Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier: 7/GMSSP5SkVafYEeyL80orPTvNlWoLL0XSqMYPEgXAc=
Subject key identifier: 11:4F:66:1A:D0:A7:3C:EB:D6:48:60:A6:48:AE:6D:0C:B4:29:F7:84
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial: 0194BCA995EE540C672C1EC879CDC3475F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: GidUIsh9GB+AQnY1S4H0mKDKMcciM3/bVb5pYPI+mis=)
2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:95:ee:54:0c:67:2c:1e:c8:79:cd:c3:47:5f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=114f661ad0a73cebd64860a648ae6d0cb429f784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:07:87:52:34:a1:57:1d:e1:96:83:66:43:
dc:a1:30:85:67:42:59:79:9e:95:b3:91:c2:c2:42:
f2:7a:3d:aa:14:9c:5b:de:70:18:27:7c:cf:fd:49:
ad:d6:95:95:5e:19:79:07:f9:36:75:3e:19:3a:42:
37:bc:10:0f:e8:6f:23:a5:1c:35:4b:75:e4:d3:6f:
27:41:7f:6f:6d:d2:ba:c8:09:59:f8:ed:15:a9:3d:
77:71:e9:43:98:0a:f9:80:d9:50:9e:83:9d:82:ae:
b4:21:f5:6e:e5:66:e6:80:2b:9c:e8:5c:28:71:9a:
0e:a2:16:28:9f:49:cf:3b:d2:13:27:c0:63:d0:ca:
b3:c3:f3:3d:50:2d:7e:0f:73:14:6a:06:ef:4c:b5:
a2:30:17:03:e0:ff:7d:5e:ac:68:70:c3:20:f1:cb:
32:a7:25:70:5b:ce:1a:6a:dc:0d:e4:2a:06:f7:6b:
51:22:f2:3a:5d:20:a7:92:96:a4:9d:36:c2:fa:bb:
42:ed:a7:8e:07:6a:00:58:55:d7:77:ca:6b:3b:97:
a3:a4:01:f5:a4:ba:52:9f:59:e4:7d:32:a6:c9:e7:
d3:54:00:54:a6:14:47:16:d1:fd:46:94:60:95:8c:
36:cd:38:cf:4a:fb:8f:67:56:87:6e:90:65:d5:36:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4F:66:1A:D0:A7:3C:EB:D6:48:60:A6:48:AE:6D:0C:B4:29:F7:84
X509v3 Authority Key Identifier:
keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8d:fa:28:d8:1e:b4:90:fd:1d:c0:8c:56:af:a4:e5:fb:51:
55:ce:59:aa:d5:b7:d8:ee:bd:7d:87:70:32:e5:d7:bd:5a:ea:
ea:fc:b9:90:19:e7:43:6e:87:9b:ca:d8:3f:58:ca:ff:9c:79:
a9:bc:03:4e:bd:14:2f:b4:8f:0f:00:82:1a:97:eb:60:64:ba:
c8:37:3d:59:23:93:85:0d:7a:92:d8:94:2f:f9:2c:15:ea:da:
f5:74:b5:3e:de:1a:57:dd:92:6f:8f:7f:fa:2f:9e:85:ed:e4:
1c:8b:65:62:52:1b:c1:48:c0:39:0e:74:a7:65:e3:cb:78:09:
da:8e:68:af:6e:86:0e:78:ca:4f:36:a0:90:53:d6:dc:18:83:
43:c2:0d:4d:46:d6:c5:3a:34:67:55:16:a0:62:ce:fe:78:bf:
a1:3c:e8:dc:ce:99:35:b5:c5:eb:e2:a1:80:fb:a0:dd:40:70:
1c:9f:f5:bf:82:d0:ca:e9:9c:f9:9d:cb:94:02:5c:cf:73:ad:
12:ed:f1:da:a4:19:51:67:f8:4e:da:3b:c6:b5:e2:4c:1f:30:
a1:9c:15:2f:0a:86:79:26:aa:18:b4:f3:58:90:bf:8b:c7:a9:
55:25:21:d9:1b:43:84:36:50:b8:32:27:8d:a5:f3:fb:b4:0e:
b9:c5:24:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:24 2025 by rpki-client