Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: rhQuX5rGvVbCeUd1ASQqUgh4nT+SiYhQdNP+0XRhfL0=
Subject key identifier: 8B:3D:78:2C:CD:92:9E:81:30:ED:EF:79:40:36:02:2D:D7:36:5B:C0
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 0194BBCEE39382CE8800E21DE4EA9B00F302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: j1U9C2uAvEjksC0Nm+L/+S8ZrRzq94zYgX4UKaGAuKk=)
2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e3:93:82:ce:88:00:e2:1d:e4:ea:9b:00:f3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=8b3d782ccd929e8130edef794036022dd7365bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:ac:2a:25:ab:23:f4:d5:3d:c8:f2:c8:73:
9f:70:6b:b0:a6:de:b0:3d:a4:c3:79:10:3b:00:32:
c0:49:0e:35:86:eb:64:35:fe:a9:f7:3a:53:f2:a3:
9c:97:9d:04:0f:ae:52:ec:4c:a1:56:a9:5c:df:5a:
c6:14:b9:88:31:00:45:0c:a6:ca:32:31:5d:10:03:
5a:cb:97:75:a8:25:a0:fb:96:d6:82:ac:7d:3f:33:
76:1f:ad:c9:29:7a:dd:f5:25:41:b0:f2:f2:42:10:
3f:94:92:98:8b:30:e3:cb:22:aa:b4:c9:9c:04:89:
46:45:26:9a:57:b9:8c:ae:fc:04:a8:d3:d5:94:51:
84:ea:c5:ea:fb:44:90:8a:97:7a:4a:3e:72:01:7c:
84:39:fd:76:99:e7:ce:79:76:2d:85:83:d3:e1:7e:
ea:c6:25:03:6e:bc:b7:dc:bd:ba:7c:1b:da:77:8f:
f2:f7:c9:b1:de:38:9c:5b:d5:d5:7f:65:f9:d2:43:
a3:8c:a0:3e:a1:59:9f:ff:1b:57:de:11:ab:f6:87:
96:6e:90:7b:98:64:f8:b7:25:c2:df:6c:f8:58:bf:
6b:ef:ca:f2:1d:57:37:a6:10:cc:60:63:48:98:6a:
a4:79:57:b5:24:87:ee:74:a8:53:12:c0:8a:c3:6c:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:78:2C:CD:92:9E:81:30:ED:EF:79:40:36:02:2D:D7:36:5B:C0
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d7:87:f1:bf:ac:a5:b8:9a:ce:7b:0c:3d:c8:21:2b:83:4e:
64:f0:cd:97:91:3b:d1:53:02:0d:79:b1:c7:53:cf:d7:ac:0a:
54:3a:00:49:37:a3:65:16:1c:50:85:af:ae:2e:fa:0c:5a:4f:
e0:41:ec:f8:2b:6c:86:1e:18:c9:99:18:74:12:24:e8:71:2f:
22:a9:be:c8:d3:81:16:e4:aa:15:2d:20:24:4e:b8:d9:33:5c:
a5:80:db:87:02:01:3b:c5:f8:ca:24:4f:46:d8:eb:5a:7c:6f:
a7:bf:67:ab:fc:be:a5:0e:3b:2f:e9:b6:3c:e1:0c:32:a5:69:
81:fa:8b:c1:2f:25:6d:b9:2b:36:22:51:34:bd:64:1c:8e:11:
45:56:0b:8e:dd:65:f6:22:f3:d7:73:f4:c8:d6:0b:ad:59:26:
43:b0:f8:11:29:b3:fc:57:46:ff:cf:9a:0c:e4:40:51:98:44:
a0:84:41:09:9f:4e:ae:77:d6:6a:6b:a1:cf:96:19:e4:ef:d3:
00:17:b1:aa:48:97:f4:65:a7:05:0a:36:58:f1:eb:25:25:f4:
04:88:4b:fd:4d:1b:39:c8:ef:04:4b:80:29:68:00:03:22:16:
bc:fc:de:5a:8f:db:a4:fe:98:14:0c:82:ea:db:0c:61:b2:7a:
7b:f0:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:12 2025 by rpki-client