Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: /mV7VcTgxp+/eRBlVN5LpTIsI8dcbLtfhPiDLor4k2E=
Subject key identifier: 97:F1:4C:3E:92:CA:30:E6:6E:1E:C6:00:3D:DB:68:10:6C:76:D6:01
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 0194BD17FD6B0272B700FCECC20C29572FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: 1fA5PORVd3jPdWz7xA5f_vnyxD0.roa (hash: ykI4OL9fWsgYZNYcziWcElBypDNzSjFchoDv23Mnzrs=)
2: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: 4PVxPSYtH3NT6kaAP7/HnEdKEXF9/lO1iuMPWG/WfA0=)
3: uy61Z_8RU66-jPuUHYoqaPIOhik.roa (hash: L9o3XCU/iUGm+BZYXWE1H2NgYx1sjgSieqKtDG+tWqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fd:6b:02:72:b7:00:fc:ec:c2:0c:29:57:2f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=97f14c3e92ca30e66e1ec6003ddb68106c76d601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:e9:4c:22:b3:8d:0d:a6:f3:9b:5c:e8:4e:
55:7e:a4:9b:6f:93:0b:a2:c1:69:cd:cc:e0:19:36:
0d:fe:7a:07:10:1f:d1:2b:87:5e:8c:73:16:b2:d2:
a5:64:a9:aa:f4:c0:f9:97:35:aa:b8:c0:a5:fa:00:
85:97:2b:6e:53:a8:97:5a:68:f9:1c:47:79:96:1c:
6b:6a:95:37:e2:16:f5:4a:6f:e5:f9:48:59:56:42:
ef:bf:ca:ea:1a:a7:ab:08:7b:06:97:85:d8:3e:f8:
51:68:93:4d:53:5e:39:e3:69:9b:d9:f9:70:6e:e6:
a5:86:fc:83:73:da:36:8b:0e:30:b3:33:29:7e:86:
57:f7:7d:7d:ca:8d:a4:4f:64:72:a4:2e:5f:4c:f0:
cd:3b:e4:0d:2e:9f:3a:35:60:14:46:c3:af:ce:42:
c6:fa:b2:f3:94:c3:7e:c3:2c:e1:28:40:be:9a:64:
ed:3a:73:4b:7e:ce:73:af:3f:0f:8c:70:40:9d:14:
38:9c:08:3a:71:bb:44:a3:4a:42:91:11:3e:a1:61:
14:00:8f:6b:76:e7:e5:73:3b:bb:82:53:f1:54:50:
a8:66:f3:88:7e:24:47:60:c0:18:e9:bb:d2:fb:b7:
38:54:50:10:90:91:84:75:4f:e6:28:3f:5d:22:96:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:4C:3E:92:CA:30:E6:6E:1E:C6:00:3D:DB:68:10:6C:76:D6:01
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1d:e4:61:95:8a:3d:e9:ba:0c:ab:5d:66:3c:00:b5:73:09:
f1:47:76:0b:51:6d:49:dc:ab:aa:e4:20:c2:41:af:51:ea:b8:
fc:7e:43:9d:e9:77:d0:b5:d1:8a:b6:f9:f1:eb:0d:61:fb:bf:
85:ec:81:50:59:50:3f:e6:79:12:04:81:47:01:1c:c4:1a:7a:
e3:d2:59:ce:89:97:80:d6:99:97:eb:18:9c:b5:54:71:c5:23:
34:c2:75:06:51:cb:2b:9b:4a:44:cf:2b:2e:73:aa:be:7d:27:
9d:37:a7:9e:bb:45:9c:9c:06:d8:59:a7:69:49:13:ec:70:1c:
9e:d0:be:3d:06:de:49:07:9b:85:11:1f:ad:3a:f9:4f:11:09:
6c:43:07:41:55:fd:e9:00:62:a2:8c:79:61:90:bd:a3:3b:31:
43:71:c7:48:58:a5:f7:1a:63:fb:c7:07:00:01:4c:8b:8e:69:
cb:cb:00:de:21:33:8c:3d:13:9a:59:f7:17:fc:cf:0a:73:a8:
76:17:f3:f7:5c:27:b2:3a:45:5a:d5:b9:eb:24:0d:ac:2d:54:
65:5a:b8:3d:9e:57:45:91:60:f9:8b:69:de:3f:40:f2:a0:09:
ae:d7:de:a9:4c:40:74:8d:c7:7f:c3:3c:dd:e7:07:62:84:d8:
3f:f5:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:34 2025 by rpki-client