Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: /z3hD2k+Oz2noEeopRmqXGhZcD0P5mISxpkdabfixbo=
Subject key identifier: 1C:7D:31:80:AD:03:4B:68:22:6D:10:04:B3:EE:A4:34:9A:AB:0B:F4
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 0194BD4E9E7EAC3B42F3B9E28B7666C3ECC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: 7dhiI7i6LfiAy2vY3ZHVn+M5iFEfWtktlp7QUeqAUtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9e:7e:ac:3b:42:f3:b9:e2:8b:76:66:c3:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=1c7d3180ad034b68226d1004b3eea4349aab0bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:7f:f0:5c:61:1a:97:23:45:db:3b:4d:55:
7f:13:d3:40:af:8a:12:d5:fc:25:2f:3e:9d:53:95:
99:17:95:e0:d8:bd:ab:c5:52:bb:cf:4a:ca:0e:23:
9e:e8:b0:12:1e:f4:48:2c:14:84:f9:e3:8d:d5:7f:
24:2f:48:b1:90:72:12:c4:bc:27:32:1c:07:4b:59:
e2:ce:cc:e2:6d:90:ca:c9:cb:97:45:6c:0d:77:3f:
f9:f0:93:47:af:6f:11:83:05:2f:81:d8:66:46:f5:
cc:aa:ab:34:8e:70:87:45:ed:ed:90:b9:9d:ce:fc:
b3:a1:35:4d:e6:a6:c3:f8:ff:03:4f:0b:4c:70:c7:
47:77:c3:c8:18:4a:df:18:de:0e:85:50:d4:1e:ee:
8b:5f:4d:4e:ec:9a:74:33:88:27:fa:af:c4:15:a4:
ec:bc:2c:ff:d6:1d:48:54:40:a0:a5:f4:ed:42:92:
d0:e7:c2:2a:c8:dd:d7:14:e5:a8:cb:c7:34:0e:62:
94:71:3b:46:98:c7:83:61:0b:1f:19:9e:7c:d5:79:
3c:d0:e8:81:e2:eb:44:1d:a6:b4:1a:63:40:62:93:
90:13:2d:2b:9f:87:75:d8:a5:7e:99:9f:69:94:1d:
51:7c:7e:62:ce:9f:ee:49:cc:54:24:89:ba:26:0e:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:31:80:AD:03:4B:68:22:6D:10:04:B3:EE:A4:34:9A:AB:0B:F4
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7e:21:23:74:68:0a:22:7d:c8:04:76:58:02:d9:ac:75:44:
ce:b1:49:f3:88:8e:67:80:d9:a3:0f:c4:2c:7f:3f:a2:6e:13:
4a:86:7a:66:e7:5e:f9:cd:5d:fb:87:d8:9d:55:f7:dd:4d:d4:
fa:53:a6:50:08:7f:51:a9:b6:90:ff:19:cd:08:f2:6f:99:ff:
a2:c2:4a:b6:9e:5e:9a:f7:fb:e4:d6:c9:97:81:cc:0e:6e:6d:
22:3a:d0:f6:64:c6:cb:01:64:c9:2f:16:ff:dc:66:bb:9d:d0:
70:b1:d7:26:68:8b:1e:f2:b9:04:ab:67:60:5c:c9:e8:75:2c:
5b:78:8a:aa:b3:e9:40:26:2a:d5:63:ab:2f:40:56:07:2f:91:
f6:12:69:47:f8:77:dc:d4:ed:69:73:83:75:e9:16:5d:fc:bc:
d7:2a:35:21:a4:17:58:4e:d2:9f:4f:0c:e4:59:3c:cf:84:95:
52:86:41:93:98:59:f9:e7:86:6f:28:34:59:21:f1:db:8d:00:
fd:f6:c5:f8:27:d3:e0:d7:2c:af:57:8d:11:49:ca:50:23:ba:
5b:d0:a3:d6:12:8a:8a:90:c6:3a:44:c3:ee:a6:87:2e:db:11:
bb:e6:60:6f:3f:b2:c4:d9:21:6f:6d:1a:3c:0c:79:9a:17:30:
a1:7a:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:44 2025 by rpki-client