Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier: uMufoxCXecqiNpSIzk8c3vK1hbIXzztZTuZY3ewk2vg=
Subject key identifier: B0:09:52:75:95:C1:E0:F0:C8:52:4E:1E:4F:54:D5:BF:BA:C5:76:17
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 0194BC04D4CD85A988B470962C3D2840EE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: bKqwGzMisG7CEkDXLfAUvw0OJDucsVyPC3sq4J7j6dg=)
2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:cd:85:a9:88:b4:70:96:2c:3d:28:40:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=b009527595c1e0f0c8524e1e4f54d5bfbac57617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:69:f4:19:86:7b:a8:32:6a:e5:3f:7f:bc:
c7:d6:b7:0d:a8:0b:04:1e:e7:96:39:9b:69:cb:35:
04:9f:37:0e:25:ac:00:4e:a1:37:cc:d1:3b:d3:67:
5b:66:13:bc:19:bb:93:a6:fe:f5:49:ed:cc:39:dd:
8c:c6:ce:d5:54:17:21:f5:a2:89:71:eb:33:be:6e:
b7:60:91:57:e9:ba:d7:ec:80:ad:6b:08:54:8f:e2:
51:a6:e6:33:f3:99:a0:67:1f:f8:b1:8a:9c:e1:6e:
f5:ba:77:bb:d1:be:fa:99:3d:88:67:4c:47:a1:9d:
fe:39:3d:1c:96:1b:8a:56:25:15:b0:bb:7f:b0:fa:
c3:e5:ed:c6:36:bd:b4:d6:2c:2c:95:d2:ba:9f:7c:
70:c5:24:0b:bb:37:0e:a8:60:13:6d:7e:3e:f2:d0:
8b:6e:bc:46:6f:3a:fb:f4:5b:d6:9f:21:7c:1a:74:
63:b4:8d:9f:43:62:e7:a3:c4:20:d0:be:e6:e1:d6:
15:c3:ae:50:a7:93:64:47:ee:c8:2a:46:ea:02:dd:
5b:f3:dc:fe:b8:07:9e:7b:27:53:c2:c0:df:f7:42:
f8:c6:19:6a:9a:78:5a:b1:2b:cc:89:c0:ae:b3:68:
23:b6:cf:bb:3d:10:62:e5:84:32:b9:40:fd:e3:f7:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:52:75:95:C1:E0:F0:C8:52:4E:1E:4F:54:D5:BF:BA:C5:76:17
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4a:d3:d6:42:f6:e8:f8:e4:ad:e3:bb:11:43:38:f1:04:e5:
6f:06:5c:be:41:cd:6c:8b:d9:3a:71:2f:05:93:9e:df:9e:ef:
9d:8a:32:63:53:12:ca:2c:4e:63:d3:67:b9:9a:c3:b8:a2:a7:
b2:b5:f5:97:2b:1d:9b:6d:d9:40:fb:93:45:57:94:7b:f6:95:
8f:ff:85:04:1f:0c:9f:c4:02:5c:56:b9:78:54:9c:08:2d:3e:
25:3b:52:07:05:7f:75:97:cb:32:52:3b:7d:ef:b5:24:58:6a:
37:fa:85:6c:4f:2c:95:ce:4f:84:96:a4:7c:44:5d:be:f4:d8:
a9:6c:66:ac:8f:b5:69:77:ab:9a:95:e9:e0:1b:52:af:82:1d:
e4:cb:c3:3a:19:50:c4:b9:a7:62:06:71:92:46:17:e3:d9:f4:
c7:bb:43:25:85:5f:07:c7:14:6b:15:57:ea:24:9d:f8:02:d8:
12:c1:90:e1:ec:1f:10:3e:32:28:11:da:04:e0:13:cf:fc:8e:
44:ae:85:3b:b6:6f:dc:d0:0c:b9:68:35:78:6b:46:d2:8e:0b:
75:a8:02:4f:5c:3e:44:3a:72:11:80:1b:b7:ab:66:e8:d0:66:
aa:73:a7:64:91:e8:f7:f1:40:d9:cf:93:fc:63:33:53:e6:7a:
a3:56:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:19:57 2025 by rpki-client