
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier: hNrnno+7av8aUDKA9EnTcSlNUHozX3bkzX6sVXUL0gc=
Subject key identifier: 70:6A:ED:32:CB:0E:37:41:73:4D:4C:0E:15:EA:49:C1:DC:D5:E3:C3
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 0194BCA96DFB473BDA469FA062C74AB4D8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: gk9anus27A1fS1fArKh5EFIHhVWwNtJgJ29lyCR+SUI=)
2: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (hash: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=)
3: mAXlXNB9v-X9Wiu9xA-qkNOSmGk.roa (hash: oVGw8L/hb1uj03ZIPyJ/jrTD+46lhm6KM/O1Nxc9Los=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:fb:47:3b:da:46:9f:a0:62:c7:4a:b4:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=706aed32cb0e3741734d4c0e15ea49c1dcd5e3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:da:fc:a6:68:f8:43:a6:43:d4:4e:38:04:
6d:41:1a:99:7b:dc:b5:66:2b:fc:6a:c5:72:3a:d7:
b0:a2:29:dc:5f:6b:de:3e:03:e2:f9:44:3e:46:5a:
ec:9d:83:61:7e:23:f0:ff:8c:f3:79:d8:16:0c:10:
65:f9:c5:8b:f2:af:7e:8b:ee:d7:80:f2:9e:55:84:
c6:8b:f9:1d:3c:92:95:91:c7:5f:57:43:79:75:e2:
bd:f3:8e:1f:cb:54:55:ab:90:0a:19:6f:f7:97:84:
ff:e4:aa:57:01:67:49:7e:48:8c:aa:4d:d6:77:4e:
82:51:12:44:cc:de:bc:76:7c:8e:78:19:f3:d8:2d:
1f:cb:38:e0:79:d9:06:09:15:d6:d1:42:57:90:dd:
91:62:b5:a2:3b:2e:80:84:e8:b4:a8:fc:01:b9:03:
c5:a2:97:17:05:4c:23:bf:8d:d6:e6:39:0e:b5:e6:
68:15:cc:89:e7:4f:bc:34:63:b1:64:86:00:6a:47:
5a:92:89:99:30:51:d1:e4:5d:bc:db:cd:5f:87:4b:
d2:7a:b8:54:5b:3e:8b:93:fd:47:e5:ba:5e:08:54:
fd:5f:ec:f5:5e:40:9b:a4:70:7f:e4:17:58:9d:e0:
f2:13:56:0a:17:e1:bf:bb:01:c7:05:47:68:ed:0e:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6A:ED:32:CB:0E:37:41:73:4D:4C:0E:15:EA:49:C1:DC:D5:E3:C3
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6e:7e:1f:ea:07:b6:bb:81:56:72:1b:18:f3:4e:97:ea:81:
26:ee:3c:fe:d1:25:cf:08:6d:57:1b:c3:b2:90:5e:51:8f:f0:
87:9f:a9:84:2b:e9:f4:7c:f6:8d:cd:a4:3d:f2:b5:08:b9:18:
00:cd:9e:b5:e9:95:b1:16:5f:d5:a9:5c:58:e9:65:b7:50:02:
92:c7:59:14:d2:3e:3a:9e:fa:2b:fe:e0:09:be:40:00:75:24:
55:b7:ef:76:ca:f7:47:d5:db:95:ed:0b:3a:12:f6:48:e6:0c:
10:45:ce:32:6e:bc:36:e5:f1:0a:b1:5e:02:4c:8a:9f:5d:b8:
05:40:0d:79:61:16:34:f8:58:9b:de:62:bd:23:f3:2d:7d:42:
ad:3e:60:4b:d9:a4:83:b1:92:51:bd:07:38:fd:72:99:e6:dd:
fc:6a:62:aa:eb:86:c6:23:05:d8:e2:2d:38:a1:f6:e9:a5:9a:
f7:de:6d:3f:a1:eb:2e:13:c2:a9:5b:c7:5b:d3:7e:4a:ba:49:
5d:7c:28:c1:22:2f:8d:69:e5:24:f5:e8:2b:81:9e:18:3b:59:
d7:47:ce:9a:00:6d:db:6f:e2:b2:44:6f:d7:2f:b8:2a:9d:2e:
e2:c7:7b:eb:54:65:7f:77:a3:2a:e1:a7:d4:df:5c:ec:5e:30:
2a:41:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:02 2025 by rpki-client