Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
File: d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft (raw, json)
Hash identifier: OS5kCVI+fYlt96Yd0awO2X2AyrPH07S/Cizd97KCVQU=
Subject key identifier: 1A:8D:61:48:88:D5:C8:84:13:81:59:23:FF:CC:F4:4D:E2:6C:62:C3
Authority key identifier: 77:4D:21:5C:AE:DB:05:0D:6F:6F:E8:42:6D:50:58:AF:E2:9A:A8:96
Certificate issuer: /CN=774d215caedb050d6f6fe8426d5058afe29aa896
Certificate serial: 0194BC3C0A8FFD333901FCABA1DA7A3281F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d00hXK7bBQ1vb-hCbVBYr-KaqJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: PkCW-_NsM-T7UPkn9ndPg_lm2Cc.roa (hash: 6zURgMS5q85VCfD90tOCn/JEDDZzrGjQCgloW9Hyt6U=)
2: d00hXK7bBQ1vb-hCbVBYr-KaqJY.crl (hash: P9W4XAsKZTF1ThHHFZpWOPKq/NtZXvSdP4qJ5Z4MUSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0a:8f:fd:33:39:01:fc:ab:a1:da:7a:32:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774d215caedb050d6f6fe8426d5058afe29aa896
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=1a8d614888d5c88413815923ffccf44de26c62c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:b4:8d:dd:95:43:c8:37:61:53:86:29:49:
d2:c0:b6:96:4e:f3:aa:5b:a6:d5:6e:ae:35:07:01:
24:00:a1:86:46:e3:a0:c5:4e:2a:8a:5b:9e:dd:83:
f6:a7:b5:32:47:94:12:13:9e:5d:ba:23:95:a0:5f:
a9:af:40:02:eb:69:cb:94:3c:8a:05:3a:ef:2c:cd:
b2:5a:5f:0b:23:72:34:68:4f:60:c0:4c:12:94:8f:
83:02:f8:ec:94:47:cd:0c:8b:a1:72:b9:b2:bf:0d:
da:b6:32:52:87:e5:b7:f4:4e:8a:77:44:0d:d4:e5:
61:00:6a:c3:98:2b:76:f5:aa:8d:01:61:65:20:75:
43:b5:4c:c5:a0:5a:c3:a2:1b:86:ca:df:4b:35:85:
fe:73:60:d4:4c:27:a3:7b:98:25:eb:a2:6f:29:98:
88:73:57:49:f8:77:dc:3a:6c:e6:02:15:7e:7a:c7:
d9:4b:3d:32:4d:6e:d8:cc:9b:d7:8f:3a:09:61:e1:
ca:51:a3:cb:1a:b6:f2:fd:9b:dd:ea:08:63:6b:0b:
33:79:45:61:2d:d2:f2:11:3f:ad:8b:a6:c8:29:43:
24:e1:9a:d1:0c:52:7f:d4:57:7b:df:b1:80:a7:12:
75:80:84:82:73:c9:cc:1c:da:b7:78:f1:10:5b:6e:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8D:61:48:88:D5:C8:84:13:81:59:23:FF:CC:F4:4D:E2:6C:62:C3
X509v3 Authority Key Identifier:
keyid:77:4D:21:5C:AE:DB:05:0D:6F:6F:E8:42:6D:50:58:AF:E2:9A:A8:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d00hXK7bBQ1vb-hCbVBYr-KaqJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e9:6d:24:d5:ef:59:72:fd:88:95:79:68:70:7b:06:c0:28:
3e:d2:a5:3c:ce:79:61:7b:8c:85:55:b7:48:a7:25:3e:4b:62:
38:da:17:3f:45:67:54:84:fd:2f:2d:ea:48:47:42:bb:45:04:
55:1c:69:a4:bb:79:1e:f5:09:94:f4:e2:fc:8e:ec:be:a6:c2:
23:33:0a:ae:4c:0a:ed:4b:c7:e8:60:a5:e3:06:6a:1c:e8:a7:
bc:34:65:0f:47:d1:22:ea:36:d2:72:41:2f:c9:45:60:c2:9d:
37:c4:6c:8c:a1:18:15:a8:82:8a:90:f5:18:15:f3:c7:ad:dc:
5d:cf:ca:7b:13:e2:31:69:b4:31:64:b7:97:c1:a1:21:cd:c2:
79:a8:16:b9:21:16:cd:ef:a2:81:5c:c1:1e:a0:d6:d9:3a:d1:
0e:fc:74:46:ad:b6:50:dd:0b:b7:64:fc:26:80:e1:7c:8a:44:
70:94:35:82:50:df:0b:a8:06:95:19:7d:d1:09:59:b4:c7:a7:
20:8c:e6:db:bc:89:b9:2b:72:ce:71:49:d0:16:76:18:6d:f1:
62:ef:5f:b9:a7:a2:50:05:84:7b:c4:2c:86:70:4a:17:86:b1:
90:f9:ea:00:bc:6b:6f:ff:67:0c:be:35:2b:47:50:26:31:4d:
d0:19:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:33 2025 by rpki-client