Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
File: d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json)
Hash identifier: Z8v9TR9x+488WFL+u94oridKy1sI6nNjbtcWCrHKVFs=
Subject key identifier: C0:A1:8F:82:ED:F3:47:AE:82:39:C2:4D:29:2C:E8:88:9D:FD:8C:B1
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 0194BBCE3C49682657B4DB8ACC4DFA7D9A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: L2pGAoNgCb77vHsxb+I2G9AdNkrFI+Q+DZgxTaCgb4s=)
2: wrf5hE7K1tSxtANI1OLIGfXDlsg.roa (hash: dJ+4j6VIV2TVuQ1hjP+M5HNPZ3f6Bdfg+596PXOPxb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:49:68:26:57:b4:db:8a:cc:4d:fa:7d:9a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=c0a18f82edf347ae8239c24d292ce8889dfd8cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:2b:6b:30:dd:e0:b5:03:89:87:9d:57:69:
8a:25:61:a3:5f:20:ec:59:bd:ba:1d:70:22:15:7e:
ab:e9:e3:c3:d7:2d:65:56:9b:5e:a6:16:bc:5c:99:
26:ac:c3:48:c9:4b:6b:33:c6:c6:4d:f7:4c:f0:4c:
5e:2c:0d:fd:8e:8f:d5:c5:24:43:c6:a9:3e:9e:78:
fb:88:44:a2:31:98:f2:0b:be:f5:87:19:2a:84:27:
00:16:53:9e:dc:7c:34:ea:1f:85:09:91:be:39:fc:
1a:3b:3c:de:bc:46:dc:6c:ea:a6:5d:c2:d1:18:3a:
ea:1e:39:29:ba:3b:18:4e:d3:6b:36:44:a7:3a:f3:
88:24:97:4c:2a:1a:a3:1a:6b:9e:ce:d8:23:cd:e2:
9e:52:7b:bb:5b:d8:7b:67:57:c6:20:f6:50:28:94:
3a:2a:9f:15:3e:62:51:b3:40:ab:34:6d:d6:9f:c7:
bd:89:27:fd:0f:fe:d7:c8:45:d5:2f:74:aa:59:42:
a2:7d:b9:3f:ec:82:55:4e:fe:c5:21:3c:2b:a6:bc:
63:5f:f4:3c:98:96:56:93:4d:75:6f:7f:c4:ad:6e:
d5:b4:8e:d9:a1:f2:9c:29:72:15:ad:01:80:e6:ed:
2b:65:dc:e5:72:b7:eb:9d:f3:b1:7c:2a:3c:a5:87:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:8F:82:ED:F3:47:AE:82:39:C2:4D:29:2C:E8:88:9D:FD:8C:B1
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ae:fc:65:b2:20:b9:06:a1:c4:20:7e:a3:7f:c6:03:28:71:
69:cc:2f:b7:61:28:70:95:fc:1c:fd:0d:d5:47:27:bb:b8:25:
9e:7a:b5:fe:bf:88:67:83:de:24:78:ff:41:a7:8c:85:70:10:
e9:34:a7:66:75:a4:1c:04:d9:d2:84:65:d3:62:3f:a2:ce:79:
81:93:15:32:e5:11:6d:c5:78:1e:96:14:58:99:38:d4:af:49:
3e:0d:72:3f:d1:cf:d9:14:44:2d:64:e8:1d:9a:63:c1:c9:a4:
34:31:9d:ba:45:ad:84:b8:3c:10:aa:62:df:73:59:a2:fc:06:
9a:01:95:53:5f:af:a4:05:21:8f:82:3f:dc:97:9b:fe:fa:53:
1f:7e:1a:45:45:5d:be:ad:47:07:09:32:61:bc:2f:4a:37:a0:
53:e2:b5:b1:a0:ff:be:14:93:45:83:d3:0a:b9:ea:07:29:7f:
85:d0:91:b3:c7:52:45:91:1e:ce:9a:05:be:86:a8:3b:c3:75:
0a:fd:2b:90:ff:e7:bb:9c:db:96:cd:47:5a:28:4c:2a:9f:5f:
70:17:d4:80:79:d5:07:5b:64:f6:75:ca:e6:22:4b:6a:e7:10:
e8:db:5b:48:f0:1b:ff:0d:48:6b:f0:f6:c7:33:9e:9c:86:00:
8a:00:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:51 2025 by rpki-client