Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: JBRGZ8Ck2KKls86x/gkTEu6Zw/T8r6qhfG9NxdD4R0I=
Subject key identifier: 23:47:73:C2:DB:BF:76:F2:9B:74:72:55:0B:8D:64:53:BE:8D:C9:0E
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 0194BD85631FFF7D48A3235A44F58B71FAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa (hash: GeXT9//cL/zNTjZxuaw4Cm/U6jftaxUYi+/QSdMp5D0=)
2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: yAnLv4DtqstBMatZRIU+HbyXhu5vzg0GBQjHAVkjl0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:63:1f:ff:7d:48:a3:23:5a:44:f5:8b:71:fa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=234773c2dbbf76f29b7472550b8d6453be8dc90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:70:13:4f:df:bf:2a:39:72:5c:4c:3b:73:
bb:09:e3:75:9d:86:0e:2d:36:06:ee:8e:8c:67:ea:
a9:34:6a:f7:16:33:af:e8:3f:84:ea:e6:06:aa:16:
7f:0b:1c:95:94:a1:fa:a0:f1:ce:0b:47:c9:31:73:
ba:18:f3:77:a9:fd:c4:10:11:37:ea:8c:f6:5c:2a:
f9:aa:4e:1b:83:cc:f0:30:e1:b4:31:1c:13:9f:4a:
6d:17:e2:e5:83:31:2e:57:d9:ec:04:7a:a9:90:c2:
bd:d5:be:3f:c3:19:0b:53:a6:89:99:5f:b8:40:43:
31:99:8c:64:7c:2a:58:d5:f7:97:17:1f:05:1e:b8:
7e:de:dc:41:9c:30:12:69:45:8b:b7:b1:6b:f8:c0:
42:7c:47:81:cd:c2:9c:6b:83:d4:4b:5c:dd:b2:a7:
b2:59:fc:aa:21:9f:6a:66:9c:13:d5:75:4c:c2:39:
a4:53:7f:54:b8:75:f0:59:8d:8f:b8:a7:ef:8a:55:
81:6d:8c:43:53:b2:f1:34:80:04:e7:5f:a9:aa:ce:
99:8f:70:0c:0a:05:e7:55:40:50:80:29:d1:6f:c1:
86:92:d2:03:1e:4b:9b:d3:d0:b2:56:fe:5b:a6:58:
06:6c:b4:d1:e4:23:9f:f1:78:bc:33:b6:2f:04:55:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:47:73:C2:DB:BF:76:F2:9B:74:72:55:0B:8D:64:53:BE:8D:C9:0E
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:92:cd:ca:0f:75:28:e8:c1:b2:27:3d:71:1c:45:e2:f8:d8:
23:4b:d7:b8:60:20:a2:7f:57:a0:58:7f:bb:bd:f2:1b:b3:ed:
43:a4:6d:6c:4b:e7:02:c3:d4:ee:0d:94:bc:96:0e:07:23:1c:
2c:3f:53:65:ad:b8:37:9a:d2:17:8a:a7:8f:38:9e:7f:6a:c2:
af:67:95:a1:c6:63:b6:cc:c0:61:02:38:c6:34:6c:31:6b:7e:
83:00:8d:ac:16:48:25:de:27:7a:8b:14:b0:5a:0d:31:e1:2f:
3b:f3:c3:9d:f6:3a:4f:75:d1:40:19:bc:05:db:d4:95:4f:d0:
db:46:f5:c6:7d:64:ce:f5:cf:5a:34:c9:5e:de:84:2e:e6:94:
43:2b:fc:c9:22:8c:d4:b1:3d:3c:d0:2a:cf:2d:d4:ff:a7:80:
0f:9d:fc:14:02:40:86:b9:3a:e9:0e:7c:8c:7d:28:56:6a:f1:
d8:9a:8d:24:b6:17:9f:7c:73:e5:54:87:e0:14:78:eb:32:27:
79:c9:d9:5f:5a:c0:36:4a:5e:cf:e3:a8:14:83:ac:16:1a:0c:
0f:28:d0:76:de:31:b1:55:c9:9d:b6:1c:b7:f5:45:7d:cb:fc:
94:43:c4:f5:2a:70:7c:84:56:2e:cc:73:6d:4c:c9:6d:b8:60:
bc:89:48:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:33:01 2025 by rpki-client