Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: viGcFeakdiguWCgQfEsOqkYBz6ZOQPL0Z7ThOvPMKtw=
Subject key identifier: F3:80:66:2A:C7:14:AB:CB:40:22:23:4C:95:1B:DC:2C:8A:BD:FF:6E
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 0194BCA9C21EC0C568E5BA84EEDB7A744AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: 5Dec9EC/pX8G1RSwRBakPsCtrdwOEQ4//3RXG+nAp18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:1e:c0:c5:68:e5:ba:84:ee:db:7a:74:4a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=f380662ac714abcb4022234c951bdc2c8abdff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:52:aa:f8:30:e1:bd:db:7d:a4:a0:18:2c:
71:e9:a3:ab:67:03:6b:2e:7e:2e:67:bd:9a:3c:4a:
85:a2:ff:de:f0:42:38:f1:9a:82:91:c5:94:c1:07:
e7:b1:4d:2b:b4:5c:8e:f8:7c:71:e6:f4:db:47:a7:
1f:11:6b:17:0d:f7:76:6e:64:f5:62:82:b5:cb:a9:
31:56:29:aa:91:9f:57:ac:ae:28:a5:8f:b4:fa:a5:
29:0f:80:c2:27:d2:90:9c:e7:e2:16:78:48:35:8c:
19:7d:22:92:4b:98:a9:51:94:6e:bc:bf:58:90:08:
35:c1:51:84:a3:01:ac:46:c5:d3:d0:e5:30:39:4d:
3a:a0:64:9a:73:15:9b:19:79:9b:19:7e:6e:88:44:
72:66:87:c2:24:d4:bd:ea:5b:08:64:4e:d8:b2:56:
5f:8c:db:57:cb:d4:d1:6e:5e:64:a4:65:a7:68:71:
c4:3f:bd:05:8a:5e:60:bd:48:14:ce:db:98:72:75:
95:db:3a:83:73:8f:eb:2d:5a:13:87:89:13:c0:7f:
16:e6:9e:cb:5f:1b:46:c3:47:f1:ab:a9:02:50:1d:
63:66:c5:d8:59:82:7a:70:0e:e7:c5:4f:2e:cf:c2:
a8:e7:cc:fc:eb:f0:97:1a:3c:cd:69:09:c0:a3:30:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:66:2A:C7:14:AB:CB:40:22:23:4C:95:1B:DC:2C:8A:BD:FF:6E
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:35:9b:56:c9:4f:3e:13:12:62:29:a5:95:d6:bc:26:47:dc:
b8:9b:cb:42:48:a8:c7:c5:01:f5:53:ce:dd:92:67:6f:9f:df:
1d:47:dd:e6:a2:e9:c4:d7:8c:be:51:9a:9a:3a:79:af:c4:cb:
fe:c4:6e:25:65:26:95:c2:9c:b5:6c:9e:94:ab:7e:6c:ee:66:
a4:e7:b4:f1:a5:d5:8c:bb:9c:73:1e:0d:6b:60:52:fe:fb:40:
6b:3c:cf:44:8c:33:42:5c:06:7c:4d:97:e2:80:ea:cf:b3:bb:
74:14:35:8f:2c:90:bd:79:02:b2:56:c4:1c:0d:49:22:57:7a:
63:18:b6:81:bd:81:b8:13:71:9d:54:31:a1:41:93:08:6a:54:
fe:de:43:b1:84:7c:c4:a9:50:59:58:91:ad:12:2e:c2:b8:1d:
fc:32:61:a8:4d:d7:da:4e:9f:22:80:0b:f9:9d:b0:62:b9:8b:
04:dd:6d:4a:3a:17:e9:57:bf:10:98:81:55:31:7d:ad:e4:d9:
71:be:89:67:04:a2:b5:10:33:c8:9a:65:d0:e9:d0:7a:ab:0b:
ee:90:97:6e:e4:c7:d3:8f:a8:0f:0d:11:51:45:f9:68:08:e7:
a5:56:8f:de:82:47:a8:d9:31:92:0d:e0:25:08:0c:dc:9e:58:
5a:1a:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:06 2025 by rpki-client