Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: HTh0J2PcG6d0DFtBV4HaVXxFLxak44Y6PAsRXIlJgfI=
Subject key identifier: 42:E7:C9:74:75:B1:BD:59:2A:79:B3:AB:C7:C9:73:53:73:DB:5A:7E
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 0194BC733AD125C20274383663B57F84CF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:55 +0000
Manifest this update: Fri 31 Jan 2025 13:00:55 +0000
Manifest next update: Sat 01 Feb 2025 13:00:55 +0000
Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: IP7PqWS5Q/wHkFUInZge/teZHRQrqr0EAtgUAllZzlw=)
2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:3a:d1:25:c2:02:74:38:36:63:b5:7f:84:cf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Jan 31 13:00:55 2025 GMT
Not After : Feb 1 13:00:55 2025 GMT
Subject: CN=42e7c97475b1bd592a79b3abc7c9735373db5a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:c2:ca:15:64:0a:2a:e5:79:44:ab:c0:46:
50:f4:e8:d3:74:75:21:12:56:7e:43:cc:14:47:4d:
23:ff:79:e7:06:37:d7:86:07:6e:44:6d:a1:9c:a4:
c6:d8:fe:dd:39:3a:7f:2d:15:f0:d3:1e:13:51:32:
4f:d8:c7:dc:b7:fc:fd:5f:34:29:37:7c:f0:72:20:
6c:95:6d:76:d1:84:ab:94:2c:80:d4:97:1a:05:39:
5d:46:09:57:6b:c7:90:f7:d7:2b:e8:05:57:e1:63:
db:2a:74:19:a2:b2:79:ba:fc:47:1b:68:8a:ee:eb:
00:2e:aa:39:c9:1c:72:2b:98:30:d7:8a:8d:d3:62:
41:c3:30:1c:f2:67:c6:fc:c2:70:9d:ac:ec:34:5f:
a6:0f:83:90:f4:d1:c0:23:68:47:2a:2b:cd:74:8f:
3f:10:c4:22:38:56:25:33:63:03:bb:66:03:a4:87:
53:0e:aa:c2:69:3c:36:43:c2:ed:77:32:c1:49:16:
40:05:64:dc:07:6f:c7:c1:73:0c:92:c8:e3:42:24:
f0:4c:cb:a9:1e:b8:db:7a:c8:72:43:1d:d8:b8:30:
42:e4:b5:3a:79:6d:46:70:16:4c:d4:3c:05:3d:92:
9b:22:3f:46:6f:ea:00:99:fc:1c:49:3d:0c:8d:e0:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:C9:74:75:B1:BD:59:2A:79:B3:AB:C7:C9:73:53:73:DB:5A:7E
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e6:93:ce:18:d8:1c:c5:80:85:c4:28:cf:27:8a:a4:e9:b2:
d3:9c:6c:50:21:e4:7b:c3:2e:ca:c5:bd:c3:e7:0d:7a:69:44:
83:5f:a6:fc:82:3e:cf:83:a1:7e:a0:29:c8:2a:e9:f0:57:4a:
9c:44:aa:8f:7d:cb:07:d6:67:ac:96:a9:8f:84:2f:c8:fe:e9:
06:b0:70:32:77:d7:77:2a:7a:e4:23:da:d5:ac:f3:9d:56:1e:
32:37:19:44:82:05:c6:3e:48:bd:39:05:25:99:49:06:28:fd:
4e:4d:0a:8a:3c:47:d5:d8:26:bd:23:b8:23:19:91:95:ae:44:
1f:b9:7e:02:44:4d:90:04:57:8c:96:94:db:9c:be:bd:93:3b:
82:0f:a5:31:2c:6d:ae:c9:79:e2:32:a0:ce:14:b5:bc:be:94:
89:88:6c:61:ba:48:7e:cc:d1:7a:02:f9:93:e0:1b:13:d8:8a:
83:93:a1:76:b8:16:5e:e8:60:45:55:94:4a:a9:df:9e:94:2c:
ec:14:f9:c9:c1:60:a9:66:44:75:95:c4:42:1f:d1:85:eb:59:
48:24:dc:87:f1:d0:49:b2:7e:11:ed:8f:1c:2f:c2:ad:30:7a:
93:42:bc:15:4e:41:51:f2:ed:39:06:2c:20:60:71:c8:6c:7d:
d4:19:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:25 2025 by rpki-client