Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/50ff00-777a-411d-938b-f4d60ecdf2b2/1/r433xPeRM3MP4-aJR3enlgSly3k.mft
File: r433xPeRM3MP4-aJR3enlgSly3k.mft (raw, json)
Hash identifier: fqPSRxP5uFDUgDZwF4H0L+drfUDgrF0iLxa4IACNXHs=
Subject key identifier: 26:17:11:FE:B0:7C:7D:0B:EF:64:B1:83:A6:31:95:CE:F1:ED:5A:AD
Authority key identifier: AF:8D:F7:C4:F7:91:33:73:0F:E3:E6:89:47:77:A7:96:04:A5:CB:79
Certificate issuer: /CN=af8df7c4f79133730fe3e6894777a79604a5cb79
Certificate serial: 0194BCE0E01D4BDB351CE4490F1D73474736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r433xPeRM3MP4-aJR3enlgSly3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/50ff00-777a-411d-938b-f4d60ecdf2b2/1/r433xPeRM3MP4-aJR3enlgSly3k.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: Sj0PB6C71UQWy93CM-Vpj4pjoBg.roa (hash: StQmSXi8WTjztpX70qdwwtDI4sB0dsxFMynA07YhLgY=)
2: r433xPeRM3MP4-aJR3enlgSly3k.crl (hash: +jl5c4k6RcCSrVJfbnjgJm3+Aocz2T9tp8HGK2Lx+iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:1d:4b:db:35:1c:e4:49:0f:1d:73:47:47:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8df7c4f79133730fe3e6894777a79604a5cb79
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=261711feb07c7d0bef64b183a63195cef1ed5aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:a0:23:8d:b4:eb:f1:6a:dd:56:c2:6f:d3:
de:a9:3c:e2:2a:41:9f:c7:31:61:f7:fe:64:8b:d0:
26:8f:e6:5f:1e:c8:bd:74:80:6f:77:18:94:f9:be:
e5:c8:5d:56:6f:cf:bb:04:9e:14:9c:cb:49:be:95:
6a:c8:eb:05:9e:53:1e:9d:5d:49:a9:c9:a8:5a:1f:
4a:ca:39:04:07:ba:60:58:f4:ff:b0:4e:d1:25:9f:
11:41:97:e3:54:2e:a9:c4:40:63:4e:9e:09:da:e0:
29:18:ad:45:e7:d6:64:f7:b0:e3:a1:c7:e9:2a:6c:
d8:34:64:e0:26:41:cf:74:52:6f:97:b2:72:c2:b9:
28:82:1e:6e:dd:43:f4:1a:18:84:4c:74:a6:7f:68:
a5:b8:8c:3f:71:ac:20:a2:d1:fe:e9:d6:3d:21:3b:
f6:a5:c5:45:24:ae:4b:27:7f:f0:53:ce:b2:8e:9f:
95:1d:25:77:0b:e5:00:cf:b1:7c:3e:91:cf:df:1b:
ae:98:4c:cc:33:e0:80:f3:a4:17:c9:99:28:f0:08:
ac:fa:50:52:56:2d:df:d4:a8:eb:16:91:08:fc:2e:
78:c4:b2:54:07:99:e1:35:64:eb:b0:0f:2d:5a:50:
e0:f3:f9:7b:25:02:c6:e4:b6:72:33:19:fd:f7:fe:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:17:11:FE:B0:7C:7D:0B:EF:64:B1:83:A6:31:95:CE:F1:ED:5A:AD
X509v3 Authority Key Identifier:
keyid:AF:8D:F7:C4:F7:91:33:73:0F:E3:E6:89:47:77:A7:96:04:A5:CB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r433xPeRM3MP4-aJR3enlgSly3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/50ff00-777a-411d-938b-f4d60ecdf2b2/1/r433xPeRM3MP4-aJR3enlgSly3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/50ff00-777a-411d-938b-f4d60ecdf2b2/1/r433xPeRM3MP4-aJR3enlgSly3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ec:06:65:cd:29:46:da:c3:55:a0:7a:da:4a:f5:a3:b5:87:
22:21:da:98:22:ad:89:61:73:4a:2c:4d:db:84:83:6c:1e:ca:
17:a6:ec:b2:36:6f:75:64:7b:a7:d8:27:23:b3:2b:a5:94:e9:
e6:1a:5b:fd:8e:90:1e:6e:b2:9e:8d:b4:90:e3:5f:f2:2f:6d:
1c:09:79:e7:56:f0:d6:18:d7:c8:f9:0a:e5:d2:54:16:6d:97:
6e:86:3e:66:7f:e0:58:b2:08:54:b3:e0:91:e5:fc:aa:1b:19:
83:49:36:a4:30:f7:aa:1b:3f:d9:22:f5:a5:89:6d:5f:5b:83:
d4:bb:85:1c:35:5d:ca:ee:78:39:c3:d0:29:c4:b0:34:60:3e:
65:ca:64:90:e0:1b:16:5a:c0:45:d6:a4:6a:84:bc:a9:70:be:
eb:23:b8:2a:bc:16:c7:e3:e4:00:2e:9d:af:cf:59:fe:4c:0c:
66:14:6b:d9:d3:b4:89:25:40:5a:c3:70:b9:78:85:30:22:71:
f0:d5:0e:2d:39:ee:7b:b0:56:78:99:ce:0c:4e:89:b9:86:0f:
7b:0c:7b:c0:33:b7:d6:46:cd:65:9b:83:8d:29:a4:c8:3a:6f:
e3:91:01:a0:67:89:8a:bc:d8:52:6f:d0:31:ff:48:69:fd:82:
94:2e:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:35:29 2025 by rpki-client