Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: 0EXBd3ZRdOicIxc58v/UVtzXUjMiaB8IL5xAlRy8mNo=
Subject key identifier: 4E:A2:4D:58:E1:88:17:BE:79:F0:4D:EB:78:96:88:37:A9:00:EA:9A
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 0194BCA9ABA56C4BF27F6A68250C99BE8144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: BWlI9Wua90Yo+jdDDHkby8B15nCHCa9d9Ld6zJMhOHo=)
2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ab:a5:6c:4b:f2:7f:6a:68:25:0c:99:be:81:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=4ea24d58e18817be79f04deb78968837a900ea9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:89:87:41:b1:10:88:e8:c4:f2:df:cf:a5:b5:
92:ad:06:b1:39:01:55:80:9c:00:f6:65:e1:fc:6d:
9d:da:43:3c:ee:30:8e:fb:14:cb:4a:fd:d4:32:d6:
75:f3:97:c4:5b:5e:56:48:6a:4a:bc:ab:f2:97:b5:
f2:58:a9:d8:78:66:32:6d:0b:26:e3:d8:74:db:a0:
2d:81:58:d5:32:b3:c8:ab:26:9b:76:42:e8:a9:3a:
bd:09:37:c5:c7:5f:de:a6:19:33:b5:81:76:08:05:
c0:76:53:ea:89:fc:51:0f:98:3a:4b:9f:4e:eb:4f:
da:07:b7:da:02:d6:9e:75:76:59:fa:ed:08:9e:2e:
88:fc:a7:76:15:21:99:e6:ae:35:3f:dd:b2:63:a7:
e4:47:8d:fd:41:d8:21:76:da:5f:fa:46:81:41:a2:
1f:52:38:08:75:19:da:43:1b:0e:54:e0:de:ad:b6:
24:25:02:28:9f:cf:dc:07:cb:71:d0:70:37:c5:5b:
8b:3d:75:63:59:14:53:df:a3:eb:bb:b2:23:07:fa:
f4:d9:21:50:54:a6:65:17:5b:a2:f1:1d:c1:bc:cb:
1c:d9:8b:b5:2e:0f:18:93:31:64:e0:11:b7:a1:f2:
46:c0:0e:9f:e2:16:0e:77:45:a3:aa:cf:78:c2:ef:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:4D:58:E1:88:17:BE:79:F0:4D:EB:78:96:88:37:A9:00:EA:9A
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:33:03:83:da:07:d2:00:13:50:7f:1b:98:3a:df:37:a0:17:
fc:81:c2:de:38:e0:11:c1:93:a9:2d:8e:71:a4:74:21:c5:ad:
c7:eb:2a:55:09:6e:4e:c7:ec:b9:e8:0d:e6:cf:73:1c:08:fb:
37:49:a0:10:b7:68:04:2b:26:c4:92:40:35:ed:b2:b4:a2:53:
56:a7:68:52:b7:3b:e2:fd:35:d3:28:21:fd:af:57:8a:f1:fb:
68:fb:3b:c8:65:5a:b6:a4:cf:25:70:69:dd:f5:5d:2e:74:9a:
7a:c0:31:23:3d:6a:bf:44:3d:65:39:aa:5f:62:dd:82:bd:b9:
f7:23:ab:d9:fd:48:f9:3b:f1:91:d6:97:74:18:82:15:26:5c:
3f:b1:97:98:3b:23:f7:55:b4:15:72:dc:1c:84:de:d4:8f:ac:
30:27:a0:00:29:17:61:40:4c:66:67:b4:d6:20:c0:60:54:00:
8f:f3:b7:27:27:3e:a3:d7:ab:63:1b:29:0f:3a:3e:a4:6f:7b:
f1:79:75:85:d4:c2:bb:f9:a7:76:d9:d8:29:57:c7:0e:a2:e3:
1b:52:66:d8:34:88:b8:f2:d8:4f:9f:37:f1:ef:d8:9c:39:dc:
83:fb:a2:d7:27:11:5d:8c:18:78:2c:d9:39:22:80:0f:ab:2b:
94:bb:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:28 2025 by rpki-client