Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: AO857fBa9z0ikv2Y5Z7wW3DfsEnSe+j2iMPDR0uFbE0=
Subject key identifier: 3E:E1:AA:EA:C0:C2:FE:70:A4:6B:15:03:0F:6F:55:43:03:F8:18:AD
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 0194BD853CCCA2C6973E61A09D25D50C33C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: IhYUCzoQVpTavPJyqMMUG8NuM389Z+EnYZGTuA3pQhc=)
2: PdP7D6zww1cUkLXFJC2KJdML-6Q.roa (hash: BhRL4TZHJTnrLlh1nKpcXBY5zI3gH+LStYOuB+PYhe8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3c:cc:a2:c6:97:3e:61:a0:9d:25:d5:0c:33:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=3ee1aaeac0c2fe70a46b15030f6f554303f818ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:6d:33:31:fa:9c:31:b1:7d:dc:65:74:e4:
5a:fc:7a:81:e7:29:e9:6e:7b:da:b4:9b:59:cf:35:
3b:77:54:27:fa:fb:ae:25:7c:c2:d7:68:6f:e0:fe:
f6:7f:4e:0c:3d:be:19:b7:ef:da:8e:18:3b:16:30:
a3:ed:41:b9:39:c0:73:0e:a2:79:94:6b:e6:55:04:
81:a7:1d:33:e8:3b:90:e3:9e:61:7d:5e:86:c3:0b:
22:bb:c8:ee:22:2e:db:ad:e6:01:74:ba:c9:e7:53:
cc:7e:37:8b:66:e7:0d:8a:1c:78:65:f9:5d:39:15:
36:54:0c:69:0d:92:fb:d6:2c:d2:1e:42:75:b7:7c:
90:30:29:ee:83:73:6f:3a:cd:8c:30:62:86:5d:1d:
25:fb:6a:a7:e3:81:e5:3f:fb:01:82:c3:d8:4c:1d:
53:ee:82:10:d7:01:3b:bd:c6:62:43:d9:d4:ae:de:
0e:36:f3:93:85:4e:d6:20:52:f0:05:99:02:3e:76:
8b:37:fb:48:3e:d5:e0:11:05:23:b1:4c:f1:75:8e:
4d:53:d1:b2:d7:1c:78:3b:9d:93:ae:1c:78:38:e3:
18:e6:cb:50:8b:45:4a:9c:e3:d6:cb:26:c5:f4:fa:
66:16:ff:ec:e6:d4:6e:ef:43:6a:9c:e2:0b:60:a7:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:AA:EA:C0:C2:FE:70:A4:6B:15:03:0F:6F:55:43:03:F8:18:AD
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:78:ca:d7:44:27:c6:1f:1a:fa:ab:2f:4e:0b:68:c8:ff:75:
27:22:88:c4:7d:d9:a1:67:ec:14:bd:24:ea:7e:c0:aa:da:75:
be:92:1d:f3:48:03:e4:e8:2e:a1:f0:4b:1c:04:27:11:16:d8:
7b:48:7d:8b:ce:4b:84:e3:10:d6:9c:c1:97:6e:4d:34:f0:70:
38:0e:91:0f:74:28:34:87:e3:2e:5e:e1:25:c6:1e:49:11:4f:
9c:dd:c9:ce:c0:1e:24:d8:2f:e9:25:42:70:ff:c6:82:2b:a5:
ea:e2:ed:9e:67:a2:4f:64:95:9a:1e:1f:5a:0e:b1:ad:fc:f4:
b6:af:49:77:68:54:ff:51:36:8f:66:62:4e:29:fa:17:24:b2:
5b:d4:84:a0:68:d8:6c:c5:87:ff:d6:82:23:90:df:54:35:80:
a5:73:8e:45:f9:ac:b3:81:fc:90:05:51:2f:dd:36:27:e4:84:
a6:55:07:2d:b6:bc:e1:7f:cc:3c:72:d8:96:4a:7f:6f:46:fc:
16:db:4e:5b:a8:a5:8b:e6:a5:f0:f9:a5:06:a0:35:7f:e3:d9:
3d:bc:07:cd:b2:72:5f:f5:25:ac:00:19:ca:a3:9a:2a:0b:b1:
af:e7:3c:5c:f5:fe:d5:82:ac:87:c2:63:db:60:48:1d:c4:0a:
47:f2:cf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:23 2025 by rpki-client