Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: KhGVMh2c9OLElwgWaRKxSpVXzeIRgek/V15sOCMD0aE=
Subject key identifier: E0:2B:E0:55:7C:3E:51:08:9B:79:92:D5:98:26:DC:68:13:3A:5A:53
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 0194BC04B33635D50F8CB719DBEF4C14385D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: Fz75tXjK7H/GF4tRGo/yckYMA8LoKP7SiI6G0cobKuU=)
2: r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa (hash: zSG7oRCig4axArTg72yLWZy9j2Lnt0Tay8wTKKxpjxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b3:36:35:d5:0f:8c:b7:19:db:ef:4c:14:38:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=e02be0557c3e51089b7992d59826dc68133a5a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:a3:9e:7e:64:2a:53:1f:f7:49:9c:e6:34:
9b:b1:93:a4:4f:65:bd:ae:45:c8:e3:c3:8f:d8:71:
97:36:0c:e0:3a:5f:33:5d:0c:1e:bb:8b:62:5b:fe:
56:7d:a4:ff:4d:51:b7:46:13:2f:c2:19:47:5b:17:
fd:d9:b8:3b:39:b6:8d:14:cc:25:5d:53:8c:8b:fb:
c2:c2:2a:2d:38:8b:34:26:23:31:87:a0:66:53:39:
85:4d:9c:60:d4:c8:b0:b9:1d:59:cc:58:d9:61:b4:
71:5d:05:b5:98:09:1e:c3:67:43:9a:79:da:c6:7d:
45:3b:e2:24:86:7f:67:e8:fd:76:04:15:df:e4:95:
0a:8e:04:ea:c4:4f:20:7b:f1:09:52:fe:5b:e5:f9:
4d:22:b7:05:b9:38:e6:7c:59:0e:e5:17:4a:57:ca:
f6:9b:3a:aa:3d:d9:6a:9e:dd:98:a8:6c:23:fc:8f:
2e:7c:a2:bf:c2:8b:0c:1c:a5:b4:f8:48:49:10:50:
7f:62:a8:65:7f:f7:05:ba:b9:82:3b:f1:ab:16:71:
e6:eb:12:14:09:df:6b:dd:66:ce:59:8f:97:ff:11:
2e:f2:6c:c0:f0:86:21:c5:6d:b8:eb:d8:32:75:a4:
33:2a:7d:e6:84:4a:d6:5f:d6:d9:19:eb:10:b8:e5:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:E0:55:7C:3E:51:08:9B:79:92:D5:98:26:DC:68:13:3A:5A:53
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:20:49:03:ef:d9:14:c9:a4:68:95:ed:11:91:c4:d1:66:14:
07:02:da:e3:0c:0d:27:41:de:b7:ee:e8:ac:d5:d1:cd:8b:d8:
d3:d2:84:d2:22:39:4c:9a:c0:6d:90:da:70:15:ec:3d:38:b1:
36:86:c6:6e:b7:75:e1:b9:ca:02:eb:e3:4c:b4:0f:42:6a:a8:
68:d6:f7:e1:b1:55:5a:78:00:53:a9:00:29:8e:1a:85:46:2f:
89:3e:25:d5:22:03:71:97:b7:16:06:7c:b5:39:dc:6e:77:82:
7d:ab:d1:35:85:c2:f6:e5:8e:a1:ab:bd:c1:fe:5f:5b:a5:ce:
3d:01:f7:eb:3b:42:31:8a:51:9b:47:08:96:17:68:02:7c:00:
78:81:ce:83:14:2e:79:f9:5e:d5:e3:6c:d3:83:52:4f:95:25:
12:c2:61:bc:54:0f:1b:2a:fd:c7:7a:cb:d0:32:09:87:34:91:
7b:6c:0e:7f:49:20:17:92:c8:4a:53:9d:2e:9a:57:7e:ff:7a:
af:8f:5b:a4:6c:cf:00:31:5e:83:dc:3e:e5:0e:26:7c:ed:d4:
94:55:5f:a6:8c:31:b6:80:74:88:3f:9b:34:46:36:d8:ca:5c:
92:ed:e1:87:40:4d:22:b0:f4:49:c3:b3:ff:20:07:0f:99:9d:
a8:f3:37:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:57 2025 by rpki-client