Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: EmVdY0qxEBJ/4gDIk8vGSEL99qSbXLsM618gsIsNpiQ=
Subject key identifier: CD:98:40:0C:73:26:90:06:90:F9:91:4F:72:C8:9A:9E:A1:65:81:D4
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 0194BC72AA565C4CC2B0A41917BE2FCF8E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: idJ2BtQfMEn2b+bpIOqjfKo338zjMGAve4exjYLNzes=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:aa:56:5c:4c:c2:b0:a4:19:17:be:2f:cf:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=cd98400c7326900690f9914f72c89a9ea16581d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:b7:3a:42:ae:b1:bd:4d:ec:bf:c0:7a:29:
fc:03:be:0e:9d:2a:58:79:e2:b5:fd:cc:fd:7e:43:
51:95:cc:72:16:c5:11:7d:e0:eb:af:75:f6:6d:19:
0a:cd:a5:b7:63:a0:c9:27:e8:7d:18:94:1c:8e:5b:
70:ef:a2:0b:d7:fd:de:b8:ad:9c:26:bd:a4:65:21:
e9:f7:68:ec:f7:39:87:8e:75:61:d6:00:86:a7:f2:
50:8b:e3:9e:07:e2:66:36:3c:af:ba:b1:c8:0d:aa:
6a:07:4a:42:fb:07:05:20:ab:d4:82:fd:bd:95:ae:
02:bc:eb:3c:fd:80:4a:3b:75:60:85:97:1e:a7:0d:
5d:db:09:9e:f9:ed:bd:11:4e:60:23:c5:38:ac:bd:
db:df:b7:87:83:c0:bd:ae:9e:e5:34:97:fa:10:0d:
e1:65:d1:f4:50:7b:1c:ba:78:dc:cd:2e:94:05:02:
12:1f:67:d2:32:f7:28:5c:c1:22:44:b7:01:6e:e4:
67:81:d5:e4:34:a4:72:71:c2:ee:9e:1a:71:48:00:
8c:cd:88:4f:aa:9a:be:5d:72:9c:19:2e:6a:09:36:
ab:ec:26:14:51:e2:f1:09:b5:c7:b5:75:5d:5e:32:
ed:6e:c6:16:0b:59:b6:ce:38:96:cd:b9:70:a8:9f:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:40:0C:73:26:90:06:90:F9:91:4F:72:C8:9A:9E:A1:65:81:D4
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1e:60:f2:6f:b6:46:ad:55:6e:1e:3c:db:2a:70:66:ad:2e:
2e:0c:bb:66:63:47:b9:69:ca:b2:d5:a2:10:d7:8a:ca:38:68:
6f:ca:26:d4:67:a2:6c:ad:07:a1:4e:18:35:5b:a9:ff:c9:1f:
d9:ec:16:a9:f3:7d:d8:4b:2e:6b:86:fe:b6:4a:00:df:99:51:
4c:44:1c:10:2f:ab:c6:c9:a9:96:f2:c8:f5:78:25:6d:fa:f3:
8e:76:38:36:d9:55:e7:46:50:89:17:71:11:27:d1:e1:0d:5b:
1f:e3:56:05:a8:3f:cc:b4:2e:18:b1:97:44:83:92:69:bc:a1:
44:74:14:3d:47:41:92:44:72:c5:fb:ab:ea:2c:df:a2:be:ef:
49:d4:94:a4:89:c6:f7:b3:ad:39:ff:c5:65:f6:4a:3d:5b:94:
32:1b:77:eb:c5:cf:0a:d1:26:21:91:51:32:64:67:3c:65:d4:
68:9b:b9:f1:31:35:d4:cc:72:13:53:39:66:a4:3b:87:c9:2a:
5a:62:30:be:68:65:8e:55:c7:9c:3a:75:b5:ad:b7:04:eb:4b:
22:d6:e2:e3:07:16:0f:59:57:42:55:64:e7:27:bc:ac:b1:17:
2e:fd:a7:00:48:2d:24:99:13:17:7e:3f:e8:98:a7:8a:a0:8e:
6b:c5:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:43:00 2025 by rpki-client