Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: li2nU6c/hXLrRKkmhnTWc0SYYKlt1VWhhyw2J3DjC28=
Subject key identifier: FF:50:3D:28:F6:15:15:B6:17:0C:52:CA:78:E3:09:41:81:2C:19:BF
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 0194BD174CAFF8B708EFA6F3C7E27933FAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: VkYIik8QwDYmM/p4TBdkK0cd8l5meaAi0N8C5NyKD3A=)
3: peuDJmf6zM6U61VIEEyh_v80gok.roa (hash: Wogbvdr+avtRUDbVrcdv31PQBFMPbgQzhKkNxPsoSfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4c:af:f8:b7:08:ef:a6:f3:c7:e2:79:33:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=ff503d28f61515b6170c52ca78e30941812c19bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:66:1c:55:28:fc:5a:2a:a5:f3:bb:ba:1a:
24:8f:47:c4:37:7f:c0:64:0e:cc:19:fa:eb:fa:f0:
ac:0c:cd:3b:42:b8:e3:c0:e2:39:6d:06:74:ce:8a:
26:d6:72:f0:05:ef:79:cb:78:3b:98:e6:de:f1:75:
f5:2d:4d:33:fc:d0:ff:8c:6d:3b:5e:7c:c7:43:2e:
44:41:f3:1e:c0:75:37:3d:5e:62:c8:ea:19:94:72:
b0:43:a3:90:33:89:19:9c:cc:6a:26:72:d7:38:3b:
3f:6b:a9:d4:e2:f1:66:3e:3b:a7:18:00:ed:9d:be:
3f:6d:2b:52:c9:a6:7b:3c:c0:37:0d:f9:c2:58:21:
cd:3a:ed:cd:6d:6b:05:83:33:3a:bd:bf:b1:fa:9a:
41:df:d2:ba:f4:24:69:06:91:dd:bb:07:9d:6a:a7:
f6:7a:50:bd:0f:f6:db:df:fb:70:62:96:1d:e0:e1:
4d:12:a4:3f:4f:ef:45:b4:e2:6b:3c:d0:2b:84:ea:
da:17:98:fc:f5:20:5f:80:a1:ca:c3:dd:5a:d8:26:
13:d1:d7:62:5f:20:f9:63:37:b1:1d:0f:cf:a4:71:
ea:4e:e3:db:35:90:5a:8f:ce:6b:cf:45:dc:24:fc:
ae:f0:17:e0:37:09:99:ed:e0:df:68:d9:cd:58:5c:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:3D:28:F6:15:15:B6:17:0C:52:CA:78:E3:09:41:81:2C:19:BF
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:07:4a:64:ab:cd:34:f2:7c:9a:d4:ec:d3:32:8a:27:f0:2a:
2d:f5:5b:67:d3:56:07:60:c3:7f:6b:06:b0:52:e2:73:de:03:
f6:47:65:08:12:6e:cd:c9:54:87:52:0c:75:f2:97:a0:b2:9e:
d4:ef:d5:25:81:8e:4d:ac:0f:38:09:3a:3c:cf:99:bc:46:15:
75:43:eb:86:b6:fc:7f:59:a3:7a:28:0a:2e:c9:ed:13:02:65:
1d:13:d8:7a:4c:87:41:b9:fc:08:15:fa:22:0a:48:22:c3:29:
fe:9f:71:0e:9e:42:47:7a:2e:a1:c3:e5:fa:41:2a:39:7c:05:
30:ea:46:6e:f1:40:9c:dc:11:91:09:81:4a:28:4c:ce:cd:e0:
a0:fb:22:50:0b:65:fd:68:25:6c:a1:a7:97:20:b1:ca:46:25:
69:ef:b9:79:38:f9:bd:7b:65:58:9a:81:05:4d:e7:58:ce:46:
97:99:e1:89:34:32:68:6b:cb:fb:67:dd:ee:ea:7b:cb:a6:22:
59:79:ee:6d:5c:f5:5a:c9:de:f8:f3:29:ba:4e:5a:68:a4:83:
e7:45:67:1a:6d:67:0e:78:23:7f:ac:0d:23:13:b1:39:b2:ee:
cc:4b:eb:42:b5:1e:b3:38:f2:48:cd:57:45:10:47:56:9f:f3:
13:1f:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:24 2025 by rpki-client