Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: SipQqgLA/NwYmm3vB0C6sbpNR+VJb4mEYWZFjQE6LQ8=
Subject key identifier: 76:E3:28:6D:63:33:48:23:81:14:0C:F6:08:28:DD:F8:0B:7C:D5:BB
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 0194BD8594B49CF343651C37613C00A70A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: tFAi6tNMRC9HE7dWce8S+JgUB4tK3vh0g/XozAqm+Ik=)
2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:b4:9c:f3:43:65:1c:37:61:3c:00:a7:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=76e3286d6333482381140cf60828ddf80b7cd5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:ad:ab:4b:24:73:0c:30:76:b6:09:21:d4:
8e:6b:ac:ef:46:05:8a:b5:b1:12:64:87:b9:c4:6a:
1d:09:49:0c:23:fb:5d:b1:a3:0f:ab:37:4b:a1:1b:
22:4e:a9:d9:39:c4:af:5c:0c:01:60:e1:9c:da:ad:
56:58:7c:e0:a0:e6:b7:e2:25:40:a4:9e:fc:4e:97:
1e:9c:db:12:42:c6:e1:1c:6e:36:68:33:32:61:57:
4e:48:18:1d:2c:85:52:8d:9c:cc:49:a0:be:f9:fb:
68:eb:2b:02:77:1c:ac:54:34:d6:3b:7f:d9:b4:32:
0f:a6:01:ea:89:2d:18:1c:55:74:70:ad:27:19:23:
6a:5d:b5:a5:bb:ff:ab:6a:d2:22:7d:5d:db:c9:30:
44:10:7f:0d:d5:4c:bc:99:80:51:38:fd:ad:98:e7:
79:2a:ef:3b:75:20:bc:ec:8a:a6:8f:31:98:84:5c:
ac:3d:ca:1e:8a:3c:d7:d1:12:dd:4a:aa:bb:2e:b7:
0f:55:14:1c:ba:a8:f3:b1:bc:a2:82:ee:17:6c:ee:
29:98:cf:40:2a:97:2f:03:dc:87:b1:01:5a:0d:ad:
ab:8d:b9:c2:f2:ed:53:82:be:df:d2:65:92:f2:a1:
d5:6e:ac:b2:87:70:8d:d0:d6:de:33:87:f3:13:37:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E3:28:6D:63:33:48:23:81:14:0C:F6:08:28:DD:F8:0B:7C:D5:BB
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:29:d0:f0:e8:ac:50:ef:cb:e9:00:b3:eb:72:39:6b:74:fb:
1e:50:83:a7:11:59:22:14:55:f1:17:50:d2:a3:07:e1:96:d3:
c5:ee:17:00:29:84:66:50:e8:b4:9d:a4:f6:19:8f:d7:77:ec:
84:ad:0a:0f:4f:19:9c:a3:8c:26:a2:ca:5c:a4:cb:df:65:f9:
35:02:a2:19:14:fb:3b:4a:05:11:d9:8a:da:c7:4a:1e:63:90:
a5:ee:2d:bd:a5:93:b3:aa:c5:3b:36:33:04:62:3d:49:c7:c1:
b4:c4:29:0b:52:22:b9:14:d3:48:78:11:5d:0f:af:05:08:55:
20:64:e2:f1:3d:59:2d:68:80:7b:18:97:97:87:83:73:1b:05:
49:d2:c5:6c:8a:82:fe:e6:9d:73:21:74:64:49:9c:64:bd:37:
3f:af:a2:7a:f1:fc:9b:65:30:e5:c3:7b:77:0e:83:94:b9:06:
30:72:14:9b:2a:33:92:dc:7a:40:49:ef:11:26:de:f2:61:20:
f3:5e:c8:00:27:96:fe:af:0d:77:f8:3a:0b:2c:7a:d1:48:0f:
1a:a7:6c:99:50:49:51:a7:14:2d:79:df:62:cc:94:70:11:65:
97:88:39:fb:34:7d:ee:35:ff:f6:ba:f7:85:92:15:4a:db:e9:
87:b9:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:19 2025 by rpki-client