Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: X5X4mA4nowo40x8XbRLHuOlmgxO+bkFl6qSl70q8mJo=
Subject key identifier: EB:D4:A4:C2:22:58:21:F1:71:A6:68:E2:BA:79:5C:99:D2:49:7C:91
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 0194BC3C8831C16C575C8E76C2F95F724922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: J-tps2ELkCfcCcLwGdsaO09dBP4.roa (hash: 6YmY5CCnPEhTUSkoYzLXDEbRDQk4iktCzj/XnKUd+Ik=)
2: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: hj76VF007L+I8JIJDE2mmvUThargFTWnhKOPWGu7e9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:88:31:c1:6c:57:5c:8e:76:c2:f9:5f:72:49:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=ebd4a4c2225821f171a668e2ba795c99d2497c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:b2:35:25:25:f5:76:2f:8e:8b:54:50:a1:
0b:bb:97:31:22:b8:c4:f5:7e:ad:7a:1b:f8:4b:46:
10:25:6d:dd:3d:ce:bc:9a:98:13:89:22:d3:1e:85:
3b:1b:aa:15:05:4d:62:83:bf:fb:2a:ba:da:eb:6c:
65:57:78:06:cc:f5:59:c3:ba:c3:a3:c9:84:58:ab:
d2:dd:4f:4a:b4:92:76:f2:c5:32:cc:f1:b2:eb:21:
59:98:b6:bb:cf:a0:a2:b4:98:55:ca:81:9a:19:36:
f8:70:7d:dd:03:03:e2:67:8f:0f:82:69:91:62:f6:
72:91:56:67:93:b6:b5:09:3c:bd:97:5d:46:a6:4c:
1a:3d:82:e0:1c:15:4c:40:fd:77:a6:32:27:e3:53:
a1:2f:da:7e:de:27:38:cb:a8:49:cc:52:bb:1c:37:
d2:a7:73:ed:0b:78:a2:b3:c5:e6:5b:e9:74:74:61:
98:1b:8f:0a:e9:2c:2a:dd:56:69:78:70:c5:f8:b8:
91:1c:14:d6:fa:f8:fa:22:ae:43:73:4b:c8:60:44:
b9:01:1e:35:c9:b4:2c:75:15:88:e3:61:a1:bf:c2:
36:fd:94:ad:88:ae:0c:51:bd:b9:18:ea:4f:ef:bb:
2c:ef:91:a2:87:79:6f:c0:a5:c4:26:d5:6e:b9:43:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D4:A4:C2:22:58:21:F1:71:A6:68:E2:BA:79:5C:99:D2:49:7C:91
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c7:8e:25:80:5a:6c:6a:10:33:61:fb:26:e3:c2:55:a8:cc:
1c:61:47:34:3c:ee:0b:46:c6:a5:4f:ac:99:48:3e:3c:a9:50:
18:6e:c4:7a:38:a2:ac:1e:5c:a0:b6:bf:62:55:42:c4:50:cd:
78:d6:7b:21:41:a7:8b:c5:85:1b:54:c8:57:26:76:33:9e:37:
b9:5d:c0:26:37:b2:59:04:b5:68:e8:91:3f:7b:18:bd:d8:d7:
8d:1b:d5:8d:7c:ba:e2:40:58:e1:6e:0f:74:08:4f:70:6b:86:
b4:4c:8f:28:cd:38:96:70:72:e2:22:6b:3c:91:7f:a3:b8:f8:
9a:4d:31:f2:26:5b:fb:18:5a:23:81:95:bd:b4:f2:1c:56:7a:
a1:7f:3d:a6:b8:88:c5:60:13:be:5f:78:00:65:ae:63:78:5f:
42:db:26:1f:2f:cd:b9:5f:26:49:11:36:0f:c9:85:40:d3:60:
c5:54:69:d0:4e:b7:02:64:aa:8c:98:3d:32:e3:f9:25:5e:50:
d9:23:06:55:15:86:99:bc:f3:62:e4:b4:fd:94:83:0f:e4:b8:
18:4e:56:80:ad:76:60:71:13:4c:79:6d:56:0c:e1:26:96:e1:
63:93:cf:10:11:8b:a8:40:a0:85:5f:f3:11:0e:c9:66:18:33:
75:8c:45:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:20:03 2025 by rpki-client