Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: VFHFsdM4kOhHWIGKwMLb+eHo0JulK9WjMlFX4caN/XA=
Subject key identifier: 5A:98:8B:65:BC:F8:FF:CE:76:C8:95:23:5B:BD:82:F8:AF:A6:87:1A
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 0194BBCE3AA1A31D524E57AB689468071252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: 1L4Um1nxp82zFxX08zPuFVNhPoZTI2wwCASQDyrpl5g=)
2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3a:a1:a3:1d:52:4e:57:ab:68:94:68:07:12:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=5a988b65bcf8ffce76c895235bbd82f8afa6871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:07:64:a3:60:9d:51:b8:20:a6:ce:5e:e1:
27:75:6e:1c:65:fb:29:94:60:26:2c:93:bc:12:3d:
2f:f2:3e:f8:38:a4:5a:f5:d9:e5:93:80:1d:af:14:
9b:3b:f0:c4:89:0d:72:f3:cb:3f:66:00:b0:2b:2a:
11:87:58:56:f3:50:2e:fe:71:c9:a1:77:a8:4f:5e:
87:30:4c:96:22:09:2a:e7:ff:0a:a7:c8:43:14:e8:
81:50:a8:3b:5e:79:99:03:d1:aa:76:54:9d:84:31:
fd:82:56:96:88:2f:14:72:f4:72:61:82:cb:cf:37:
e1:21:89:1e:e3:87:b2:e5:fc:d4:c5:cc:a4:84:79:
bf:6e:02:a0:f1:c9:35:50:8a:d7:96:12:32:74:e6:
3f:aa:70:c1:37:86:15:07:99:e1:75:2a:4f:eb:c8:
46:57:cc:81:67:11:7a:79:17:57:da:91:a9:41:a5:
44:5f:e9:76:d4:bf:0e:a2:72:05:e8:b8:9e:6a:b6:
d6:79:cf:bb:19:c3:0e:ed:e0:f2:a8:d8:3d:60:3a:
c0:96:2e:5a:61:cd:d0:b2:31:08:f1:93:5b:78:32:
fd:89:8c:c2:88:36:83:bb:fe:77:de:63:0b:b3:3b:
80:dc:22:4a:5a:e6:c7:fa:5c:4d:0a:9b:3e:52:a6:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:8B:65:BC:F8:FF:CE:76:C8:95:23:5B:BD:82:F8:AF:A6:87:1A
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:36:96:72:35:f1:1e:84:0e:1c:b7:3a:0b:5c:62:64:8d:52:
92:e9:72:f6:30:c1:8d:5e:aa:b6:90:e7:16:3b:59:56:1f:79:
2f:21:1f:fc:2c:7c:09:25:d6:aa:37:8f:2f:ad:58:d5:47:0a:
f5:9e:2b:e9:b8:16:87:f6:5f:aa:69:c2:7a:18:e5:35:de:b8:
7f:2d:0c:67:2f:03:db:6c:09:c5:ca:ed:38:52:19:6b:e6:68:
5c:01:6e:99:47:da:b5:d6:35:30:5e:7d:df:8b:ab:15:f0:83:
0b:54:0a:79:d9:d3:73:eb:2e:c3:67:8d:8e:33:17:ac:8f:67:
17:cf:f7:22:4c:56:bc:25:3a:ba:4f:7c:15:5e:9e:8e:9f:ac:
af:ea:90:8d:b0:75:54:9c:d5:45:dd:65:18:87:b1:a7:a9:47:
09:03:58:11:b3:d4:58:22:92:da:f2:5e:dd:de:70:c6:7e:2e:
23:22:63:4b:d2:2c:14:46:74:df:59:11:d3:e9:c5:cd:6e:13:
b2:fc:f5:ae:4e:bd:79:b0:b7:70:94:e2:de:ab:26:8c:bb:f0:
a3:00:a5:88:eb:0d:e3:1b:0e:87:c1:88:cf:cb:d5:75:eb:90:
c6:5b:bb:f9:7a:2f:ab:3e:3a:ef:e4:8a:0b:e5:ad:50:b1:32:
b7:6d:2b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:02 2025 by rpki-client