Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: dgkUjqENpa7PiJIjOXVjShDzn5ZgpZk/Y7T9f6qToCs=
Subject key identifier: B8:67:9C:2E:BC:23:E6:C8:49:58:73:90:0F:27:2C:5D:E3:47:56:B7
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 0194BCE09D052B4A1109CC4F8C8E52EEF9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: N1I06m302uFDCN7DzjL3PWS8ne1TNBYc76y1HUCDB6A=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9d:05:2b:4a:11:09:cc:4f:8c:8e:52:ee:f9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=b8679c2ebc23e6c8495873900f272c5de34756b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:a3:be:99:bc:a0:da:d2:a4:7f:d9:07:f3:
18:62:f1:cb:d7:8c:c1:dc:7b:35:f8:80:72:3a:19:
24:ca:84:bb:a0:4d:d1:e2:58:92:03:0b:b7:53:29:
78:73:66:a5:84:a9:bf:be:be:72:c6:f8:1b:c3:83:
0b:52:a1:fc:45:9a:61:7b:7c:17:33:25:61:04:5b:
67:08:cc:8c:46:5f:5e:ea:1b:17:f3:ff:b6:e4:fd:
ec:01:0b:f0:4f:56:00:63:ae:30:3b:f7:cc:0c:03:
ab:fa:8d:40:fa:b6:bd:50:a0:48:36:d4:10:65:7b:
68:9d:68:30:c9:80:88:e1:e3:65:ab:b9:ec:2a:a5:
65:38:57:a0:77:4b:3b:5f:ed:76:a2:3a:15:f6:3e:
fd:80:7d:81:68:97:e3:da:d5:61:38:6e:1e:b1:12:
51:00:2c:71:c1:66:55:94:62:cb:9e:d7:96:a7:7f:
0c:1b:b5:cd:02:68:2c:a1:cb:cf:b4:37:fe:82:ec:
d5:65:01:0d:1d:fe:56:cc:e8:03:91:15:83:0b:9f:
0c:3f:1a:9f:f5:be:a8:c0:55:6e:12:87:33:b0:8a:
5d:f1:a5:ce:ba:b7:27:38:df:89:dc:e9:0c:d5:00:
f6:fa:03:77:51:7f:10:29:bf:23:84:da:32:0f:3d:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:9C:2E:BC:23:E6:C8:49:58:73:90:0F:27:2C:5D:E3:47:56:B7
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:55:d9:12:26:db:5e:f9:b5:a2:84:c2:66:5d:ae:c4:52:a7:
f7:37:8f:11:75:f0:a0:30:1a:da:a1:9e:28:de:1e:a7:86:f5:
89:56:97:5c:16:8f:d3:98:3a:76:48:0d:4c:f4:cb:bc:c4:f1:
c4:20:e3:1d:8f:d7:33:53:f9:71:60:f7:60:60:f4:c7:6e:be:
37:e6:c4:45:52:3e:aa:0b:eb:de:1f:e2:48:35:0c:fa:f5:cd:
63:6e:1d:46:55:26:a2:68:6c:f4:5b:80:15:0c:db:ed:2d:87:
26:3e:84:b0:16:c7:18:c3:b3:44:85:ea:d3:5b:8b:f5:f8:18:
52:bb:c6:c7:25:e5:4c:8a:02:94:ec:06:08:65:f2:1f:4a:fc:
5a:5a:b5:f9:c8:e6:16:52:61:c5:82:cc:35:d3:91:1e:0e:53:
36:92:5c:64:f0:73:5b:82:4f:ab:91:e4:e2:9d:72:d6:fb:f2:
75:25:e4:f5:53:57:74:7c:88:b6:a1:23:13:9b:9e:7b:f9:f1:
b8:bd:7b:54:d6:11:46:f8:d9:c3:b6:73:89:ef:32:39:66:d2:
3d:6d:09:70:4c:16:ab:22:2e:fd:7e:56:5e:3d:ca:7a:72:c5:
21:8c:4f:fb:c1:23:cd:11:b4:f5:92:2b:4f:24:ef:a7:99:01:
b8:96:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:59 2025 by rpki-client