Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
File: _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json)
Hash identifier: nm950YW3/UHpq3jfxxYPO1epatP7JyzwbMhnqMMiLpI=
Subject key identifier: D1:A2:81:AE:29:09:F9:2F:7D:05:1F:74:88:27:3B:92:83:03:1D:95
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 0194BCAA20B8DEE671B67E89402558A11337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (hash: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=)
2: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: IYh/qR71mN4/oHuRvtnV4OHR1UPj7umM4Bss0rtFWZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:20:b8:de:e6:71:b6:7e:89:40:25:58:a1:13:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=d1a281ae2909f92f7d051f7488273b9283031d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:f7:12:83:fc:06:e7:b9:cc:d4:b0:3f:d8:
44:cc:87:d9:63:6b:b1:8d:90:ac:bf:8d:45:21:88:
a3:78:b6:bc:21:f8:ff:a0:b2:99:e2:8b:78:0f:b1:
f0:44:24:d7:ae:d9:dd:db:66:28:53:65:ef:cc:1d:
59:9e:1f:be:7d:6f:00:de:cc:52:4a:f1:76:29:20:
95:08:5d:75:3c:2c:cb:ed:af:d5:f6:0a:59:40:95:
89:39:dc:97:07:b6:65:d2:00:ab:7e:8a:d2:fa:2f:
b7:c3:48:8a:d4:75:28:59:ee:36:19:66:fd:85:fe:
cd:72:c9:ba:2f:e3:7f:41:76:93:53:1a:29:9c:53:
13:f3:3c:ff:d5:43:20:b6:68:e9:02:ca:cf:33:4b:
dc:75:44:b8:47:2e:dd:26:1b:4a:32:6f:be:1c:db:
94:0f:9a:51:d2:a6:3d:ea:a3:f1:df:41:f7:58:54:
c8:21:37:bd:55:21:f0:c1:d8:6f:cd:49:20:44:0e:
97:de:e5:f8:dc:35:11:d9:40:01:1e:7c:83:9d:cb:
49:cd:6c:88:fb:1b:2d:e7:e2:21:14:71:43:94:99:
b2:8b:e1:33:e2:f6:dc:2f:64:3f:1d:f8:17:14:15:
4e:02:99:57:c7:02:6a:41:00:b3:56:b8:47:b5:a4:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:81:AE:29:09:F9:2F:7D:05:1F:74:88:27:3B:92:83:03:1D:95
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ad:43:aa:cf:34:5c:09:8e:4b:66:88:72:c1:ac:e4:ed:66:
16:c9:65:09:e1:5f:dd:ba:ef:31:ad:5c:9a:c7:c3:5f:ca:9f:
d1:cc:3c:83:4d:4b:63:7d:b4:bc:46:ef:c1:de:99:37:ac:8d:
98:8b:43:7d:95:3e:d5:a3:c5:cd:de:dc:86:0a:d2:c1:3a:af:
f2:55:8b:6e:8e:db:23:ce:2f:d2:69:ba:41:7c:9e:0e:85:87:
a0:6b:e0:f4:03:c5:08:b4:4b:90:3a:de:85:09:a7:85:ec:09:
6c:0d:ae:fd:77:25:e8:1a:ab:ba:b0:e3:87:a6:d9:dc:74:47:
60:b7:2d:fa:6a:ae:4d:40:e3:0f:7f:8e:97:ee:2d:eb:1b:d7:
e0:c7:00:ee:b8:16:bb:98:7e:75:dd:dd:c7:a5:95:8a:73:34:
c0:c8:7a:e4:06:e4:0a:bc:7e:72:3c:7f:84:bd:66:ab:f5:4c:
92:56:32:cc:da:5c:3b:73:8a:68:fc:06:b4:33:29:48:96:2c:
60:a0:57:b4:f9:97:6e:0c:28:7b:b2:f1:6b:6d:ce:00:e4:2c:
08:9c:c1:5f:65:da:f7:94:1f:f5:e2:82:80:c1:d2:56:00:e1:
40:a0:ef:c2:7e:43:f3:a4:06:ad:f3:cc:f5:d1:dd:60:10:42:
c8:77:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client