Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: WmHptHEIl1K0L3LiDv2UFwEkiaj96Ch35GtufQFgr3k=
Subject key identifier: 01:ED:38:5F:CE:A2:3A:FE:B9:EF:C4:71:F3:21:6F:3D:99:17:C2:4F
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 0194BD4E46B10955FFA81F97B4433BA27E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: BHMZ+HDF0WZYZWE1VVAGx2vz2wBOQQD1tTSN0ntXYlY=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: sq9dX2y5oygslTbXeDpJSx4iqdw.roa (hash: m17OPoKv1pjz2qDkIfpj2o8Nzfwy0OmAlARPr95x+uI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:b1:09:55:ff:a8:1f:97:b4:43:3b:a2:7e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=01ed385fcea23afeb9efc471f3216f3d9917c24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:d2:e2:76:04:1b:71:34:5d:91:b9:8d:53:
7b:2b:05:f7:f4:07:2d:6a:ce:53:6c:a3:90:c7:3d:
8c:6a:08:9b:b1:99:c3:16:12:73:cf:16:82:58:dc:
36:9c:c6:b0:c5:67:ba:9f:6b:e6:f4:d9:30:3c:41:
47:ec:89:37:24:f9:f7:d8:7e:de:45:64:05:90:be:
c3:18:12:b0:7f:c0:fb:e1:6e:c2:45:11:3b:45:fe:
91:68:f3:a6:31:e0:96:dd:a8:ef:ba:c3:c5:e4:f0:
3b:8e:14:15:26:65:2f:7e:f9:e3:b8:06:f2:7a:3d:
7e:57:83:a4:e1:fd:0d:dc:bc:3e:42:82:54:66:2a:
bf:d1:aa:b7:1e:b3:c2:73:51:1d:2e:0f:d8:2f:bc:
65:99:77:49:8c:16:64:10:9f:87:b1:9a:13:63:ab:
bc:0b:d0:80:cb:de:1e:37:4d:69:34:6d:53:98:a0:
80:ea:3c:8c:91:de:24:1c:9d:b5:f7:e5:3b:75:47:
37:04:94:69:93:d6:1d:59:45:d9:6a:7e:df:d9:60:
38:2b:64:6c:0e:78:a1:15:bf:0f:ca:ed:20:8a:dc:
25:fe:1b:9c:a8:63:89:38:61:41:8f:0a:3d:cf:bd:
bd:c6:c0:ed:37:e9:3a:62:30:5e:0b:69:cd:5b:ab:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:ED:38:5F:CE:A2:3A:FE:B9:EF:C4:71:F3:21:6F:3D:99:17:C2:4F
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b9:b3:ba:a8:38:c0:02:8b:bb:89:61:6d:33:5e:ae:dd:6d:
e1:0e:86:ca:76:dc:24:1f:08:c9:3f:cd:ac:08:35:54:b8:50:
bb:a9:77:ee:ed:1a:a0:d1:b8:9a:89:1a:9d:e4:8a:a2:e5:b3:
af:d9:7f:4a:06:d5:29:06:6c:b2:d7:20:ce:fe:6a:4e:82:f5:
7f:fa:71:f3:25:cd:f4:32:02:33:14:ca:05:b1:e5:a3:34:9b:
cc:66:86:cf:31:ed:d1:b0:c3:d9:42:d2:b1:62:af:ed:01:db:
74:67:96:86:19:7d:4f:df:2e:55:bb:b4:87:6b:bf:29:ad:ac:
05:e3:58:6e:fc:d1:8f:27:a5:de:33:7c:6a:24:cd:e2:e9:92:
a8:5b:da:92:06:be:3b:19:71:4e:11:6d:02:12:a0:2d:96:b9:
96:1d:e4:28:93:e9:5e:91:d4:a2:ff:bb:42:f0:1b:64:c9:df:
bc:14:6a:c5:71:7f:1b:54:94:ef:72:99:aa:6c:d8:12:04:84:
86:91:f4:59:66:2e:ef:01:39:9d:ff:5e:81:ad:18:df:5f:bf:
6a:ad:07:1b:ed:ff:d0:98:87:ca:c0:86:88:a1:3d:ec:b8:61:
cc:46:8f:0d:57:38:56:10:2e:1d:23:45:18:63:25:cf:b7:11:
1d:25:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:59 2025 by rpki-client