Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: wuBZVmlzeIry+fWpCHBuHY/fkm/0jq7mRBCviAt73yo=
Subject key identifier: F3:FD:3E:DB:CA:7B:01:31:34:6B:B4:5F:AB:04:BF:A0:A3:BF:76:22
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 0194BCA9FC5211AF4E6F2DB0B519FD930450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: oFspt5oHQWlDCu2Z4udRKEInjZyQIxuM/hSt06oK8/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fc:52:11:af:4e:6f:2d:b0:b5:19:fd:93:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=f3fd3edbca7b0131346bb45fab04bfa0a3bf7622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:39:45:83:0e:71:38:dc:20:70:71:23:1f:
36:6d:63:49:d5:8f:79:d1:03:61:f3:9a:07:db:1d:
f6:ee:99:fb:47:0c:1e:86:a7:96:2e:6a:d2:22:65:
c2:81:20:b3:71:f0:65:b2:46:26:db:a7:54:f9:56:
b0:2d:58:29:de:23:ba:9e:9c:5d:c7:5e:aa:c5:bc:
72:04:fa:74:5d:bc:d3:91:d3:3b:78:f6:60:61:dc:
a6:de:fb:1f:17:4b:5e:58:17:b3:f7:ca:92:1a:1b:
a7:1c:07:51:aa:4f:9b:c3:06:8c:12:d9:6a:79:ae:
71:29:27:b0:5a:7b:94:47:6d:dc:ca:79:d0:8b:9e:
96:01:e5:d6:71:74:2d:68:a0:b7:fb:cb:08:80:5f:
a5:de:84:f9:4c:e2:34:52:35:a1:17:f6:fd:76:3e:
40:9e:e9:7d:27:02:2d:83:0c:49:1a:8d:1d:c7:33:
0e:12:08:4a:ba:ab:1b:33:de:12:82:00:3e:a4:90:
53:8e:40:28:7a:5d:41:57:eb:7c:79:9d:54:52:d8:
0e:b1:4d:f7:a4:8e:1b:68:07:e3:d4:c6:a6:bf:82:
09:e5:52:5d:e6:c6:8e:fe:60:87:49:52:8d:f7:05:
bb:a5:58:9e:53:fa:dd:a3:39:41:53:b5:e6:a6:59:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:3E:DB:CA:7B:01:31:34:6B:B4:5F:AB:04:BF:A0:A3:BF:76:22
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6c:e8:62:ba:f8:01:f0:83:73:21:38:7b:d9:18:fe:4a:04:
d4:fd:c6:0e:17:cc:d5:de:cb:cc:97:02:9f:82:9c:71:09:99:
0f:77:94:b0:d8:c1:e7:74:83:19:46:69:9b:3f:8e:90:0f:ee:
a0:e6:b8:99:30:e5:d1:a8:37:1e:c6:aa:7c:13:a8:63:7c:af:
84:5e:dd:b2:49:b7:8f:96:f4:43:e1:ed:47:01:fc:4f:a5:a3:
e1:03:65:1f:19:74:32:59:90:92:a5:a6:43:6f:3f:93:56:16:
00:cc:20:34:f8:9f:be:9b:54:56:b8:7a:59:a0:a6:8b:3d:5f:
62:ce:e1:a8:b9:2e:02:3f:55:43:ad:de:10:c9:87:bf:6b:54:
0c:c3:62:f7:56:6b:6e:4f:68:e7:b6:89:50:be:e0:b1:80:0a:
3d:97:53:d0:c5:ff:18:79:f5:b2:7d:04:01:39:23:cf:2d:2e:
51:12:84:bb:5a:43:35:5f:ac:93:85:22:e0:10:c6:ce:60:da:
63:d0:8f:9c:54:39:d1:95:ad:e6:29:d8:a9:8d:73:4d:f5:58:
91:6f:78:74:ef:62:b5:98:53:75:9e:aa:5b:1c:ed:6e:44:69:
a6:25:d2:ea:12:e4:d9:52:fe:6e:02:a3:0a:c9:35:28:f3:50:
4e:80:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:12 2025 by rpki-client