Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: 0jBDQcqtshBZHi3Q2Y5g9v+VgUFTgWSVsmUjR4CN6l8=
Subject key identifier: 37:01:60:BF:1F:2F:2E:71:CA:33:1C:6C:31:31:C0:C6:A6:37:98:00
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 0194BCE0B7BF184DA140F9B70CE2F7B3F0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: iENOgSBFAjVhr2CkIB5qEUJ5B6Qen00qzV07wNdnx6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:bf:18:4d:a1:40:f9:b7:0c:e2:f7:b3:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=370160bf1f2f2e71ca331c6c3131c0c6a6379800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:db:4a:3d:07:e2:b8:09:d2:3e:1a:27:8d:
f3:3e:8d:e4:fc:88:6f:e1:36:f4:c4:db:55:c6:98:
fd:06:de:e4:78:29:ef:28:e9:27:dd:c6:01:de:ff:
f4:be:fd:2d:5c:ef:5e:c9:b9:34:56:f3:c5:21:47:
05:5f:29:90:f5:6c:86:55:37:0c:19:e7:3e:24:64:
87:81:aa:18:a8:08:a0:10:98:62:82:3d:0c:b5:81:
bd:67:6f:c1:4d:ef:30:d0:27:26:cf:fe:a3:f9:04:
e0:41:f2:ca:15:56:30:42:12:a0:6c:83:67:14:d4:
60:4c:9c:67:3f:4f:88:4b:89:01:8d:45:74:1c:3b:
75:43:40:4a:d9:c6:39:72:9c:13:7d:1e:71:3f:6f:
67:6f:15:38:44:6b:8f:03:68:27:48:60:50:a5:69:
d3:f4:0f:b8:6d:0d:5c:f5:12:7d:86:2f:84:b0:a0:
06:8e:1a:df:c9:3c:52:17:d2:ce:1e:c3:5c:52:22:
8a:a0:15:ed:92:ee:d5:e3:47:41:82:35:19:f0:42:
2b:b5:8a:9a:0d:cd:fb:97:b3:b7:8f:1a:aa:bf:a2:
b2:e4:92:45:72:12:de:4c:65:99:3e:f6:d0:77:f0:
a5:fe:6f:33:82:49:ba:bf:7d:57:9a:64:ab:84:8f:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:01:60:BF:1F:2F:2E:71:CA:33:1C:6C:31:31:C0:C6:A6:37:98:00
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:35:1f:46:15:64:11:90:7c:25:52:d8:56:07:da:0c:c1:1d:
5b:e0:28:c8:42:af:74:03:3e:14:69:49:04:2c:af:fc:76:87:
23:eb:63:a3:9e:ab:d4:f6:13:c2:50:c8:fd:f7:c1:7f:c9:be:
1e:08:38:b6:0d:21:fb:d3:79:16:a6:2f:e3:3f:95:00:6c:46:
49:d3:53:0b:ea:06:56:24:f5:2b:d1:be:92:9a:a2:26:97:b9:
83:7b:a1:6d:32:0a:77:2c:35:0a:a7:d5:a2:1e:f1:cd:3d:6f:
01:cd:f6:68:a8:b9:91:23:c4:4d:81:82:57:4b:11:53:df:26:
4c:ba:71:94:5e:fc:8d:f5:ef:49:e2:9a:37:03:fe:8d:fe:28:
d1:60:ed:26:44:18:4c:43:ba:ae:e4:89:b6:a7:1a:b8:25:fb:
d8:3c:eb:6f:04:3a:dc:4a:e0:15:85:84:e9:65:1f:ce:20:82:
05:8d:ef:d8:85:d1:7b:42:f4:26:6d:ce:6b:2f:03:cd:63:87:
73:81:2c:e9:38:c5:f4:74:a5:48:8f:7e:98:1d:6f:45:57:c0:
7f:e3:5c:d5:67:b4:ba:13:7c:84:cb:66:0d:61:35:4d:92:b7:
ce:cf:f2:50:c0:c5:c7:ee:41:37:9f:50:ab:f3:c9:1b:c8:a1:
20:8c:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:04 2025 by rpki-client