Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: GUFVV0DjO8ob8jwSBrY4AEVX2Fh8jY3jx1oL36uGlyg=
Subject key identifier: 75:38:CF:77:50:4F:B2:9C:47:20:4A:47:22:FD:31:61:B1:B5:3A:E3
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 0194BC3C65A05A762C6BF0BA76A01BFF0FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: 1wdn4D64in09A9AS5ezMCjWZzueHu2hPeRDrIJrORns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:65:a0:5a:76:2c:6b:f0:ba:76:a0:1b:ff:0f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=7538cf77504fb29c47204a4722fd3161b1b53ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:ae:fa:41:7f:34:e4:6b:cc:dd:9a:8a:12:
ee:26:11:fa:d6:8d:83:3f:3f:94:08:64:cb:a5:80:
b2:92:71:b6:d7:a2:52:d4:fe:e8:a9:0e:c3:1b:fc:
0b:b7:d9:44:36:46:f6:b5:66:52:38:6e:c3:59:3e:
72:1a:dc:79:ba:92:25:f9:35:6f:63:ed:f1:c4:34:
4a:5b:47:50:97:43:b8:34:51:13:1a:69:36:6c:1e:
c7:74:a4:07:cf:88:2d:2c:64:d7:34:0c:d3:b3:be:
ba:5d:a3:38:c9:ef:db:29:c6:df:df:cd:93:30:5a:
00:27:e2:6a:7c:4d:4c:b5:8d:09:a9:31:57:05:7b:
62:dd:0a:91:35:50:08:bc:d0:02:df:dc:0c:2a:e5:
96:00:8a:32:79:a6:f4:de:0c:72:2f:10:2c:0d:5d:
2a:0d:c7:b0:6b:ae:c8:5c:ad:50:6d:34:f6:0a:59:
57:18:66:6e:e7:f7:c8:91:c6:5b:f5:ff:2d:69:64:
d3:87:c6:10:68:a9:a9:dd:9f:6b:bf:a7:89:25:82:
a4:7a:f1:8f:d7:ab:07:32:13:a0:52:fd:41:ed:0b:
18:80:3f:d5:45:06:88:41:fd:bf:3a:97:67:9e:c8:
68:3c:b6:95:15:ee:4e:5d:f6:a9:6b:1a:03:0c:d5:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:CF:77:50:4F:B2:9C:47:20:4A:47:22:FD:31:61:B1:B5:3A:E3
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:ee:99:36:8d:56:c3:44:cc:38:ff:ee:6e:e7:96:e7:c1:
1d:92:be:e4:17:5f:46:f9:89:c2:48:6a:a4:20:fa:ed:32:ca:
1c:14:f7:8a:13:05:41:4e:24:42:98:39:6c:63:58:46:5d:4e:
e7:aa:85:c8:e0:9e:4f:3a:da:2a:0e:63:61:61:1a:3d:4f:01:
bb:e9:4f:29:96:b9:96:16:59:33:e0:e1:e9:a6:ce:aa:78:77:
19:5f:6e:df:8f:42:e1:f2:2c:4f:11:ba:32:60:bf:d2:16:eb:
92:42:a4:73:21:14:27:71:06:f9:57:39:6a:d3:0b:b0:d5:c3:
38:9d:2e:a1:3b:2b:62:bf:28:a1:66:78:c0:01:e4:b9:12:94:
1e:b1:a6:df:5c:76:47:59:a4:d1:6e:b1:ed:91:d6:71:65:83:
ac:c7:76:b4:a6:19:1d:1d:30:4f:a1:5e:cf:fe:f0:1f:65:10:
fd:ff:67:c7:0e:8a:5f:b8:ca:bb:6e:4d:84:4a:a4:8d:b2:ee:
3b:86:18:52:fa:52:38:19:d8:1c:9f:39:40:4a:96:b7:a3:9d:
a7:53:bc:9c:12:fc:f6:6d:1a:f6:d9:a9:fb:26:7c:59:cc:32:
1d:d6:04:8f:e1:dd:5f:99:7c:a1:d4:b4:b4:a3:77:4e:8b:b0:
07:43:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:37 2025 by rpki-client