Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: HLI9ClDPowycRUSyGFlv+xjIJQfAL1efGIhBV6doNJg=
Subject key identifier: C0:D0:22:69:23:1D:36:E0:E9:CA:16:57:16:CF:ED:6B:9F:3E:54:1C
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0194BC3C5457D37DE6FE526CF60ABF278069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: 6E3AgiKg+EflqNd4bFJg7mgr0H0wxUYhZvy/Tn9xIpk=)
3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:54:57:d3:7d:e6:fe:52:6c:f6:0a:bf:27:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=c0d02269231d36e0e9ca165716cfed6b9f3e541c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:c0:86:c2:d0:7d:95:d7:b2:4f:73:25:81:
28:29:83:c9:69:91:1c:5d:10:15:13:62:85:81:78:
75:51:27:53:ba:c6:5c:fa:59:1e:57:2d:7c:b4:f3:
58:98:73:86:98:21:80:63:e7:73:a9:bf:49:3d:7d:
96:6e:c3:f3:fb:3a:b5:cc:c0:c2:0c:8e:6e:aa:f4:
bd:42:f6:5d:c7:45:8d:e0:13:49:ae:1b:2f:27:76:
45:19:76:66:f5:83:78:4d:81:fd:8a:02:38:7c:fa:
5a:29:2e:de:23:11:f1:89:54:75:d8:13:e6:3d:78:
23:eb:fb:79:34:79:12:ac:8a:9e:ab:7c:11:dc:80:
9e:86:ee:ec:19:04:7e:e3:2b:65:b8:74:2e:f0:f2:
ed:1e:ea:23:23:cf:f8:63:98:fc:e8:1d:38:74:6e:
40:4d:1a:ff:b9:78:d8:24:fc:19:fa:db:6a:b5:41:
8c:b9:4a:16:23:1d:3f:e2:cd:89:fa:d3:16:2a:9c:
98:6f:77:29:6b:98:45:93:0c:64:db:6c:e8:17:db:
f6:ca:7e:db:a5:92:23:be:06:94:94:ba:88:42:4e:
56:80:4f:de:b5:42:d1:19:5f:e1:75:83:64:04:8e:
e3:f0:55:02:c5:90:f0:b4:20:95:2c:e3:c8:41:97:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:22:69:23:1D:36:E0:E9:CA:16:57:16:CF:ED:6B:9F:3E:54:1C
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c0:88:7a:4b:b4:c3:94:c2:0e:96:d4:00:9c:d2:c9:e8:f3:
0d:a7:58:2b:fb:4d:96:9b:fc:23:e9:11:71:48:d2:a8:f1:65:
08:0e:a3:e8:4d:35:03:81:43:d8:11:8e:b4:d8:f2:a8:2b:39:
7f:84:24:b3:2d:05:1f:53:40:f3:d2:8b:9c:d3:ef:11:f7:8b:
b9:3c:c5:da:b4:ed:f7:51:8f:ca:4c:38:84:f8:7c:9d:96:c8:
8b:fb:01:46:2e:f2:39:75:47:04:ee:69:be:74:09:60:ea:c2:
85:93:44:2a:f2:37:8e:a5:37:d0:25:f6:b0:c1:52:af:07:b7:
18:39:28:c1:59:38:b2:fe:87:18:c9:ee:ee:4d:40:30:84:cd:
ef:fd:47:52:1c:e3:82:0b:9c:9d:5c:54:46:ef:30:7f:b7:95:
e5:20:83:e9:7d:57:4f:16:c0:06:4a:44:93:8a:61:df:01:14:
59:03:91:08:2c:4b:46:9e:c1:9e:f1:b7:c3:04:b6:d3:cd:71:
1a:31:6a:46:89:19:a3:a2:20:fc:a9:47:3d:21:26:1e:d4:c8:
5c:98:e7:7d:04:71:02:77:de:73:5d:95:73:40:ad:e9:8f:8d:
c4:3a:2d:46:7e:bb:4d:ec:2e:b2:36:b6:6e:61:71:26:77:e8:
9f:af:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:46 2025 by rpki-client