Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: oO8ZX10IsrR4cu4MApwaJop4Vp9m1YhSI6rJ3rk35NA=
Subject key identifier: 25:0D:C7:60:9A:9F:A0:B6:2B:BD:32:1D:A5:44:6F:43:6F:FE:81:F7
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 0194BD85A532AF49C213AC12BAA47C7C9E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: 53H4CROdJSX8HTk0oqM84BJH6XJ+L2I6+2Bft+eNdZA=)
2: DiWaQ483B87mmH9xBQjUT-gKREU.roa (hash: +HNilVQSXx0rRIqto+Np0Fi3ncazRRex3uQcgtaQ1OY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:32:af:49:c2:13:ac:12:ba:a4:7c:7c:9e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=250dc7609a9fa0b62bbd321da5446f436ffe81f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:88:1b:e8:6b:88:91:aa:7a:76:93:fe:96:71:
ea:2a:a7:e8:2c:aa:8d:52:00:61:88:bc:e3:e3:36:
96:ee:a3:66:74:18:43:06:ee:6e:a8:db:c8:bd:f0:
d2:a2:b9:8c:a9:f3:0a:6d:d7:9e:02:f6:12:82:23:
e5:22:df:a1:9c:c1:74:e9:49:2d:0f:d4:84:05:d4:
2d:73:bf:30:d2:09:00:17:07:80:e2:bf:72:4a:00:
df:00:c7:6a:a5:31:c6:7c:67:7c:0c:4b:53:da:bd:
f7:18:c4:6d:d7:bb:2d:1e:32:78:cd:33:b8:f8:a8:
9b:e3:43:1b:f9:22:d8:87:47:c9:38:be:41:5e:8d:
d7:5f:21:1b:28:26:aa:01:8d:e1:fd:87:76:c9:66:
d1:5b:b3:cc:4d:ec:59:50:38:0a:39:81:3e:46:e1:
68:bc:8c:6a:b1:60:15:cf:05:2c:17:9c:28:c8:24:
e9:61:9c:87:c6:1c:59:26:52:b1:e2:4e:19:06:86:
7e:e2:d4:d8:d0:32:a9:5f:df:ed:66:26:22:bb:b8:
b1:da:04:36:ba:d2:9b:45:2c:81:4a:1d:1b:82:30:
53:c4:60:47:d0:d2:87:9d:77:7d:4d:00:15:c6:85:
a5:7c:b2:54:70:d2:66:6d:01:46:ad:2b:fa:08:be:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:C7:60:9A:9F:A0:B6:2B:BD:32:1D:A5:44:6F:43:6F:FE:81:F7
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dd:de:88:77:d3:ae:bc:f9:5b:60:4c:61:89:3e:88:7c:ff:
0c:be:91:85:ef:15:a7:80:1e:49:e0:0b:48:82:92:11:ef:58:
70:d7:51:70:5e:e0:ce:69:2c:c3:d7:21:6d:db:0d:6a:bb:65:
b3:d7:04:fc:ca:18:5a:01:74:90:3f:10:cd:71:8e:33:59:8a:
f8:fa:cc:96:2c:0f:45:6f:02:46:4a:fa:ea:f7:e7:9e:4a:4d:
1f:a7:5a:8c:ad:0b:d9:d0:fb:7d:c7:94:d3:e6:dd:6e:e3:43:
96:c8:17:f1:0c:33:67:98:0f:98:fd:88:69:e0:a1:c2:2e:b1:
b9:1f:31:7a:b5:78:9e:a6:5d:d8:15:69:f3:73:86:e8:4e:4f:
80:4c:00:e3:b5:83:86:a9:eb:c2:e7:f8:8b:e7:1c:53:72:9a:
e1:7d:a2:2f:0f:6f:bc:ae:53:f9:32:1e:f3:b0:b2:49:34:52:
b0:ec:24:de:96:85:99:15:1a:89:24:ea:08:b3:c4:d9:a9:13:
92:44:16:f7:5b:88:db:25:96:9f:5a:ec:82:3f:90:c3:0b:36:
46:7c:98:65:03:78:c1:81:b1:71:dd:90:49:f2:bd:88:48:6c:
96:dc:dd:7d:48:15:d1:7a:61:67:93:17:d7:95:17:50:cb:67:
04:82:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:30 2025 by rpki-client