Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier: uYoBVHUueDIqMAJm5UAgV7r5cllZxdU9CX1w6qQj4E8=
Subject key identifier: 33:62:6C:62:1F:40:CD:08:81:95:A9:FE:0C:BD:09:2C:D9:06:D7:D1
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 0194BC72B330229DF76275063A03F3590BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=)
2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: tJ5Rv7YZCxt5zJRNgVUzc8SsGPZfGPnptWf+z38XcLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:30:22:9d:f7:62:75:06:3a:03:f3:59:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=33626c621f40cd088195a9fe0cbd092cd906d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:04:be:ab:70:84:d2:f1:f2:56:de:e1:f0:
c3:7a:93:53:f8:a2:7a:1a:82:fc:a1:48:10:b1:08:
ab:2d:38:7c:5c:23:e6:79:ef:7b:e9:c8:d8:71:1d:
ee:d4:00:55:b9:16:17:33:95:c9:44:6f:11:f4:f5:
a6:b9:bc:8c:7d:9e:1e:b8:4a:a6:ca:a3:24:42:93:
c4:3e:62:bd:3e:76:f0:bd:cc:01:32:a3:77:e2:e9:
c1:77:d8:e5:1f:3d:e9:af:eb:dd:4e:64:85:ca:a7:
f2:dc:9d:25:68:4c:76:c5:0d:64:18:60:b4:1f:35:
87:a4:43:75:33:34:e1:55:6b:c1:1b:dd:37:e5:4a:
3d:c1:21:e8:21:22:e0:fb:8c:13:1d:7f:a2:ce:31:
4d:f0:ff:cd:10:4c:8c:7c:fd:3f:d7:9b:41:de:4a:
58:34:e1:28:35:6e:87:a9:99:df:cc:31:7a:23:fc:
d9:76:65:05:69:a4:05:ad:af:77:a5:8a:6a:0c:eb:
46:6c:b7:75:68:07:22:1a:7f:9e:90:19:07:d2:81:
6d:a9:b5:cc:13:a9:80:4f:74:d6:fc:ed:a5:46:96:
f0:41:c9:27:15:fd:09:ec:52:bb:7d:b4:9f:26:06:
91:42:f8:f3:c5:d7:4e:59:3d:db:d5:3e:5e:48:6b:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:6C:62:1F:40:CD:08:81:95:A9:FE:0C:BD:09:2C:D9:06:D7:D1
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3a:6d:6c:86:a7:7b:30:06:03:b7:7a:ed:b7:c7:be:3d:92:
81:49:3b:81:96:3c:38:a7:be:66:1f:f4:f6:25:e3:3b:1b:d4:
35:3d:bb:f1:52:5f:ee:f0:34:bb:1b:cd:8d:78:71:c6:46:78:
ae:c6:38:97:49:71:f5:f1:c7:52:7e:09:d9:80:4a:c7:3d:4b:
66:27:0e:81:18:a3:2e:2c:f2:75:d3:f0:70:4a:b1:54:0b:a5:
44:bb:66:15:a7:2a:d6:62:3b:65:6c:bd:21:fa:4e:44:f5:15:
4a:c9:c9:9d:b7:5b:7b:00:ec:d8:12:d8:47:b8:1f:79:73:44:
8f:5c:d9:2b:20:c3:a3:a0:2a:00:45:fe:ec:af:8f:41:0b:2c:
9b:6d:c2:0c:86:dc:8f:1c:d1:8f:b4:0f:45:a7:1d:6c:79:e7:
6f:35:38:c6:5e:78:b5:ed:93:ed:bc:c5:83:b5:4f:0b:9f:e4:
4f:e5:4f:f0:ff:5c:5b:c4:cc:8c:bb:14:5a:a2:2a:45:a5:c3:
44:2b:65:6e:79:4c:4a:f4:d2:d6:7e:ca:3a:1d:87:18:43:be:
c1:68:0d:03:fc:91:6a:16:c7:a3:89:97:d6:28:ac:e5:1d:c4:
86:67:4f:9f:7a:a6:8c:c7:90:3f:76:f2:8e:05:94:3b:b3:b3:
e0:82:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:02 2025 by rpki-client