Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: ht57LWBtn0x/xMiokwJIctywZJVM5T32hmBE+ADCK2Q=
Subject key identifier: 5F:02:27:D9:A7:33:CE:D1:A4:04:59:91:8D:8B:03:69:2B:44:77:02
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 0194BD17B504C8C78E0B8CB287AEB4E0AD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: oeXvGB5CLlRlU21rxCSDyBNlmjLJyNBvCdTwBfn97Y0=)
3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b5:04:c8:c7:8e:0b:8c:b2:87:ae:b4:e0:ad:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=5f0227d9a733ced1a40459918d8b03692b447702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:07:6c:76:a1:e8:ab:dd:96:e2:39:bb:24:
02:da:f4:f5:65:56:3c:ba:70:63:a0:0f:c5:01:a0:
ef:66:3d:87:e7:15:fd:70:8f:13:25:4e:57:19:8e:
42:8e:d7:1e:d3:cd:0f:1c:3a:e9:b4:77:30:7e:55:
65:58:87:19:41:ea:b3:4f:cf:f8:15:1d:4a:1a:9e:
03:75:d5:5e:00:5a:05:65:4d:18:d4:d2:f9:d1:36:
35:4c:aa:2d:9a:e4:d4:d6:d6:fe:fe:c2:d5:48:6d:
1a:a2:be:69:61:35:54:52:d2:0c:a2:9e:76:18:c1:
4b:16:76:23:aa:87:10:77:50:6e:1a:f6:36:01:a6:
4b:01:f6:d8:2b:b1:38:d9:88:30:e7:47:eb:6d:06:
43:d5:1e:78:21:dc:06:e1:1b:94:b6:b2:31:b4:e6:
8e:8f:e2:0b:e1:47:79:54:ee:43:53:d9:07:59:47:
06:fe:6e:6e:bf:29:98:f8:50:22:09:ae:ec:0b:b6:
f3:34:a5:e2:ab:e1:6b:4d:c4:d9:b7:22:03:73:68:
b7:63:af:14:74:2c:fc:63:3e:a7:3b:f0:d8:ec:4a:
34:e6:8a:db:ac:ba:83:07:21:94:d5:ac:d4:84:68:
91:5a:42:34:04:3e:ad:62:a5:07:4b:95:b9:f1:d5:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:02:27:D9:A7:33:CE:D1:A4:04:59:91:8D:8B:03:69:2B:44:77:02
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fc:9f:de:17:e9:0e:63:fd:22:64:42:db:f9:e9:31:ea:99:
2b:8d:c5:77:86:cf:16:97:e8:52:94:e8:09:79:32:63:ca:59:
cf:ed:03:30:df:9b:2c:d7:c8:86:c0:99:6d:a6:10:41:2e:1c:
88:b8:dc:5a:6f:7c:5e:ed:40:45:ea:b4:67:a8:5c:8d:ad:53:
28:de:db:c8:e9:e8:8f:15:f0:02:d8:62:22:c7:cf:0d:c5:2f:
da:c4:9d:fa:c6:ea:6e:62:13:e1:eb:29:f6:d6:b4:6f:89:b7:
d6:48:a2:d4:cf:31:71:e8:f8:50:42:dd:76:80:54:6f:10:66:
5f:48:7b:7d:fc:7f:9d:0c:1f:21:67:7e:02:ff:f5:f6:8d:73:
5c:24:4d:c8:1e:63:d8:ae:d0:45:e7:16:f5:ba:18:20:71:13:
1a:f6:6d:bc:d6:a5:0d:ad:91:a9:52:ab:c1:b3:fb:f2:4b:2d:
61:96:c7:3c:24:32:03:0e:5e:44:01:6a:1d:e0:70:50:b6:1d:
00:5b:b0:3d:be:c9:69:f2:d7:3f:68:99:57:79:3c:ec:a3:7c:
bc:32:8b:1b:aa:ef:7d:d7:e0:9b:82:a5:24:37:ed:2a:cc:3b:
39:f3:85:98:29:1a:2c:00:2b:bf:1c:dd:8c:c7:28:55:4c:1b:
6a:3a:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:59 2025 by rpki-client