Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: Mzzh3ZBTQgPX6vYGyPk6VZ3faKIgwQDt1Ptsw9ZZ31I=
Subject key identifier: F7:57:7B:69:54:9E:12:65:9E:BF:C1:35:56:7A:0F:36:AD:0D:4E:6E
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 0194BC3CA0BAA43211C3A81AC07E6771761D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: 3Cpp+mWWQcpLbkyH/oHBRSwa5cNiPMHgrhsPb2uWiGg=)
2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a0:ba:a4:32:11:c3:a8:1a:c0:7e:67:71:76:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=f7577b69549e12659ebfc135567a0f36ad0d4e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:f6:30:de:a9:80:d1:b5:08:10:18:52:d0:
5f:8e:af:55:c5:9d:ac:37:ec:7e:72:15:62:52:bc:
cf:91:8c:8f:f8:9c:b8:6c:19:6b:dd:e2:bf:52:6e:
b6:94:d1:95:50:05:57:87:1b:87:ea:8d:ea:76:2a:
85:18:29:66:7a:75:92:13:f0:79:f5:20:3f:84:54:
47:c3:cd:11:a6:ee:1c:63:96:2e:c6:43:89:2b:c7:
0b:3e:ae:24:41:92:74:c3:b9:b5:d0:4d:6e:2f:6a:
5a:4d:19:59:d4:dc:db:45:25:69:04:08:5b:65:9c:
06:d1:80:79:39:c4:94:5c:b8:c6:0c:b9:3b:60:f6:
67:64:98:07:2d:16:20:13:25:68:3c:67:e0:19:f0:
ea:d9:f3:4c:30:4f:1f:76:d9:c4:d8:e3:fe:31:b1:
24:31:f4:83:b0:09:30:2c:2c:22:15:0f:84:bc:bb:
e6:03:65:41:88:3f:00:11:a0:ec:e7:1b:e0:df:67:
d0:7b:ad:bb:a0:0d:f7:3d:08:d2:0f:6e:b1:28:58:
3d:a4:9c:00:ad:7a:11:2e:73:a4:a0:06:4d:90:e3:
4f:c0:6a:61:af:c3:59:6b:0f:f5:09:36:4f:c7:97:
ca:33:07:f1:2d:45:15:d2:ca:ea:3d:b1:ab:54:7f:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:7B:69:54:9E:12:65:9E:BF:C1:35:56:7A:0F:36:AD:0D:4E:6E
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9f:e7:a9:25:c1:7d:72:95:d1:f2:17:ef:e1:4b:a3:08:ea:
31:a7:0a:fa:db:5e:ef:92:9b:b5:8c:4f:d6:e6:5b:e9:8d:da:
82:88:4c:7b:02:cf:ee:69:31:9f:37:81:d5:22:c3:52:e7:3a:
a7:49:fc:8e:09:ff:09:d6:03:9a:a9:54:0a:a4:3f:b4:55:64:
05:9d:51:28:8f:05:4f:02:9b:7d:31:8b:a1:30:0e:ad:56:5c:
ae:a5:98:4a:56:50:80:69:48:6f:70:82:7c:8c:32:da:93:bc:
81:47:52:d5:66:91:e9:de:8c:5c:a0:aa:49:9c:be:ac:b0:2b:
b2:4c:e8:47:86:10:25:92:f9:1d:93:3a:6e:a7:24:91:af:9e:
69:56:a1:22:44:5d:bd:e2:d8:d1:f4:cd:ff:39:7e:e4:60:3e:
e0:37:ed:86:d0:33:c5:4b:53:99:36:24:4a:3d:fc:2f:4e:95:
05:23:7a:6a:ae:fd:81:59:5d:97:e1:7b:2f:43:7d:f1:2b:7c:
03:2f:d7:dd:00:0d:3a:8b:5b:ce:3f:4e:8d:70:78:1e:5e:39:
8a:5a:68:76:24:04:db:ca:fe:ea:51:78:d9:32:46:83:ac:59:
a2:a5:3d:01:db:ea:37:00:c2:9a:84:37:f8:61:f2:6a:ee:ba:
79:c3:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:39:57 2025 by rpki-client