Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: 9tQ4qzgXg6ByRgjM3AAmFzUEgwMDWjFevjgD7WpBos4=
Subject key identifier: DE:42:E7:C0:FB:6D:B6:65:E2:96:33:C7:F9:F8:7A:B3:3B:70:4E:37
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 0194BCA9B05CF52A37EA8C0313CC2A987D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: Hc5UeShqG/aqluumcyzyjM1+QnWM2w0RWYo7tuG5keM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b0:5c:f5:2a:37:ea:8c:03:13:cc:2a:98:7d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=de42e7c0fb6db665e29633c7f9f87ab33b704e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:76:90:02:f5:9d:c1:c4:8e:0a:38:ab:a1:
34:57:c3:d6:6e:70:07:1d:0b:a4:37:9a:c7:c4:04:
7f:7f:c7:aa:8d:cd:a6:46:5b:5a:f5:f3:f7:46:ae:
7f:c5:f9:b9:f4:8b:ac:d1:95:f3:01:a8:3e:88:b9:
c8:32:d3:ca:76:15:10:33:68:4d:42:33:97:b8:f0:
2d:73:3f:9c:14:12:38:da:65:07:8a:f2:9e:7b:dc:
6f:18:ae:24:d6:08:18:fe:77:4c:18:9f:53:eb:c3:
9b:8b:bc:3a:b1:55:c2:e2:39:a1:ae:06:4f:bf:1f:
3c:f2:ff:ba:48:c8:57:2f:cc:52:29:8a:62:7f:23:
b8:dd:2b:e7:95:18:dd:28:f3:86:32:c9:e3:73:b3:
59:8a:85:aa:ed:8e:f0:3c:d8:2f:2f:d4:31:51:17:
37:a7:1e:86:55:2e:15:9f:ea:65:16:3c:4b:0d:f5:
fa:bb:4d:7c:66:53:85:30:15:92:58:99:c4:3f:c4:
6d:4b:a6:d8:b3:70:7d:c6:9d:5e:b4:e6:a3:07:fc:
20:13:c2:c4:8d:8c:af:20:61:6e:f7:a7:0a:2b:b1:
85:4f:64:75:0c:f5:c3:24:24:9f:a5:e3:03:cd:8f:
d2:e6:59:37:3a:4b:3e:71:83:88:93:9c:a3:29:fd:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:42:E7:C0:FB:6D:B6:65:E2:96:33:C7:F9:F8:7A:B3:3B:70:4E:37
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:53:4a:23:19:6b:fc:fe:08:e9:70:50:0e:35:cd:7a:bc:d0:
75:ed:24:a2:e3:3f:fa:cf:c5:2e:a5:54:ba:d2:6a:42:f8:58:
88:c7:9b:6c:e3:64:cb:50:e0:03:b0:cf:2f:5c:50:60:74:c3:
65:23:8b:34:64:c4:e6:9c:6c:b1:92:7d:36:35:77:78:b1:fa:
b3:bb:c6:f7:56:cc:fc:92:55:fa:b1:04:01:1d:87:67:98:90:
44:11:bf:3f:3c:d0:48:b4:61:a3:72:c9:99:b7:a4:78:39:6b:
83:f7:9b:0b:ca:e8:91:29:65:47:81:b0:eb:0c:69:2b:c0:19:
43:b3:3a:4b:60:88:fa:7c:6b:fd:86:32:f6:58:30:e1:74:66:
19:cd:4b:f1:c6:f7:de:d9:fb:7a:19:5c:99:b0:0d:50:cd:45:
15:e0:76:48:3c:e4:0c:f0:eb:92:ef:bd:2d:e0:26:53:29:89:
5c:f6:9b:04:39:4c:a5:91:ed:89:04:5f:68:29:9c:29:a1:e2:
39:76:f2:5b:c8:c8:3e:81:2e:6e:50:52:2e:f0:0e:d4:08:c9:
06:8a:91:d1:f4:5d:7d:59:14:0b:84:3f:92:fc:df:8f:ef:e9:
d3:b9:51:d5:ad:19:c7:d8:ff:bc:21:bb:68:8f:ab:3d:55:37:
b1:f7:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:27 2025 by rpki-client