Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier: 5ru22g9XG3XDrm9zzj9gtErZL5/dASjvSP7wmBsea4w=
Subject key identifier: C6:13:DE:61:F9:A7:61:69:9A:2D:DA:4D:08:73:81:0D:16:9B:45:7C
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 0194BCA9F2E45A0CD95EA836C08E88E11064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number: 144A
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
2: ZobwuQJlyfTBHn_a7YG93r8zB-c.roa (hash: OuGiwc5e7Uh2SsaOmHGGMAe9pQSfXZsNsX2xOuLeEXY=)
3: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: hsYs6Zscrt1b9aHpv6aa8yQlKAbRzV8oxvKr4V4Yowc=)
4: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:e4:5a:0c:d9:5e:a8:36:c0:8e:88:e1:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=c613de61f9a761699a2dda4d0873810d169b457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:5a:e3:ec:e3:62:3a:cd:2f:2e:e8:17:f3:
06:b0:0a:91:c3:06:36:a3:d5:3a:d1:7c:af:77:61:
89:1f:22:d8:a8:04:82:fb:91:c3:8f:63:cb:ba:24:
cc:30:a1:8a:8b:af:17:70:79:ca:8b:86:6a:36:96:
a4:74:d5:84:fe:2c:ca:b1:3f:20:f1:b9:dd:90:78:
de:97:cd:3e:d3:87:8b:da:a0:38:de:f4:22:bc:a6:
be:53:b1:92:0d:23:e2:65:d9:52:d1:13:17:17:ac:
f6:75:75:94:da:2f:d6:cb:60:7c:20:d1:af:f1:6f:
ee:1e:48:a7:dd:7a:48:12:c6:1f:53:4a:83:87:6f:
0c:e0:a9:f0:d7:dd:99:ce:ec:aa:5a:10:aa:1c:92:
99:07:db:f1:ac:57:45:7b:b6:9f:8a:f2:81:32:97:
b4:e9:76:36:b8:aa:24:75:be:a0:88:fc:9e:90:16:
38:a5:cc:d4:12:24:be:f5:18:1e:61:b5:bb:58:db:
8e:0e:40:26:56:8b:1a:ac:08:76:25:a8:66:ad:f9:
fd:54:34:11:9a:77:1b:ef:4d:f2:10:a8:0c:b9:1c:
74:c7:c5:17:13:26:18:94:58:83:87:32:23:6d:cd:
74:f4:e5:e0:9f:43:3b:82:7d:03:91:ce:00:90:00:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:DE:61:F9:A7:61:69:9A:2D:DA:4D:08:73:81:0D:16:9B:45:7C
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:90:d7:9c:31:46:70:8e:c6:79:e8:05:53:d8:bf:6a:4d:8b:
d3:c3:52:d3:68:a7:93:42:00:77:d5:7b:92:e0:e6:6e:a8:98:
c3:45:a9:28:70:28:b0:64:52:b7:cb:3c:2d:ec:d1:28:10:54:
79:16:7e:72:c5:4f:bf:8b:6a:66:cb:d3:f4:86:50:28:2f:2a:
4b:2e:a5:b2:ed:2a:27:98:e6:cc:b4:d6:4a:75:b5:a0:d1:ed:
ea:71:fa:59:eb:49:6d:7d:3b:40:c9:8b:d4:c0:4f:4f:1f:de:
2d:dc:1d:9c:0d:97:ca:65:d4:5d:86:94:e7:28:1b:cc:38:16:
49:45:4b:ee:e1:80:24:6e:63:d0:74:a8:ec:09:d9:1e:91:82:
c8:02:c4:6a:96:04:e7:3e:c8:4b:dc:40:71:2f:c3:c2:6d:62:
65:21:32:3e:4e:f2:62:a8:7f:29:ad:72:90:36:e7:90:4e:7a:
cf:02:58:47:1b:9d:55:f5:6e:b4:35:f2:ef:e4:a4:18:76:d2:
98:09:d2:5e:29:14:8a:8a:14:13:4a:f7:c4:bf:fe:61:60:34:
11:3f:2c:79:dd:2c:6f:a5:ed:8e:47:9a:10:71:b4:bf:13:19:
23:20:96:63:d7:56:b0:4b:d6:f8:e2:2c:e7:80:81:d8:13:44:
21:c5:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:46 2025 by rpki-client