Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: J13V9YnJ+sZza0BNrx1VUAV0aEFcF3sUzibVGXi8z5Q=
Subject key identifier: 1C:90:CB:51:2C:97:D8:26:2D:D8:9F:80:41:2C:4C:60:75:60:20:EB
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 0194BC04D6A6F21EBC4B31229A133A239C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: J0aw/1AuieFQilO81yzBvOCC2IoJ/xpBla8Dq9yIu40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d6:a6:f2:1e:bc:4b:31:22:9a:13:3a:23:9c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=1c90cb512c97d8262dd89f80412c4c60756020eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:78:9a:09:1b:87:1c:0a:6e:84:82:aa:83:
7f:57:64:58:26:e8:6f:92:ac:40:67:ee:f8:25:25:
5d:a0:ed:ad:e9:76:ca:16:2d:05:12:6a:07:b9:ed:
d5:a8:f0:65:df:1f:55:53:64:f0:6e:ae:b2:95:21:
6c:ee:69:ca:dd:83:50:58:39:97:4f:fc:bb:9a:81:
e5:73:7c:36:96:fb:b6:98:f7:b4:f4:d7:30:45:cf:
44:a4:08:24:bb:d9:5a:ce:aa:fa:a9:fe:dd:61:88:
40:a6:c6:2e:56:0e:dc:33:3b:80:c5:1c:9f:61:e5:
b7:27:4c:08:0d:9a:59:00:9e:7e:a6:fa:e1:c4:07:
a9:1a:e4:c0:81:89:88:16:45:2a:db:b1:da:4a:04:
db:1b:f3:c2:2d:ce:b3:f9:80:69:aa:06:97:7a:75:
f0:58:c3:65:e0:ba:cb:91:b5:b1:25:dd:19:72:ae:
88:88:e7:c8:5c:46:66:83:5c:18:0c:7a:8d:8d:b9:
92:76:44:93:9e:35:2e:53:06:c3:84:da:8b:92:40:
a9:28:19:80:28:69:35:81:fe:ef:1d:c3:9f:14:59:
00:a9:8c:66:96:22:af:bf:03:fd:3f:e5:af:ee:25:
42:fa:f7:83:f2:36:a2:50:4b:74:62:c6:75:93:04:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:90:CB:51:2C:97:D8:26:2D:D8:9F:80:41:2C:4C:60:75:60:20:EB
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:82:77:fc:be:89:64:b7:c7:88:f3:94:d5:98:bc:da:25:
eb:0a:e2:0a:7a:d4:6b:bb:fb:3a:b8:d6:06:8d:a8:c5:75:09:
ce:d3:34:29:8b:af:de:cb:e7:e3:da:05:ef:ae:a4:62:33:ae:
e0:85:55:24:66:41:c3:87:2b:72:ee:81:08:08:36:a5:0d:39:
7f:a9:fc:25:70:af:51:95:6c:ce:93:4c:84:8f:dd:9d:9d:cd:
78:88:9d:04:a3:87:aa:12:2d:4a:a7:61:54:4c:98:0e:38:a1:
68:b2:4b:d9:54:aa:5e:1a:e8:3c:b4:cc:fc:27:17:0c:88:ab:
1f:f9:00:ea:21:56:37:ad:7f:d2:8c:ae:fc:c0:5a:e9:97:24:
78:ee:9b:38:0f:30:e0:87:08:f4:07:d1:04:f1:62:b0:55:51:
31:60:56:8d:b0:16:1b:92:f3:e5:8b:9e:cc:8c:87:2a:4a:7e:
40:fa:fe:92:1d:58:a5:1c:49:e1:89:64:16:49:c3:d7:7c:32:
3f:e0:74:8d:2a:0f:49:be:aa:21:9b:54:58:ec:65:69:3c:89:
4f:9d:a9:7a:b0:f7:23:ca:c6:df:39:14:20:b0:e2:3a:fa:9e:
9a:fe:ac:ca:ab:88:d5:eb:f7:e1:80:df:e6:45:f3:28:52:7d:
b8:e3:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:54 2025 by rpki-client