:85:25:8f:e4:d4:8d:ca:
57:02:c8:43:c0:e4:26:db:ee:3c:f3:06:a8:70:0f:
08:4f:aa:c9:d9:3e:0e:14:1c:5e:6a:e6:3a:01:85:
ec:54:d6:09:f4:92:64:a3:7a:00:7f:08:e0:65:a4:
45:1f:ac:79:e8:99:51:9c:5b:14:a6:79:e5:87:0f:
cf:7a:50:8e:94:94:fb:1b:a0:fc:61:d7:bc:9e:c1:
e0:9b:06:2b:0d:e2:8b:51:e7:47:aa:6f:35:9e:90:
f6:ae:c6:f5:bd:18:16:59:85:30:0f:5a:e8:59:34:
fe:29:af:b9:c1:81:8e:93:b1:23:d1:6c:75:69:2a:
b0:63:1c:a8:fa:2f:17:14:1c:c8:ed:ed:25:14:05:
84:88:7e:31:ac:a8:89:a2:6a:fd:d0:a7:fe:fc:de:
d0:ca:72:20:07:ff:fb:07:2d:70:ed:82:82:1c:4b:
b5:a7:a0:49:96:9c:21:01:29:b9:cb:b7:5d:56:1a:
83:5c:9e:36:ae:79:49:c0:bd:22:50:e8:43:0a:7f:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:95:43:D8:F0:FC:5C:1D:79:61:2E:20:00:F0:5D:18:E3:C4:07
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e4:be:a9:7c:89:b9:c7:9c:e5:90:2b:a8:8f:36:77:1e:9e:
57:22:44:53:58:be:9f:a1:12:92:62:cd:b4:57:4f:2e:bd:d5:
6c:d1:fe:63:4a:95:7e:c4:c3:38:04:02:93:2f:22:93:b2:29:
38:d2:3e:ec:98:99:bd:d4:d1:88:3b:e7:27:3f:eb:a3:56:5c:
aa:cb:a7:62:3e:75:b7:84:e2:75:1d:a7:a0:88:5f:cd:0d:8c:
47:fc:a0:54:4c:5f:3f:8f:03:82:29:18:64:3e:7e:86:b5:d7:
29:a4:7a:8a:43:59:54:39:8c:6d:be:50:e3:74:f4:76:10:eb:
11:1d:6b:56:0c:a1:a8:65:55:15:df:2a:46:56:3c:bd:6c:22:
61:f8:39:f5:6d:49:f0:36:60:41:38:16:93:31:9f:47:cd:1a:
98:93:0f:86:ed:94:db:98:32:39:6e:76:71:44:b0:45:01:13:
bf:68:17:03:2a:b2:f9:81:c2:c0:4f:54:85:8d:c3:92:0d:eb:
3f:18:c7:21:e0:de:b7:ea:1e:08:8a:9f:75:aa:3a:24:08:d2:
17:18:1b:41:b2:d5:4d:00:ee:4e:08:a5:21:ae:8f:cb:ca:f0:
b1:3d:f1:83:c9:8e:c3:36:00:41:00:70:4e:d0:4c:df:59:bf:
0e:99:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:50 2025 by rpki-client