Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: Ioku2z9fdVhUND1yCOEtljB8HtdPEJM/atXvbgaKVB0=
Subject key identifier: BF:29:87:37:9E:FA:17:79:D7:F8:43:F9:65:DC:C9:42:74:3D:30:7F
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 0194BCE06F34443351CD0E11E9303796945D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: 76m8cjpXSSmgFAeAzZaFUM44j+qsQhaa2Kxp+5Kri6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6f:34:44:33:51:cd:0e:11:e9:30:37:96:94:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=bf2987379efa1779d7f843f965dcc942743d307f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:74:9a:2d:82:0a:4f:9d:c6:a8:1d:bc:fa:
15:68:11:20:70:4f:26:f3:cd:0f:d7:dc:a7:17:bc:
10:d5:fc:b6:d8:16:39:bb:3d:f7:16:65:1c:c5:fb:
1f:6c:af:bf:68:6c:7f:c3:b5:ec:57:60:ec:b6:16:
cf:8f:44:60:35:95:27:9b:d6:12:14:f9:de:87:fc:
19:94:85:64:3e:a3:5f:b7:75:ee:76:89:04:f1:9a:
5f:e4:4f:46:6a:3c:20:b8:02:8a:5c:e4:76:83:15:
ef:90:cf:9e:e0:27:75:2e:71:ca:47:21:ac:d5:7a:
99:37:29:37:2d:ad:4b:77:bd:c1:3c:11:af:6b:95:
95:0c:d2:7a:43:d3:14:ce:ce:4b:ce:2c:75:99:57:
dc:45:73:c6:99:6f:20:8d:2e:21:77:ae:e3:14:65:
1d:e8:1b:4f:b3:0f:06:e1:16:48:98:35:3a:78:e8:
5b:db:32:6c:2d:2a:4f:62:f8:02:35:16:c6:af:8c:
aa:3d:bf:13:66:92:ea:04:d9:28:91:c7:08:6c:33:
85:a7:96:79:39:cf:75:4f:05:e3:ca:93:51:ba:73:
43:ba:ed:78:bb:ca:e0:3e:f1:d3:10:ac:32:d6:e9:
84:40:53:79:db:40:50:8c:65:1d:6c:4e:33:f8:25:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:29:87:37:9E:FA:17:79:D7:F8:43:F9:65:DC:C9:42:74:3D:30:7F
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:f7:cc:9a:df:1f:0d:e8:69:4f:a9:72:e8:26:a8:97:62:
11:43:3b:6d:d5:76:84:e7:71:d4:0c:15:e8:43:66:e6:52:b4:
23:eb:32:09:d4:c1:6e:d0:6f:39:a5:f3:6f:1b:3d:73:31:74:
e3:00:c7:16:f1:d8:42:16:ae:5d:b5:5f:49:e1:cd:94:63:7e:
f3:70:23:d6:78:31:44:5c:0f:bb:df:09:e6:97:4f:f8:fb:41:
0b:7d:af:00:0d:03:6a:0a:7d:e3:52:a1:63:85:89:20:6a:6d:
91:fe:c5:3d:02:97:0d:88:21:a1:47:1e:d2:71:e7:f9:00:8b:
e4:3b:09:2b:70:13:7a:d4:ad:59:bb:22:74:26:c9:44:17:fe:
86:31:5a:9f:2f:bf:da:84:c7:9e:8d:c9:de:18:7f:eb:63:30:
4f:64:3d:3a:b2:49:11:4b:a5:dd:28:b9:48:45:38:9a:e0:69:
4d:f1:4d:68:91:83:96:91:9e:21:7a:1a:5c:81:12:55:23:f5:
9b:05:61:21:e3:57:17:f6:4f:d4:57:3f:67:60:20:ca:ad:73:
57:1b:1c:ed:d4:28:13:b7:1a:02:fa:d8:0a:0a:be:c4:68:cd:
ad:21:28:30:b4:ee:af:2a:b4:dd:e9:72:9b:72:42:3e:8b:2c:
68:40:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:39 2025 by rpki-client