Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: iCHu6ueb7ATMfSkKFaphcsaDpZ+5iTM/lyb/hhXgEPM=
Subject key identifier: CC:E5:2A:93:6E:A0:9C:D7:88:0F:31:09:95:19:3E:4C:30:B9:36:B7
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0194BD85456F6A146BAA766D0FD59D5050A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: 0EgbX5zxFZQTSq1xhLah2dMmji0TkRPRIGG+oCiqf8g=)
2: 3M7wBBpkusFy6XxKDsxty6MG5oc.roa (hash: YSSYNxdPtjen4WxWiG8EF2gEI3aywMBBh8+MYwBRA4Y=)
3: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
4: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:45:6f:6a:14:6b:aa:76:6d:0f:d5:9d:50:50:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=cce52a936ea09cd7880f310995193e4c30b936b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:69:ff:a9:56:b0:8d:08:85:fb:44:4c:f9:
8c:79:2c:f1:3e:db:42:ff:28:12:b4:d5:62:a3:33:
b7:22:3f:66:79:5a:ee:bb:1f:2c:e8:3c:1d:71:65:
bf:58:1a:82:f2:96:1b:cd:60:2d:7e:dd:55:3e:59:
fe:d0:d2:c4:01:61:ed:a9:7e:0a:0e:3b:e1:60:5e:
88:08:18:ed:69:9a:79:3d:f3:79:cf:83:b3:66:3f:
e3:4a:9b:d3:44:33:f1:17:d6:e3:67:e5:01:a5:7b:
b4:0a:90:21:47:09:76:1c:46:0e:11:22:d3:09:8b:
dd:f8:60:d8:c6:ea:7f:10:a0:ab:88:b8:37:22:1a:
cd:1a:6a:35:cb:14:1f:55:12:be:5b:0d:1c:01:1b:
cd:3e:df:50:17:0f:5e:c1:92:76:af:75:db:90:de:
90:17:d8:c6:8a:e2:eb:9d:d8:35:dc:9d:c7:71:b2:
1b:4b:c5:88:99:2f:8d:c7:ca:fd:6b:9b:9d:c4:64:
56:93:ca:32:4b:75:5a:c3:17:8f:40:28:21:7f:6c:
21:c5:2f:31:df:3c:ad:eb:01:d1:e2:02:d8:c9:1d:
6f:1a:df:e5:39:dd:f5:4a:30:ea:0f:31:c8:24:10:
8c:52:6a:0a:91:6b:ea:f5:95:1b:f9:5a:0b:64:24:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E5:2A:93:6E:A0:9C:D7:88:0F:31:09:95:19:3E:4C:30:B9:36:B7
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:78:1b:4f:8f:64:65:30:e8:5c:7e:d5:fd:71:71:e8:4e:8c:
c3:7a:f3:31:25:cb:f0:0c:49:bd:57:2e:5a:bc:f9:b0:f7:45:
f8:c7:b0:a4:c6:a1:68:92:65:9d:8d:90:61:e1:a3:bd:d7:7e:
ad:6d:6e:75:a1:7f:2b:26:72:02:c9:a8:04:ca:5b:32:6c:da:
29:4b:78:79:85:e9:27:dd:85:42:c1:28:a7:b3:79:4c:2e:81:
b2:b9:3f:86:bc:e8:15:35:d3:a8:0b:84:f1:55:7a:95:70:c9:
b7:fb:e8:57:97:28:e6:f9:d8:94:48:76:d8:7f:d0:19:d9:e7:
22:ab:ba:28:8c:45:9f:f6:37:17:38:03:75:3d:53:d3:c9:27:
d2:f7:a9:af:60:8c:2e:cb:f2:96:cf:2b:99:4b:44:8d:fb:58:
05:05:fb:fb:55:b2:cc:ba:c2:d8:95:bd:b9:86:94:8e:9b:08:
b6:bf:e3:1f:f1:b8:c1:e8:fc:9e:f0:bd:b7:72:51:75:eb:0f:
8c:38:49:28:d0:38:6c:5e:70:88:44:23:f1:d8:9f:af:5c:20:
1e:3b:4f:60:e2:90:12:41:d0:01:71:84:5b:4c:f8:9e:bb:c2:
68:6f:5d:88:b3:f9:e6:05:c8:5c:7f:36:e8:37:cb:c8:3c:ed:
87:d2:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:33 2025 by rpki-client