Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: jiG2c61Fi0Sk+aOKKCknl6BbAHK3Lg5f0u/r+gA4MPE=
Subject key identifier: 62:0B:35:79:24:E9:D9:B6:24:59:66:62:B8:EC:E8:7D:28:66:AF:D7
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 0194BBCDB5AC9F9475D34DE5245AA48948E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: ZneGwZNtil9rbnGvlqNtCN8zMYeh/sJJeL6tyqk7prw=)
2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b5:ac:9f:94:75:d3:4d:e5:24:5a:a4:89:48:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=620b357924e9d9b624596662b8ece87d2866afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:90:9f:5e:83:8e:89:1c:0d:80:60:d0:96:
db:32:b3:83:52:df:82:b7:47:0e:cc:5f:72:53:9b:
5d:a8:d2:4b:c6:30:11:19:eb:d8:48:a5:4c:95:6f:
98:20:2e:4c:1b:eb:f3:1f:e6:4b:71:11:77:b3:45:
f7:83:7e:dc:1c:22:80:48:00:fa:27:18:1f:26:87:
dd:42:a2:62:ec:ed:81:49:6f:13:56:5a:ef:ef:f2:
2f:b3:94:bc:57:e2:a9:65:8f:f3:d0:41:d0:f4:78:
0a:8b:4b:8d:50:b1:80:d7:d9:0d:cc:d7:f4:ab:91:
ae:3d:14:c9:b0:95:85:70:49:60:42:ba:12:34:f5:
99:4b:4a:8f:b1:3b:2f:31:07:8f:71:31:7c:46:82:
ac:36:59:cf:01:29:7b:f4:fd:44:5c:44:d2:ac:fd:
cf:1b:47:21:82:94:bc:42:70:97:59:59:63:38:bc:
bb:57:a7:6d:ce:f6:64:c2:bb:61:80:e1:cb:f7:d2:
fe:0f:d3:99:11:66:2e:ad:95:68:17:75:b6:e4:b4:
02:9c:6b:e7:d1:36:aa:63:c7:fa:02:c5:22:4a:84:
95:f4:79:44:c3:70:55:7b:2b:66:1b:9a:53:70:f4:
05:7b:20:e1:2d:d5:9d:30:53:be:43:cc:65:95:47:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:35:79:24:E9:D9:B6:24:59:66:62:B8:EC:E8:7D:28:66:AF:D7
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:33:a4:a2:09:9f:eb:af:a8:0b:37:bd:64:44:58:ba:14:49:
3c:77:e3:85:f4:e6:b7:67:9f:85:63:7a:ea:4b:32:7a:55:dc:
39:ea:f3:69:bf:49:2a:71:2b:6b:4e:75:46:24:d0:b3:21:d1:
b9:f2:93:86:19:d1:24:1a:c1:e8:12:1c:c6:fb:de:90:9b:e5:
77:2b:d4:ee:8e:8e:6f:c6:29:18:60:3e:b7:38:55:aa:48:2f:
e6:a4:b3:30:25:ee:21:2a:58:ff:58:61:ac:bb:5b:b0:e1:bf:
cc:4d:bd:75:e9:b7:7a:6a:79:e2:2a:66:85:cf:62:51:7e:6b:
13:0f:5c:16:55:7e:06:07:ea:54:4b:d2:13:3f:e2:74:92:77:
b4:eb:95:9e:9a:a3:bc:9e:b3:fc:54:b4:d7:6f:ef:ba:a5:34:
4a:bd:49:d6:f5:9b:36:cc:da:91:59:73:34:f3:73:cc:9e:0d:
32:da:76:69:41:e1:c3:5c:d0:db:4e:d3:ae:4a:78:6d:ff:7a:
e2:de:2f:d5:26:a4:e3:00:fb:74:47:78:c7:d8:bc:12:a6:25:
68:52:b0:43:62:58:b6:00:01:82:7a:83:c4:15:57:37:45:09:
78:0d:5a:ca:55:68:82:d9:28:90:1a:0a:bd:17:16:92:cb:f5:
37:ed:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:45 2025 by rpki-client