Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: pkud33k/UNMms7VjCMqqyMvi3DXyHyjKFGStgkRa2KM=
Subject key identifier: 01:54:EF:ED:BF:78:2C:92:A3:B5:0F:3E:89:B3:E9:CC:5F:5D:C3:46
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 0194BD859E1AB6E5E5F1B796940ECE41DFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: ULlhTI6IZbudbDUHHyxPRU5wpa+bvk6ZIlmxStdg7v4=)
2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:1a:b6:e5:e5:f1:b7:96:94:0e:ce:41:df:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=0154efedbf782c92a3b50f3e89b3e9cc5f5dc346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:64:8a:bc:1a:a1:bd:f4:e8:dd:e9:5d:be:
b6:16:cc:0b:e7:52:fe:37:d5:7a:d4:0f:0d:cb:52:
71:5c:16:71:7f:a3:08:f6:5b:14:33:59:aa:cf:7a:
9e:37:8a:a0:ba:3e:b7:ee:e7:ee:3c:9e:66:a2:fd:
85:19:bd:dd:ff:60:b1:7a:8c:39:fc:1a:a6:68:a1:
e2:cb:bc:53:0f:95:22:1a:04:b7:f9:92:ab:5d:c1:
71:77:af:21:65:b6:c8:63:fa:a3:fa:d3:cb:f3:0d:
c2:04:99:8f:43:64:d1:8d:39:d3:d7:34:7d:50:7b:
d4:f9:f4:a2:00:ce:51:b2:14:37:c6:49:6e:32:9a:
44:91:68:85:9d:22:7c:bd:5e:62:cd:8c:ea:d3:5e:
6b:a1:77:4c:4f:0b:af:6f:b6:5e:e7:5b:c0:18:45:
57:25:01:5b:2a:14:27:8d:81:60:e6:9f:9e:bc:79:
a0:e6:bd:ec:0c:71:62:e7:01:53:e3:a8:a2:e3:0a:
5e:8a:5c:2d:c6:eb:1e:bd:b2:5d:1f:4c:ae:7e:4a:
cb:ba:c0:dc:40:87:26:d3:5b:5c:7f:8b:45:26:b8:
6c:a1:15:01:c1:a6:cf:27:e1:df:37:2c:3d:e3:82:
83:9d:56:94:2a:52:01:89:16:32:c5:3f:ec:c8:16:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:54:EF:ED:BF:78:2C:92:A3:B5:0F:3E:89:B3:E9:CC:5F:5D:C3:46
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:60:e8:12:7a:bf:9a:4b:e6:36:9b:69:5c:5e:08:f9:bb:46:
7f:52:99:2c:a7:dd:98:7e:87:26:d9:42:86:c8:c3:07:40:7d:
2d:2e:69:be:d3:4c:35:88:c9:77:c9:b0:17:45:78:47:11:46:
d3:34:42:56:34:09:72:8d:12:19:bd:91:99:1c:72:95:7a:a9:
10:07:2f:99:a0:2c:c7:18:22:46:15:3a:ef:13:c8:64:7f:ea:
8b:ef:dc:3d:a8:f2:b8:df:ea:c3:e8:c4:a0:bc:cc:63:28:b6:
3e:22:d2:71:47:ed:85:79:d6:6b:4a:5c:11:54:48:d6:0d:8b:
4f:77:39:5d:ef:61:a4:5b:1e:f1:12:f2:fb:b5:bc:96:02:5c:
1b:dd:74:bf:66:37:18:60:ad:5b:8d:71:d1:b6:61:40:19:c4:
3c:3a:de:22:f4:d9:b8:0a:66:b0:87:8d:55:fd:9a:42:1b:1e:
ed:a3:62:8f:bc:62:2f:bd:5f:8a:ba:31:e7:80:a2:f9:79:39:
68:c3:1a:b7:74:bb:e3:5a:dc:4c:3e:d7:0e:df:9a:0e:e8:77:
ef:73:3a:8e:b4:10:b7:f4:52:b3:f3:7b:ba:91:df:c1:79:a0:
8b:e0:3e:bb:f4:1e:56:c2:44:a5:34:f6:a4:75:98:fb:67:4f:
d1:21:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:17 2025 by rpki-client