Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: IG+StNYl0zZanqjRx1MhH2PiK9sDDbfq6vtlxH4c+Hs=
Subject key identifier: D8:EA:4A:CB:F5:7B:8E:41:98:95:14:DE:4A:3E:5B:48:3E:21:14:43
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 0194BD4EA9912BFD5BD26397996771A4B24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: /jFl8nFGFcQP5uKelhGs5gIfKrYr564CRqZ72F1RG3I=)
2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a9:91:2b:fd:5b:d2:63:97:99:67:71:a4:b2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=d8ea4acbf57b8e41989514de4a3e5b483e211443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:3d:2a:21:11:4e:91:9e:77:4f:86:e6:0b:
6c:83:ec:67:41:63:7a:8d:85:6b:91:cf:b0:62:1c:
f3:5f:32:d3:00:19:12:74:b0:74:26:29:78:17:93:
c0:92:9d:de:b6:80:10:ef:2b:61:c2:cc:ba:36:b1:
7c:00:94:cb:df:37:b2:86:83:26:39:d2:0c:10:50:
14:b5:01:94:7b:78:80:a1:bd:72:7c:68:a5:45:96:
12:26:46:df:7e:ad:34:98:34:af:92:c0:8c:24:bb:
4e:7e:31:97:39:53:0a:3e:ec:e9:a2:5c:c2:28:c8:
bf:bf:77:40:ba:5d:7b:de:27:98:2f:f7:82:3e:9f:
2e:46:1e:79:b9:19:af:d7:7d:3a:a9:0c:38:2d:07:
d5:a6:4c:65:7c:0c:9f:41:b4:6b:1a:99:ac:88:6d:
d9:84:69:a4:35:fe:5d:99:e4:db:7c:e2:2e:51:b9:
ae:42:e8:bc:f7:1e:fa:2e:d0:01:bb:c9:08:25:94:
99:6d:93:a9:7b:0d:7a:57:06:cb:8c:fb:9a:a4:a9:
b5:68:53:66:68:4e:1f:ea:8c:d3:0c:aa:35:85:e9:
0c:29:e9:26:38:aa:41:31:fc:48:c6:54:40:d1:9b:
7e:76:ea:76:82:62:0f:4e:2b:9b:6b:5e:e2:d4:a0:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EA:4A:CB:F5:7B:8E:41:98:95:14:DE:4A:3E:5B:48:3E:21:14:43
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c5:6b:2f:32:9a:4a:58:c2:57:5b:5d:1a:7a:9f:ea:9d:bf:
e8:60:37:33:47:81:31:f2:6e:d1:07:73:e4:a5:c5:ba:77:02:
01:e8:1c:97:ce:0b:95:17:9e:89:15:15:a1:e8:f1:68:8e:da:
26:ae:77:5e:46:d1:24:4b:40:00:b6:37:a4:f5:9c:21:21:49:
b5:f7:77:3a:1c:e5:88:55:1b:65:44:8c:6d:32:f5:d4:d0:e7:
5a:a3:1d:7a:7a:ef:c5:fb:5f:95:b7:79:02:fb:2f:63:a6:6f:
1a:d2:43:2b:a5:14:93:4e:8a:e8:57:7b:9b:d0:74:00:d0:87:
de:c7:13:4f:c2:be:4d:ce:6d:26:ea:79:a7:77:b1:39:65:4e:
f1:57:a0:4d:83:cb:a2:b6:f5:59:63:3e:28:90:49:cd:8c:ad:
be:d9:3f:2a:e6:d0:35:c1:3b:a4:9e:7a:47:dc:7a:6f:cf:f6:
c7:9a:25:4d:1c:c3:df:cb:ed:06:dd:c0:92:3b:e8:18:c2:e3:
31:78:f9:b7:f6:2d:65:01:63:e4:07:9a:e9:ec:1f:00:ff:c1:
e2:e2:05:45:c5:b8:f6:5d:32:8a:87:43:82:cc:20:31:ea:1b:
f7:43:03:34:9c:5d:d0:d0:25:cf:85:be:41:18:d1:04:42:4e:
99:62:52:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:55 2025 by rpki-client