Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File: d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier: NaK/3C26Icc6qt0JWcQnLMElW9Wsqpi/Pbsxx3RtSsI=
Subject key identifier: E1:C0:C2:F5:32:43:B8:06:87:3A:08:93:E9:5F:F1:BD:1E:FE:2B:FE
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 0194BD176E6104552F700E7C53413853945C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: 0vZUeITqxhjYTZ09-IZPJQyJrFs.roa (hash: XWy8JIsvHPb13TWVq0G62lkPYB9FumkdweR7BRskWwI=)
2: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: Y1WBNTQ5d/P9O6akxXdq4AUxOOuwcNsG3H9SxSBWt0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:61:04:55:2f:70:0e:7c:53:41:38:53:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=e1c0c2f53243b806873a0893e95ff1bd1efe2bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8c:37:c4:9f:5e:8f:cf:5a:1d:43:fb:55:9a:
2e:47:d1:bb:5b:94:c0:b3:1b:6d:16:7e:60:f0:53:
df:12:2c:a7:e0:d9:45:21:bf:a2:bb:40:ab:7b:9d:
22:9c:81:53:e7:56:8d:f3:6a:3f:f0:55:5f:66:ef:
87:88:8c:41:3a:df:41:c1:9a:eb:98:61:63:be:c1:
e1:11:37:9a:dc:89:8d:88:ed:04:db:d5:79:cb:86:
9b:a2:c4:47:77:60:01:bb:de:4d:f3:15:95:26:4f:
e4:d3:06:88:1e:7a:51:9a:db:65:2a:6c:11:dd:32:
e7:14:4a:a7:19:88:b8:d6:d1:63:c1:70:67:7e:75:
44:6b:c2:e8:3a:d4:38:df:60:bc:5b:a5:5f:5f:40:
dd:eb:ce:a1:a3:55:bf:30:83:3b:2e:7d:6e:3d:2d:
00:d2:b4:f9:f4:31:ee:43:ad:9c:99:2c:48:2d:59:
fb:46:48:f9:07:f3:21:b7:a6:36:25:be:cf:ad:71:
42:b3:1e:dc:84:43:85:c8:b3:b7:86:cd:a9:74:80:
19:12:1b:fb:85:95:99:47:e8:30:aa:3e:e7:39:af:
3f:97:8f:22:6d:4f:58:9c:15:78:9f:c3:a1:07:10:
5d:55:cf:48:66:9d:51:9a:f6:56:8b:af:6e:0a:fa:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:C2:F5:32:43:B8:06:87:3A:08:93:E9:5F:F1:BD:1E:FE:2B:FE
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:59:f5:bb:7a:64:b7:b4:06:83:24:fd:69:e8:89:66:72:8a:
96:93:75:49:30:64:b9:0e:1c:38:fc:9f:d9:5d:47:1c:86:51:
c9:3d:ec:b6:80:65:01:c8:c1:05:1d:03:c7:19:d4:aa:d4:4f:
96:a5:b2:be:79:0a:54:4d:b5:e4:f0:9f:84:30:dd:0c:29:b8:
08:c6:97:56:00:60:33:eb:9d:c6:0b:39:b5:c0:66:8f:7c:25:
20:f9:15:65:52:5f:18:24:25:2e:33:98:cc:03:46:3e:c7:36:
da:c5:4b:43:61:c7:2f:4c:44:54:e6:33:f0:2e:88:7d:62:50:
6f:07:62:ea:36:3c:9a:37:cc:6d:ee:96:6e:d3:c7:48:58:25:
e1:16:d0:f7:c4:3f:4e:b5:15:3e:35:8a:8e:84:2d:3d:5e:db:
cc:8b:5e:79:7e:b2:09:ab:39:fb:c2:f8:78:4d:5a:d6:95:0d:
2c:d5:89:02:f4:d2:49:08:4e:81:9f:73:c0:8b:2e:63:9b:f1:
78:bf:46:14:f5:33:3a:af:8b:18:f1:4e:4c:18:6e:41:46:78:
63:30:79:5e:3a:e0:3d:52:d5:d6:26:bf:d5:6e:a4:d3:2a:44:
a9:c7:56:db:e5:5b:1b:12:cc:6b:be:a3:d1:40:a6:17:27:48:
71:f8:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:19 2025 by rpki-client