Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: bS5nDNTUFKtZB8w4hkajcIN3pVIrvqp3HBiMHx5bGAg=
Subject key identifier: E6:74:93:22:33:33:75:C5:22:DE:81:A0:F0:D1:47:58:90:1E:DF:BC
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 0194BBCDDDB869BE18604346344FF0A137FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: ofLWdxGfoX/hWGg7r27hqmqeboh+gNB3xKboI+6rWoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dd:b8:69:be:18:60:43:46:34:4f:f0:a1:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=e6749322333375c522de81a0f0d14758901edfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:8a:38:0c:44:46:63:42:f0:42:f6:70:30:
a0:0c:2e:0e:99:63:22:6b:87:4c:85:b0:70:0e:7f:
7d:97:5b:fd:90:df:54:2b:8f:e4:66:7b:70:fc:3a:
ed:cb:d5:a5:44:b6:0a:9a:a8:34:a6:42:ed:74:93:
2e:3d:45:62:62:70:b6:25:04:ca:a4:1d:e2:b6:40:
fa:55:1f:db:df:19:fa:16:9c:34:35:0f:04:58:1b:
3f:59:34:9a:11:26:7e:21:c6:e0:20:97:c6:7c:4b:
d5:86:ba:ff:dc:87:61:fa:6c:84:48:1e:e6:46:46:
af:88:77:44:36:0b:d0:42:93:57:cd:3a:22:51:5e:
11:89:85:87:91:67:9d:d9:73:7d:62:ab:1e:1c:9e:
76:c9:91:53:74:ad:8b:bf:ee:f3:52:a8:b7:36:45:
56:e3:92:c8:da:d7:f4:b8:b7:44:c8:3f:f4:d9:44:
27:74:ed:ad:cf:45:8b:21:fb:a5:a8:17:1e:dd:ce:
eb:9b:56:91:89:14:81:24:26:e7:a1:37:15:b8:fc:
11:5e:d4:dc:ea:87:4d:bb:dc:37:19:e7:fc:30:b0:
b1:2d:4d:9e:67:34:8c:c3:b9:51:81:af:2e:b9:45:
a2:95:9c:fc:13:84:66:1b:6d:c5:58:0e:10:30:1a:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:74:93:22:33:33:75:C5:22:DE:81:A0:F0:D1:47:58:90:1E:DF:BC
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ad:e8:fe:82:7f:df:42:78:58:dc:c3:3d:80:37:4e:12:a4:
21:8a:88:8c:67:69:17:79:a2:6e:58:a0:fd:be:12:69:7d:2a:
ab:f3:9d:b6:14:b5:f9:fb:9e:00:56:ad:4b:fd:1a:c2:18:d7:
b7:c7:b9:77:26:76:a2:33:2d:45:98:71:87:cd:a9:0b:6e:0f:
25:5f:f9:a2:92:4d:5e:aa:08:eb:48:f9:c8:3d:a9:a5:30:41:
40:71:5c:f3:5b:e6:85:b4:fd:b4:54:a6:be:cf:2b:1a:30:5e:
85:43:4b:6e:4d:db:ba:80:1c:f4:d4:c2:d7:68:1d:fa:db:22:
26:70:c5:25:a4:03:f6:cb:42:45:e6:ce:d6:de:ba:0a:7f:f8:
90:8a:14:5a:f5:a2:89:4a:d7:7e:a7:94:e5:eb:fb:da:8a:f4:
a3:a3:6b:3b:05:2a:bb:f0:9f:3f:8e:ed:ac:1c:43:03:4b:7b:
d9:e7:35:73:97:44:63:c4:df:55:ee:b5:a5:d7:be:8a:f9:38:
ae:39:5d:21:6e:1f:ed:03:25:f0:e1:72:38:16:0d:07:b8:18:
7f:5a:c4:91:0d:02:aa:f2:44:18:e2:24:50:28:83:c4:04:a1:
dc:91:3c:a1:26:6e:80:3b:81:8c:06:e5:f9:92:8e:a1:92:91:
ca:27:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:40 2025 by rpki-client