Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: tcHuw59rQp4PQ05HjP3yQoZ7BjRGypdS0FiZNimn/x0=
Subject key identifier: 8F:15:2B:21:BD:94:DE:B4:36:87:31:91:91:12:1F:A1:B3:20:06:7B
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 0194BC3BF755CBEDBD6C0275E155474A1661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: sDFzR/T22/2I8BdgPpvGtzIVubGpyV0bJ/3A5Fgxlaw=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:55:cb:ed:bd:6c:02:75:e1:55:47:4a:16:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=8f152b21bd94deb43687319191121fa1b320067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:6c:f9:b0:05:95:5d:f9:58:6a:bc:92:92:
96:71:c1:3d:0b:7d:9c:ab:5e:e9:d8:6b:83:71:b0:
59:a1:55:2c:6f:e7:77:15:9b:72:cd:53:fb:a1:cf:
23:87:4c:bc:d5:87:0f:bc:75:af:01:2d:ed:ee:05:
96:9c:91:ed:a6:22:a9:38:c8:a9:7d:2f:b0:bf:b4:
fc:38:5d:68:c9:d9:19:a0:b5:b4:e8:9d:0f:5b:92:
39:78:a2:10:7b:bb:b0:fb:2d:17:d8:a4:b7:ab:ea:
1c:a7:e0:51:6e:18:93:4c:32:7e:f5:65:e5:56:34:
37:81:b0:87:17:fb:f6:27:39:7b:66:f5:04:89:8f:
1c:81:81:1b:01:3f:7e:a7:4a:1b:1e:4f:3f:d5:ce:
32:e4:33:dd:61:3b:d3:6c:53:38:ae:4e:fe:46:19:
fb:70:1f:e1:a1:0c:92:1e:ca:68:b1:d1:ca:5c:d5:
96:f7:87:02:3f:4c:f2:04:6a:cb:cf:d1:93:8d:41:
80:a7:ee:d7:bc:17:ad:5b:fd:7c:a6:75:5f:3f:24:
2d:2c:4e:00:02:03:73:8b:55:4c:76:20:a3:c1:ba:
65:6f:40:eb:10:9c:b7:d1:86:62:76:f0:09:0c:a5:
bc:94:0e:03:54:d5:f7:61:81:30:81:0c:70:68:7b:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:2B:21:BD:94:DE:B4:36:87:31:91:91:12:1F:A1:B3:20:06:7B
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:17:74:c0:f4:33:2e:2c:dd:1e:51:d2:12:a0:1f:e9:8b:d3:
fb:57:c5:e5:1d:45:8a:db:e4:3e:94:96:56:4e:dd:a7:1c:64:
25:c5:e5:d9:22:88:54:92:bd:e4:18:97:ca:0f:9e:54:b3:3d:
01:5a:09:8c:b1:f3:a2:c1:6f:08:8d:c6:d0:51:cc:ee:ed:18:
6a:93:07:96:22:96:9e:76:e3:70:fa:88:0a:da:4b:f6:dd:6b:
a6:45:41:85:a7:2b:61:9e:e8:0a:ef:d4:74:a7:03:e9:89:70:
88:16:21:79:08:ff:68:99:26:55:06:4f:e0:e7:62:20:5f:36:
d2:85:3f:9e:cc:d2:88:2a:3a:0d:fd:72:f3:90:fb:e0:69:14:
35:d5:5d:6f:6e:af:19:cb:7b:0c:8f:59:e6:35:92:fa:be:71:
55:bc:95:c7:e3:aa:dc:6c:fb:c4:9a:26:27:9e:3d:e2:7f:6a:
d4:9f:a0:c3:68:92:de:ee:6e:a5:e8:15:da:30:7d:55:8d:ac:
58:c2:be:66:e2:ec:61:79:b8:79:c1:b8:79:06:0f:3d:26:f7:
93:71:eb:bf:2f:6c:6e:9f:d6:9c:80:10:b7:85:b0:48:91:ec:
2b:7e:72:1c:ef:f9:b5:12:ca:85:7e:07:16:97:ab:8c:ce:f9:
1e:26:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:42 2025 by rpki-client