Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: TyMIMmxuguM6ODSdeQtObfUHYc/cmmPo+9DBHp2M3Cg=
Subject key identifier: 21:16:0B:A1:70:ED:65:F9:D3:E1:E7:ED:93:59:AC:3B:4C:9E:A4:D9
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 0194BD17860F5F7F434328AB6A4D2176B607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: nFDAV9cSz61CIDqYUTBve5cCLxFhOmXMsBEiq4F5yZQ=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:86:0f:5f:7f:43:43:28:ab:6a:4d:21:76:b6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=21160ba170ed65f9d3e1e7ed9359ac3b4c9ea4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:32:0b:27:3e:02:af:2d:3e:3f:df:22:5f:
02:39:0e:9f:94:9b:ee:6a:dc:94:cc:db:2b:ec:96:
38:f6:8c:04:05:3b:75:35:ad:ce:f0:be:5a:52:f8:
5b:99:16:19:a0:e6:62:70:90:6d:7b:94:11:86:00:
e0:5d:41:5d:6f:d8:e0:6c:56:fe:e8:87:3a:92:46:
c7:bb:bd:37:ef:f7:24:2b:a4:87:3f:27:f9:fb:23:
4b:60:a3:ba:f0:fe:a3:32:12:9a:48:44:24:b5:69:
04:96:31:b2:d1:f1:43:ee:1a:d1:d2:a5:ac:a2:03:
b3:aa:07:26:6f:68:81:33:a9:9c:09:1a:de:7b:b6:
de:ab:00:bb:0c:10:b8:d4:18:a8:49:fc:48:11:7b:
65:a2:43:de:42:91:42:bc:78:6b:be:63:40:fa:26:
cb:b4:2f:31:c3:76:6e:c9:10:19:b2:38:0b:8e:f6:
d5:41:3b:79:b2:0b:b7:91:fa:69:bf:42:b7:0c:2b:
43:a8:9c:9b:20:9b:24:81:02:bf:56:e4:e8:2a:85:
be:c5:0a:48:28:f5:19:14:fa:92:22:36:a8:56:da:
a6:58:f9:f1:40:f3:10:2b:58:3a:64:28:a3:00:54:
08:c2:ca:0d:61:0c:be:d3:38:0f:46:7c:d7:6b:5e:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:16:0B:A1:70:ED:65:F9:D3:E1:E7:ED:93:59:AC:3B:4C:9E:A4:D9
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4e:bb:45:99:af:aa:fe:f5:0e:01:48:d4:b5:64:b7:77:63:
34:df:b2:5d:20:11:3a:8b:f1:f3:15:47:03:36:57:ed:e5:26:
af:f1:12:09:8b:32:0b:48:ee:5f:6c:3a:96:00:38:f0:1b:d1:
f0:af:8d:5e:66:38:f5:45:22:ce:d5:be:00:9d:98:07:13:3f:
02:d5:50:15:e8:90:92:57:e7:b6:b6:f5:16:ee:c9:46:39:da:
9f:57:2f:c8:b2:f9:28:a5:1d:98:95:c2:18:d5:65:2c:75:11:
f7:ad:3a:5b:8b:05:0e:ab:32:ff:84:3e:d8:d3:7b:22:cf:8d:
78:5e:61:18:32:09:80:bd:56:81:58:4e:52:b2:de:c8:ac:51:
c1:9e:a2:a6:1c:4e:e5:48:0b:de:e3:f8:6f:7d:cc:36:02:9c:
38:16:b7:64:2b:10:c1:2c:62:fe:1c:cf:1d:d6:ec:44:7f:98:
10:09:a1:ae:d7:7d:eb:91:fb:24:7a:e4:f6:31:42:af:52:a8:
b0:00:a6:30:71:9f:bb:b1:8f:85:37:12:b9:dd:d1:2c:e4:93:
5e:1c:90:70:c4:43:0b:fe:a0:55:90:c0:f0:76:fa:cc:2e:ff:
f3:ff:d0:ec:d0:af:5c:bd:d9:26:e7:de:5a:44:3b:42:62:5f:
4f:37:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:45 2025 by rpki-client