Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: JKmjEw3BjwK/tK3Ww0ixgZy5wqyeAYA45TCO0n/B1Q8=
Subject key identifier: AB:66:A0:A4:2B:CA:BC:17:FC:73:B2:D0:5D:FD:9E:20:16:3D:ED:F3
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 0194BD4E52CA8DAB19ED133255DF460AF3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: FQ_8F69qJ1OIvrywFvryFirKQj8.roa (hash: q2ovk1tVG4lGYgmszBcNRyfEZ8Wo4tad3oDRiuzylzY=)
2: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: ubH4D+24yY6xIvolIZUQH27iahpSTJOReEcbap0dVSc=)
3: yE1-x7tQsxi3I7o-mAbGQ0JD3qo.roa (hash: OMiooRge/HL0A7HRI97B5CX1nOrSiR3IDyVXEHMq1aE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:52:ca:8d:ab:19:ed:13:32:55:df:46:0a:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=ab66a0a42bcabc17fc73b2d05dfd9e20163dedf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:64:df:e3:01:28:f2:70:11:1b:6e:a0:8e:
fc:04:25:ea:da:b2:d3:67:85:b4:a2:11:79:7a:54:
9d:55:e7:79:b7:aa:dd:fe:cb:34:70:31:2e:a5:bd:
ce:82:48:94:f2:f9:eb:fe:dd:19:09:a4:bb:9d:70:
83:97:d3:92:23:6b:c7:24:37:ba:29:46:05:02:ac:
5f:24:89:56:8f:d3:8b:28:fa:d0:8c:ce:eb:b0:05:
38:4b:63:49:ad:df:5c:7a:7e:73:84:f2:c9:0e:27:
22:79:c6:4e:aa:69:cc:46:60:28:a9:35:a8:c2:35:
66:a8:4e:93:85:f2:07:f2:24:34:bd:78:29:f9:b0:
d6:dc:d0:4e:5f:d1:51:74:21:1d:e9:f5:28:24:b8:
e9:4d:5b:ab:c8:8f:ec:fd:c5:e6:77:d0:04:4b:fd:
17:e0:8e:f6:7b:5a:dc:26:81:71:5c:76:c5:b3:31:
34:b3:c7:0d:02:e5:c5:14:ae:fb:ee:9a:92:11:4a:
f9:5b:85:89:a9:07:18:88:b9:db:c9:62:27:b1:f5:
5d:2b:70:2b:3a:21:16:f0:82:76:3f:e5:6d:a4:77:
8b:b1:74:1c:df:a3:e5:40:7f:b9:a7:31:76:37:1d:
fc:89:da:b5:27:48:69:8b:fc:ba:09:7f:0a:cf:da:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:66:A0:A4:2B:CA:BC:17:FC:73:B2:D0:5D:FD:9E:20:16:3D:ED:F3
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:f6:9e:6b:53:c3:b2:df:c3:15:21:d0:1a:6b:48:d9:82:
fa:49:85:a6:0b:c0:77:15:f4:15:97:44:82:12:65:9e:58:f9:
15:e8:0d:09:7b:4d:39:37:df:1a:bd:9f:26:42:36:8a:ff:9f:
4b:48:2d:ab:71:ce:0f:74:25:3d:86:c9:4e:94:29:99:ef:87:
21:d4:c9:e3:3c:74:89:92:f3:40:94:bc:c9:7d:e8:8b:73:6b:
f3:7f:9b:51:9b:2d:30:39:19:3f:84:fe:96:be:ea:4f:49:97:
a8:59:55:64:a4:87:82:dc:76:c5:dd:98:95:8b:ac:0c:59:d5:
ec:7e:3c:fc:d1:2c:38:d0:28:cc:f0:23:07:1b:cf:af:38:ff:
3d:b8:ec:67:40:b9:70:fa:4f:ab:2d:56:e5:47:24:04:73:79:
3c:dc:bc:e4:14:e0:d7:61:33:f6:0c:b4:39:7d:75:23:ec:9b:
1e:ba:03:d0:29:18:8c:d8:b7:70:ca:89:a7:12:1b:ea:4a:7b:
a4:86:aa:2a:4b:55:2a:4e:99:3d:ae:05:3b:c6:82:fc:ab:ce:
02:33:9a:66:df:c1:87:cc:1b:71:4c:59:9f:79:b2:fa:6e:71:
ea:c1:0f:b7:fe:0f:19:c7:e3:cb:56:cd:68:31:8b:09:ec:5d:
92:3b:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:55 2025 by rpki-client