Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: AN985JfyVhuCm3qKHD4yo3KIFPsXm1qDfMw2vCuPQmw=
Subject key identifier: 18:42:47:21:62:E2:3B:67:D5:9D:61:B9:68:BF:99:84:4E:D6:F0:6C
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0194BC053413ED8E3B4AE0CF222954E3E3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:45 +0000
Manifest this update: Fri 31 Jan 2025 11:00:45 +0000
Manifest next update: Sat 01 Feb 2025 11:00:45 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: T3HXmWtqrbPN38iGobIsFj6NNM6K5FY25bIIZ5LCy7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:34:13:ed:8e:3b:4a:e0:cf:22:29:54:e3:e3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jan 31 11:00:45 2025 GMT
Not After : Feb 1 11:00:45 2025 GMT
Subject: CN=1842472162e23b67d59d61b968bf99844ed6f06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:62:23:e0:7f:c5:a9:48:61:84:bb:7a:2b:
6e:b8:c6:bf:96:f0:3f:a7:82:70:41:6f:94:05:aa:
7b:10:56:20:4e:c7:ef:7c:fb:e1:8e:f9:c1:b8:63:
33:4e:86:62:37:20:be:1e:20:e4:6d:86:08:23:df:
0e:cd:33:49:17:a1:7c:6f:87:ca:58:f1:0f:76:1d:
e3:da:d5:95:1f:49:ef:0d:75:ee:d9:8e:d2:d3:2e:
25:fe:b3:6a:c5:a5:6e:d2:a5:dd:93:20:da:b7:c1:
e8:89:c9:ea:1f:e8:b3:cd:b4:3c:29:47:d8:35:f0:
71:4a:39:61:b5:25:16:20:9b:b4:6a:b1:de:05:2a:
de:a5:02:8c:00:f2:9b:58:a6:2f:0b:86:87:51:cf:
c2:01:f1:97:39:4a:2c:40:7a:08:27:d6:52:62:71:
85:38:80:26:23:05:3e:04:13:1f:ee:dc:ff:8e:f4:
2d:97:8a:e4:ad:d0:0b:b7:38:03:0d:40:c3:8c:35:
21:49:68:08:5e:00:5b:c8:03:8e:7e:47:4d:dc:67:
18:ce:d4:20:65:88:fd:b7:e5:12:ce:6b:cc:99:19:
d4:73:eb:64:9e:38:25:e9:82:5e:de:d0:d4:9d:36:
0c:92:7a:89:65:b3:2f:60:c8:7c:92:cd:3e:e1:d9:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:42:47:21:62:E2:3B:67:D5:9D:61:B9:68:BF:99:84:4E:D6:F0:6C
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:95:44:f7:d7:73:6f:f7:0f:ac:1d:5d:2a:71:59:49:13:d8:
dd:a1:81:12:ae:4e:ec:ab:87:3e:54:e0:3f:34:30:2f:e4:73:
4d:80:43:ae:eb:8d:d5:0f:b8:0e:67:2d:7e:ab:a1:35:04:13:
99:ca:2c:9f:de:17:b5:e2:e9:48:e3:f8:1b:92:60:d7:d0:18:
a2:57:a5:c8:50:3f:f0:e0:ea:57:2d:05:b6:df:2a:00:45:67:
8d:a0:cd:77:88:a9:8a:0e:c1:86:cc:84:b5:a1:6f:44:94:12:
da:86:83:9b:9a:de:5f:d2:b0:31:90:73:6b:93:91:4b:3f:2c:
f3:65:46:c4:75:05:32:33:8c:07:40:67:16:71:69:20:4c:5f:
8d:b2:67:62:7b:31:15:29:57:e8:77:db:16:2f:8d:b2:89:75:
ab:ca:c1:b0:b4:19:02:ee:76:7d:bb:58:4c:2a:10:d5:b3:da:
36:96:66:63:d7:19:6b:1b:fc:25:63:10:af:a0:a0:59:99:70:
58:0b:70:f9:e8:21:24:de:9b:90:9d:2b:02:40:17:f1:6c:ec:
87:12:49:dd:62:bc:d0:99:3e:8c:56:5e:82:2b:43:82:37:80:
94:54:e7:ae:a2:da:b9:ae:d0:b2:36:7f:cf:7c:c9:8a:91:7b:
47:6e:8f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:39 2025 by rpki-client