Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier: vJVCDvJ4RUf7vx3n9I4V1HTyrb6FfBf7WAzXHhVH/XA=
Subject key identifier: 09:D9:58:3A:48:4B:88:B4:E5:8B:8F:AF:38:1C:72:AB:8E:D6:6D:22
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 0194BC72AEC9C49CEAC0FCF4B230CCB80E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: AbDDieAjiM47QPI38uwxhNFokMk.roa (hash: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=)
2: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: asXuTELvJIkPq0jheFE21Ijr5ZWQyjnpaem4ZeqkbDo=)
3: GOuatpd1vNbzPpU_MMrRaYmQMic.roa (hash: OVdB72bA6szCy6jD6bfN9YARry9OiHOiRiqXWlcNKto=)
4: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (hash: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=)
5: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (hash: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:c9:c4:9c:ea:c0:fc:f4:b2:30:cc:b8:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=09d9583a484b88b4e58b8faf381c72ab8ed66d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:95:91:a8:df:ba:e6:96:fc:47:08:27:1b:
12:ce:56:56:55:cb:ff:fd:ac:95:90:be:3a:de:1b:
60:fe:7f:a5:92:bc:53:01:1a:c3:31:fb:5a:ea:70:
a0:70:06:51:cf:4a:bb:a8:d9:2e:ee:d7:23:16:2f:
d0:01:f1:5a:1c:1a:3a:f2:10:3a:a4:60:92:90:c1:
29:c3:39:47:91:80:0c:81:8b:68:ac:4c:fa:7e:ad:
31:7b:ef:2f:ea:22:bb:82:6e:6f:ef:78:c9:aa:4e:
01:03:ee:db:fe:53:e2:2a:29:12:24:f5:f9:a4:e5:
7d:39:61:d2:36:aa:72:5d:fb:75:a3:a8:cf:d1:05:
2b:85:e1:e0:39:62:c2:83:9b:fc:2c:0d:e5:4c:05:
90:a7:a5:ac:70:18:b6:74:7b:54:4c:a1:ff:e0:b1:
44:2e:f2:62:e3:c6:8f:7a:d4:53:cc:db:34:29:d8:
cb:22:5d:d5:51:5e:a8:f7:db:bb:31:78:b6:98:2c:
6b:e3:b9:8f:41:45:47:34:17:40:60:29:ec:13:55:
20:df:cd:15:4f:23:7a:6b:59:bf:53:e2:80:98:e2:
a0:35:63:7c:f3:26:14:4f:bb:08:a6:47:1f:6c:9e:
91:22:e6:4a:7f:c0:09:a4:1d:2c:cd:1d:6c:e8:9d:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:58:3A:48:4B:88:B4:E5:8B:8F:AF:38:1C:72:AB:8E:D6:6D:22
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:10:e0:de:b2:73:ed:19:20:e0:f4:27:4d:33:b5:1f:1d:76:
ac:ea:cd:8b:89:f4:48:e1:a4:05:f4:0f:86:66:09:28:b6:29:
a1:04:81:86:4c:69:6f:21:f0:90:1e:0f:60:95:e2:d7:1e:81:
bc:5d:33:16:98:7c:95:d8:41:ee:ae:70:c4:2b:b8:96:56:8d:
35:5e:35:09:aa:5d:37:8d:6a:e9:17:8b:eb:86:01:5d:68:7f:
bb:dd:37:58:71:a7:78:bc:f5:0b:18:d5:a6:52:14:29:5b:3b:
51:28:b5:b2:91:14:2a:8d:4f:aa:c5:5d:53:14:bb:c2:84:38:
4b:b1:4a:8a:67:95:a2:88:84:9a:aa:7a:45:89:55:14:27:4a:
6b:fa:8e:84:2f:fc:30:b8:6b:5d:70:e6:c0:25:97:b1:bc:78:
6a:db:24:af:32:8f:91:71:64:92:b9:ac:a1:d6:ac:44:2b:44:
e0:aa:e1:4b:57:56:68:9e:65:a8:6c:b9:e1:21:a1:26:11:d8:
06:65:cd:42:52:27:ab:f4:5e:2d:50:6b:30:45:f9:7f:44:b3:
03:56:46:dc:5f:d9:72:38:11:85:92:0d:67:e6:15:21:9e:0f:
00:d9:0f:6a:fc:a5:21:06:cf:d8:23:62:29:61:8e:1c:9d:b9:
d1:5f:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:06:06 2025 by rpki-client