Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: ydOE7Pq7yUlYOrSal+CGm4V9JzG34lgfuyjXqzaH48U=
Subject key identifier: 36:FA:0B:48:5F:2E:E7:D9:A9:9F:BE:9A:BA:B0:D3:AA:53:3E:F0:5A
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 0194BC0504B89EE41D2F0EFF1F7135CAC7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: 5PEhmSsylF5Cqau7beHA-5hPtJA.roa (hash: qg7bbX5JQ150gt7VxDeJGfpKO/e8RwLdHWGQ9Drrzh4=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: 3oCaMf6mrSZX4v3J+K4IW9QDrOVXIcM2kCdTEviV9x4=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
6: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
7: bEQstBMsIq-USPnqf3A5IqnOEVs.roa (hash: dlwl7Y9SvRWuBlEJJDLRBkmdTgGXUzcp/rFQfnHi1fE=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:04:b8:9e:e4:1d:2f:0e:ff:1f:71:35:ca:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=36fa0b485f2ee7d9a99fbe9abab0d3aa533ef05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a7:4f:55:ff:31:1a:85:15:2b:cd:91:13:1f:
e0:b0:78:88:64:27:27:29:1c:0f:fc:e5:95:21:77:
43:7d:09:0a:eb:70:5a:05:aa:84:45:35:e4:c5:19:
49:d4:07:f1:e5:c3:c1:7d:df:b2:f9:e7:59:84:eb:
4e:fe:3d:c7:28:a8:0a:6a:6c:95:cb:37:66:30:0d:
d3:c1:62:1f:bb:55:db:31:83:1f:23:17:9c:d2:59:
2c:1f:21:5d:f4:98:d9:0d:cb:4e:7c:6c:dd:c6:42:
00:bb:e3:c5:bc:7f:56:e7:fa:b0:02:28:5c:12:5d:
5b:67:87:c6:a4:3a:6d:30:cc:6a:6b:ec:85:c5:3e:
7f:33:6c:0a:09:be:ed:b1:6e:f3:b5:7c:07:82:7a:
9f:48:69:b9:15:85:1e:8f:08:ed:41:68:03:c4:49:
77:f9:da:c2:2a:ca:31:63:f1:1c:b2:f5:4f:0f:a2:
9a:3b:09:b8:28:30:3e:6c:3e:64:f8:11:24:59:ed:
3c:65:0b:9f:51:59:8f:3c:55:8a:31:62:34:08:4d:
da:fc:25:a5:37:92:78:2f:d5:1d:26:63:10:c7:11:
4a:44:a6:a5:10:a4:34:22:3f:89:b2:bb:06:b3:38:
5b:a9:42:7f:52:6b:f4:a2:a2:ab:4d:e8:df:f9:52:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FA:0B:48:5F:2E:E7:D9:A9:9F:BE:9A:BA:B0:D3:AA:53:3E:F0:5A
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:56:96:d0:4b:84:27:3f:43:88:b7:43:17:2d:dc:48:82:
31:b8:5f:77:a9:32:a9:f9:50:8d:02:da:3c:7e:9e:e7:95:a6:
23:67:f8:61:ce:01:50:a3:24:60:5e:d3:2a:00:96:4a:46:18:
a0:58:1e:43:c8:85:97:d5:1d:fe:3e:20:78:22:90:97:d5:06:
d8:93:2a:b7:ef:30:9d:3b:32:70:79:02:34:85:90:e1:19:98:
ff:c3:93:fb:5d:ee:56:3f:9d:75:df:93:a9:75:bd:c5:a9:a9:
a9:d7:ae:4d:c2:a1:94:51:75:9f:f0:f0:30:d0:96:53:a3:97:
58:51:87:31:5d:92:b4:a5:40:e6:3b:32:59:57:c3:91:31:4d:
84:ca:01:85:d6:d6:34:f4:6b:2a:c2:e1:14:22:d1:dd:30:54:
22:44:a6:ce:18:c9:28:dc:c8:b1:3c:ea:1c:e7:64:f2:ca:0a:
cf:a1:dc:f3:96:24:38:36:0c:28:87:e5:43:53:8e:8c:46:1e:
96:b9:53:aa:db:c1:86:bf:3b:77:ba:dc:ed:f3:42:38:46:5e:
ac:bf:9f:a1:29:8e:31:37:7a:79:7d:68:5c:fa:7a:5e:2d:c0:
b7:32:48:c6:80:9e:5e:84:f1:0e:21:13:e4:02:ea:de:c4:18:
98:6d:05:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:11 2025 by rpki-client