
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: CDXk6Zz56rD9LfQ4u0Zb9UXA7mbpB6eO/i/4VPVTWIs=
Subject key identifier: 4F:55:7E:25:AC:D1:7D:2C:ED:24:AA:60:A4:0F:6F:11:A4:91:FD:4B
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 0194BCE0C932DC819B95584817D268598C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: mgtsbBqBHoJSBHKfFDnAz20Irm2huDsF66QlaQ/aKnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:32:dc:81:9b:95:58:48:17:d2:68:59:8c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=4f557e25acd17d2ced24aa60a40f6f11a491fd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:24:87:3d:37:6b:0d:20:84:48:da:37:ff:
5d:31:88:8a:52:d9:0f:8b:37:78:bd:9c:c0:3a:f3:
54:51:6a:6e:16:0f:28:37:df:ee:da:39:c8:db:5b:
8e:21:a4:0c:5a:4b:be:29:fc:d6:79:a0:d9:03:df:
13:f4:06:d2:79:72:77:2f:ea:1f:89:33:d7:4b:ca:
3c:d2:ab:77:5d:12:43:69:84:19:c0:29:45:62:c7:
aa:11:d4:90:a3:e7:6d:16:0d:e8:9d:3a:56:cd:24:
22:fd:d7:fa:80:66:82:c2:1a:1f:fd:f4:d4:fe:4b:
b0:b9:d9:13:ad:85:7a:99:17:c3:6b:6a:50:be:df:
6e:a2:a1:62:7f:d1:d6:ac:ef:87:a8:06:16:06:be:
d3:23:ee:86:db:a1:ef:0d:64:6f:57:94:93:57:bb:
08:22:ca:e6:b0:06:93:48:95:bb:dd:57:07:76:0a:
d2:80:43:7f:2f:fc:b1:63:1f:19:b5:90:b1:24:19:
53:55:37:55:26:ca:4f:ae:a2:62:5b:b4:a4:a0:16:
9f:33:41:1f:e3:56:16:9f:ab:2c:93:06:2d:f6:34:
d2:ec:c1:fe:48:9f:a9:9d:de:47:21:b6:45:1f:40:
e3:4e:44:92:78:69:e8:c2:0d:7b:38:66:3d:db:15:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:55:7E:25:AC:D1:7D:2C:ED:24:AA:60:A4:0F:6F:11:A4:91:FD:4B
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:41:ec:ca:c3:d1:7e:07:a3:ea:07:b7:69:53:13:72:5e:3f:
fe:36:2d:29:f8:5d:b9:d3:26:5d:14:b0:3a:23:e4:9a:bf:25:
0a:60:c4:54:5c:0f:a6:a3:0d:88:14:10:b3:7d:8b:61:38:60:
4a:bc:d4:c7:70:a9:03:09:b4:4a:b0:c1:12:9e:d2:b4:ad:76:
46:68:a0:a4:4b:f1:49:74:3c:bd:15:ec:71:86:c4:ad:c6:0e:
f6:17:58:c3:e5:84:2e:3c:39:73:3b:84:43:31:f2:ba:33:62:
f3:b5:5b:80:a1:ea:c7:6b:4c:a3:63:af:f4:a2:25:78:c6:b0:
3d:ee:c0:18:08:38:0d:c3:0d:66:4a:ae:c7:59:cd:8a:95:80:
c5:20:91:56:0c:8e:19:0f:73:a0:fc:3a:f3:0a:2e:a3:98:76:
f8:c8:5a:1e:ee:64:64:53:48:1d:f5:92:2d:d4:32:79:07:f0:
ed:68:11:61:6b:ba:6d:14:78:e4:05:7d:49:d6:7a:e2:08:db:
80:74:65:78:dc:9b:0a:13:9e:6d:85:67:d5:2b:86:c4:a4:0a:
48:9a:f3:85:5e:da:85:85:16:d9:b5:d6:2f:06:8b:0e:e5:a4:
e6:9c:50:aa:72:8f:c4:dc:3b:e9:f9:60:9d:b9:95:c7:52:46:
50:4d:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:00 2025 by rpki-client