Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier: aFINKRLysBnytIGI41VC9g3Prc5zkxFgF/fR6aDXgYM=
Subject key identifier: C1:9E:8B:72:CA:CA:10:C5:38:55:DB:74:DF:49:30:60:BA:A7:F0:74
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 0194BD4EA882731AD2CBD299400F2A394046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: fLTMHaBymdxqPoojHZjMdpEQ0yf7RaAF7Z9++0VUMmM=)
2: tKq2kTGwjRxV1VeF4yjWXlgGg4s.roa (hash: 26irNsQZ2yFre3Oewun8lnjL981q/hQTWsn6QhKyj1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a8:82:73:1a:d2:cb:d2:99:40:0f:2a:39:40:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=c19e8b72caca10c53855db74df493060baa7f074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:aa:17:3a:1a:70:0c:26:1d:dc:04:b1:66:
69:8c:61:df:27:50:98:64:da:b2:1e:58:07:c9:86:
6f:c2:db:a9:86:f8:fb:1c:8f:58:0c:85:5f:7b:57:
b2:70:ee:02:86:70:b3:83:f1:51:47:4c:22:d3:cd:
1b:f5:05:ed:5a:1e:0c:ec:52:73:54:14:2a:9f:81:
6f:99:ea:7a:b1:fa:a3:bf:8c:d1:b5:34:e4:7a:35:
6e:5e:9e:91:2b:92:8c:74:a0:94:f0:d7:9a:01:5c:
93:c0:7f:58:b8:0b:4b:c2:4d:f3:c3:75:06:1e:ef:
a4:b5:d2:6c:0e:c2:c8:f0:70:89:4e:a1:c8:31:81:
ed:f9:4a:72:0a:5f:27:16:68:b3:88:62:dd:51:d3:
0f:24:9a:53:8b:c4:39:37:ff:c5:39:01:f3:70:bb:
2c:46:3c:94:8b:19:b3:ca:6b:dd:38:2c:c3:98:66:
31:cf:14:17:65:a2:36:fb:85:c6:e0:0c:8b:18:80:
e7:47:82:46:fd:19:b7:32:5f:4f:06:fb:c4:f2:38:
b2:0b:40:9c:48:e9:9f:74:78:06:95:83:ee:1c:41:
05:d5:dc:0f:e5:70:0a:9f:17:76:46:74:a9:27:cd:
f9:2f:6d:1c:2d:7d:be:aa:e1:6e:36:c3:d9:57:33:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:8B:72:CA:CA:10:C5:38:55:DB:74:DF:49:30:60:BA:A7:F0:74
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9e:72:22:56:dc:c3:37:00:95:ad:3b:4b:43:ab:a9:74:1e:
cc:14:ab:d1:7a:63:7f:7f:1d:b6:8e:27:c4:c9:b8:75:10:ed:
03:b8:3c:be:b7:14:ad:0a:b8:f0:aa:a0:45:9d:7b:63:08:79:
c6:5e:47:fa:64:21:e5:35:1e:c7:2f:16:ec:9d:25:d9:cc:14:
8d:c9:9a:30:49:28:27:2b:72:9c:24:15:84:8f:88:fc:27:30:
f2:1b:ab:bf:50:ff:9d:91:51:73:be:23:e7:41:0e:99:7c:79:
70:83:ff:74:b4:e4:1d:d2:3f:a2:82:82:fd:6e:9c:eb:06:68:
c2:42:66:28:68:a7:f5:8e:94:45:a8:9e:1a:17:4b:9c:20:fa:
9e:08:b6:e0:c3:30:cf:b8:c8:5f:04:0c:7d:ac:c4:04:07:23:
bf:4b:f7:63:cd:ae:47:0f:b8:60:98:92:6c:cb:3d:dc:db:65:
99:d0:09:3e:fd:e2:8d:e4:b2:9a:a4:3a:2f:bd:31:9e:ed:b1:
39:4a:51:a3:14:d0:0f:e2:71:aa:9a:2e:f4:e7:04:0f:fa:48:
65:bc:1c:91:9f:ac:88:99:ba:39:8c:bd:8e:f9:b2:37:eb:68:
03:ed:16:2a:df:7b:34:d2:f6:64:5a:cd:46:16:58:7c:cc:ce:
a7:fb:66:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:26 2025 by rpki-client