Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: KudeZZHlyGYQL15idCj0KJbS9pAqF0r4gducEr5GT7w=
Subject key identifier: C6:F9:9C:33:F1:0D:5F:1B:1C:59:61:84:63:BB:AE:14:29:5B:C6:19
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 0194BD4E8DB2D5AA311CC064FF8C2B81CD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: h27N5jO3n3/UoBwaUJgEUJHADCLuA91eIzWNhj9n9fk=)
2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:b2:d5:aa:31:1c:c0:64:ff:8c:2b:81:cd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=c6f99c33f10d5f1b1c59618463bbae14295bc619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:99:af:58:54:ad:74:d5:d5:67:19:6d:69:
80:a3:c4:8d:6b:58:9e:02:7d:f6:cd:c9:76:f0:aa:
0f:eb:60:00:d9:c9:8a:d7:11:59:34:c0:ae:0e:85:
41:d3:aa:5c:df:97:08:72:d2:60:9e:7d:54:8a:9e:
ff:a7:bc:b0:33:c9:94:73:d3:61:3a:df:5a:13:92:
b2:85:bd:40:e1:2f:7e:53:4e:5e:9a:04:7c:5d:c5:
c3:6d:3c:f5:c6:53:3a:5b:07:b2:ee:d7:8a:94:7f:
e0:11:79:73:65:e2:6d:83:46:ce:76:23:0d:07:f4:
2a:9d:4c:f1:bb:40:8e:52:5f:74:a9:90:94:81:44:
34:e3:35:db:90:e0:15:d1:0c:08:32:d8:4b:90:bd:
e0:33:a1:6e:54:be:de:55:33:52:27:de:41:7a:71:
0f:23:5c:da:9c:6c:c5:99:5e:7c:5b:de:f3:ca:b8:
d7:62:63:8c:0d:b3:73:5a:92:b5:2e:48:f5:db:0d:
1d:a4:50:c6:11:9b:50:66:ef:23:38:91:2a:8a:86:
dc:3d:8c:a5:9f:8b:99:e6:07:22:c5:2c:9b:6c:e0:
c5:a6:c5:2f:8f:e5:28:d4:56:11:c2:f6:5e:76:3d:
37:1c:33:dc:39:99:57:b3:91:f2:93:45:66:91:0a:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:9C:33:F1:0D:5F:1B:1C:59:61:84:63:BB:AE:14:29:5B:C6:19
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:e1:1f:40:3b:f3:db:19:04:a7:e9:ff:b5:b5:2d:fb:d7:
03:c6:f1:69:70:80:cd:ab:46:04:3c:4b:13:02:6b:6b:e8:bc:
63:d0:26:74:c2:92:28:fa:91:53:f3:2e:d6:29:45:08:7c:42:
c7:d5:db:4d:b6:50:99:05:1e:91:6b:59:63:e4:db:e9:e1:24:
b7:3a:93:4b:95:9c:6b:98:68:46:60:dd:a3:3d:c6:06:bf:ca:
71:91:08:d0:6f:ae:a3:aa:2a:ad:be:ec:c7:62:b2:39:10:52:
e9:db:d7:4c:17:23:1a:8e:c3:52:13:25:30:ba:5b:10:b7:3a:
0d:54:f0:c5:c5:3c:28:9d:9d:a9:ce:70:33:e3:9b:71:83:bc:
2a:1c:38:cc:45:89:5f:77:1f:8f:8e:50:7c:65:28:53:c8:c3:
ea:a4:c4:48:35:9c:67:8f:04:3c:3f:10:61:89:b0:0f:65:f6:
f2:56:df:55:c0:6d:15:36:7c:8b:5d:dd:93:82:51:a6:89:ae:
ad:84:29:9c:ba:51:09:17:4a:fc:51:9f:88:23:01:ba:35:8b:
a2:22:67:67:db:f9:bf:20:60:ec:f6:a2:b4:69:8b:67:2e:c7:
aa:e4:6d:28:f6:de:3c:94:15:2d:24:8c:3c:f8:e1:45:ab:92:
23:3d:41:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:12 2025 by rpki-client