Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier: dsXMtfjLsV1glKGGnrbO2MLKKEcxpdyxaaEO4/ViulQ=
Subject key identifier: 11:D9:F0:FD:6E:3C:B7:9D:12:D9:F2:D6:51:3A:CF:45:8E:7A:53:82
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 0194BD855092139B20B613E2513CF7B97007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: aVs/+HBKem0RpMIBoPzdtkhg8BMqtig0Z2pxYTaO8WY=)
2: iUoNxOhwebXoe8b72BR2AhmpSeA.roa (hash: tWfhDKNLJhumUMuEB+92tFSBgGLOO7GXSiupWsvky5w=)
3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:92:13:9b:20:b6:13:e2:51:3c:f7:b9:70:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=11d9f0fd6e3cb79d12d9f2d6513acf458e7a5382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:4c:0a:24:98:70:f4:99:a4:22:a4:48:d2:
6a:b8:ce:c1:ac:5d:34:cf:4f:a3:78:d3:bc:1a:80:
02:05:13:36:2d:0b:dc:89:9f:be:e8:f4:e0:1f:30:
6b:94:da:d8:ea:87:de:3e:23:e6:7d:03:fb:62:46:
6b:5d:49:69:a9:09:43:42:5a:8c:48:a7:dd:c5:8e:
16:58:25:1f:63:b4:c8:dc:7c:09:5b:86:83:ca:0f:
3a:05:b7:30:43:1c:70:a6:04:bf:7a:e5:a3:87:ec:
1d:59:3c:5f:7d:11:f3:73:60:8a:57:89:cf:f0:05:
4b:06:cf:f9:bc:c2:db:ce:35:1f:e3:94:e9:15:b6:
08:f5:e0:62:f6:54:b3:43:0c:10:fe:b7:43:aa:24:
8b:3b:5e:37:e5:d8:61:97:f5:a2:6b:59:6f:01:2d:
a5:75:29:54:8f:7c:b6:9c:79:04:b8:01:17:79:78:
f9:62:1f:ee:8e:76:85:33:67:03:8a:b1:2e:00:25:
d2:0f:a5:fd:40:5a:a3:57:9f:8f:bc:6e:0c:bc:17:
30:b7:a3:d9:e7:e8:f0:2d:45:d1:06:32:55:ad:b5:
1c:34:5f:31:d8:31:c5:c6:c8:0c:6e:7b:59:95:3f:
bf:27:f9:ac:03:90:08:37:18:c5:fd:aa:f3:38:26:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D9:F0:FD:6E:3C:B7:9D:12:D9:F2:D6:51:3A:CF:45:8E:7A:53:82
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b1:82:b3:a7:f1:5e:85:a1:67:62:36:7f:54:85:7e:c0:dd:
85:42:79:b1:12:29:2b:ee:72:49:fb:1c:f3:c1:44:65:89:b3:
82:11:c0:c9:5e:17:f8:f1:a1:08:18:80:19:9a:88:d3:1e:6c:
be:02:72:39:73:b8:ab:57:2d:f3:f6:e1:06:3c:7b:d7:e3:ca:
f2:d4:ee:53:f5:9a:ed:36:41:fd:2a:4c:6d:a7:27:27:c6:dc:
c5:44:7c:ee:28:3c:d8:5a:73:99:0a:75:7e:38:69:5a:1b:55:
a9:a9:e2:a3:c2:e2:b6:4b:da:86:80:81:01:ef:ad:61:b9:72:
ae:f4:da:4a:6e:bf:33:b4:ec:a0:c8:c4:4d:72:c6:42:5a:c8:
51:a4:db:00:6a:7a:2d:85:34:2d:76:8d:8f:27:69:0a:c4:7b:
d5:d1:41:ca:f9:0e:7c:ac:ce:78:ca:a8:f7:bf:e2:a3:61:d2:
a7:8a:8f:d4:f7:1a:41:df:3b:7a:e8:70:c0:76:47:6c:83:9f:
8a:6d:16:ac:b0:06:e9:91:1a:a0:1a:8b:0a:12:ec:4d:42:64:
93:6d:47:10:46:7f:40:c2:aa:5e:8d:32:0c:11:7c:be:62:00:
f0:cb:8c:7d:0b:8c:90:92:c0:d2:26:47:6e:76:8d:22:f9:51:
d1:27:6e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:40 2025 by rpki-client