Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: WXKPbJpS4Rwsv0O9rJU/RqEWm+lpkF3RHIBt+zjqb2U=
Subject key identifier: 97:3B:BA:87:6A:40:A9:2A:7C:87:B9:7D:19:1A:E0:CF:5F:2B:0A:BA
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 0194BC3C237A39AF4787CE3F7E3C019950B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: mGbGQXB7mvc1BSe9NFajDMfJ5p2GpDJoJoDkj00jXko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:7a:39:af:47:87:ce:3f:7e:3c:01:99:50:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=973bba876a40a92a7c87b97d191ae0cf5f2b0aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:f4:bc:6e:c0:03:49:be:ff:15:8a:bf:d4:
fb:6f:52:a2:3d:d5:1f:bf:18:33:db:39:5e:ae:21:
53:ae:b1:85:4b:c0:54:10:c0:e0:4e:41:45:1d:db:
b6:54:65:9b:93:82:de:44:26:35:c6:00:3b:8e:7c:
ba:0c:a0:ea:89:d2:c8:97:b9:51:4a:d2:0e:9f:84:
5b:a5:f1:bf:fa:b1:c3:68:c0:11:0c:fa:fd:3d:3d:
0e:0f:fc:32:27:cb:6f:ff:3c:23:e2:9e:93:78:80:
5f:85:45:a2:2f:44:3a:71:72:6c:3f:ad:ae:7e:52:
0e:41:95:fa:4e:04:21:8c:7f:a3:72:55:24:54:67:
6a:3d:fa:95:2d:dd:f0:20:f4:dd:2f:d6:b7:10:d4:
81:44:85:62:ec:31:8a:39:93:a8:11:63:b2:11:ee:
0c:6a:27:23:93:bc:e5:8b:e2:be:2d:41:78:06:94:
2b:f3:94:a6:44:1b:0e:9a:53:b8:3c:29:05:f1:c5:
17:4a:ae:a8:a0:19:66:0a:f4:c5:06:57:8a:fd:5b:
61:84:2a:60:21:81:b0:f7:21:88:2f:49:5b:be:d3:
c5:e0:db:09:db:52:4a:96:c5:92:ed:75:fa:6a:32:
5a:02:f2:ca:4c:46:95:26:f7:83:b6:a1:a5:6f:7a:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3B:BA:87:6A:40:A9:2A:7C:87:B9:7D:19:1A:E0:CF:5F:2B:0A:BA
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6f:15:d2:ef:12:64:74:ec:57:5f:de:a6:fe:75:10:9b:8f:
f5:1a:99:83:72:a4:48:11:d7:30:e5:b7:4f:c7:10:ed:e0:7f:
31:95:87:09:93:5e:93:6b:e8:4a:bd:18:ff:df:ea:61:b1:81:
c1:8e:38:30:9c:7a:ae:6f:4c:8f:17:6f:d4:55:bc:77:4f:72:
00:8e:02:8c:ba:f7:c2:42:4b:77:86:74:ae:46:83:a2:2b:40:
93:8a:d3:16:5c:21:87:65:24:58:13:94:1d:f1:c5:de:4b:8d:
e1:30:cf:d6:aa:fe:43:b5:00:81:16:ae:a0:28:97:41:79:c1:
c7:bc:95:3c:94:87:af:d8:9f:12:49:e7:2d:d5:70:58:fe:85:
67:91:a0:67:dd:7f:df:25:a0:4b:5d:2c:55:96:32:7d:6a:64:
e9:36:49:64:1f:ff:62:5a:f8:2b:6e:82:04:19:7e:43:38:25:
c0:03:91:59:ba:00:47:c9:24:db:aa:46:06:a7:31:92:af:4c:
ff:e4:a2:5e:a6:c7:68:a1:4b:19:bc:ae:48:87:23:0e:6e:24:
e2:2e:65:5f:6b:e1:14:72:b6:54:e0:3a:50:17:84:c2:d1:dc:
1d:76:74:44:e2:92:51:eb:cd:62:60:d6:9e:8e:d2:07:b8:48:
bb:a8:9a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:59 2025 by rpki-client