Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: 62Crwkr/OyE379jOSdvHJkY1S5tbM6vFCOLg4BiCpPA=
Subject key identifier: 2B:9D:5A:11:DE:31:31:03:C7:87:A8:4C:0A:7F:CB:B7:BD:04:A0:1C
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 0194BCE0A4F43730CDF1A6987D9ACD4AF44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: KKmkY/33evEu/tMss1krPBPCKRrcXNy0ajkEd+RJckY=)
2: uuDHR9HmkHLAk2mPixMGSC4VhiQ.roa (hash: phZUXmZc8tYjh0YGllYM78ERPz6TnNhIvYtuZZy777A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a4:f4:37:30:cd:f1:a6:98:7d:9a:cd:4a:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=2b9d5a11de313103c787a84c0a7fcbb7bd04a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:37:a9:07:44:ab:53:8b:c3:1f:64:af:c6:
fe:29:01:e1:51:4f:a7:8c:5b:d3:cb:8a:2f:cb:91:
ec:a7:f5:ba:ca:1d:da:74:64:04:f6:08:f2:e8:5e:
97:79:2c:60:48:ae:06:1a:e9:d0:d0:b4:a3:df:19:
82:f7:86:ba:83:41:1f:7c:05:fb:bb:ff:54:0f:20:
ce:f5:25:ce:54:bd:a1:f5:85:e4:b1:12:43:8d:72:
ee:35:28:75:f0:0f:f5:e3:b1:27:98:00:c1:2f:a8:
69:1c:f5:50:60:b0:fe:b9:b9:c1:dc:9d:8d:60:b8:
ca:90:59:0b:cd:5f:47:fb:6b:cb:a3:14:3d:3b:bc:
6f:a0:f8:2a:be:a4:3e:c8:83:58:44:32:16:41:df:
a3:0f:ed:2b:6a:01:a4:85:ba:44:96:36:fa:ed:a7:
e5:50:f8:9d:84:f5:0b:09:71:66:af:3f:2c:ba:fc:
2b:b8:8c:fc:10:1d:29:f6:7f:b7:9b:7b:39:a3:a9:
4b:28:1a:21:14:3a:5c:30:f7:01:d3:dc:90:1f:f0:
d9:23:cf:5c:eb:2f:76:7e:47:45:6c:9f:79:d2:12:
be:94:43:5b:17:91:f8:f9:df:7c:b0:35:dd:97:4c:
82:6f:6c:c2:b0:2b:d7:72:78:3a:5e:ab:1b:41:84:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:5A:11:DE:31:31:03:C7:87:A8:4C:0A:7F:CB:B7:BD:04:A0:1C
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0a:3b:39:86:96:26:83:32:22:56:31:6c:28:f2:4a:57:c0:
48:ee:54:1b:f4:40:6a:91:4a:30:3b:ba:91:3a:ac:ce:7b:3d:
85:9c:6b:eb:8b:6f:dc:04:a2:a7:36:93:c3:7f:97:b5:2c:21:
b0:01:65:75:7a:3e:b2:77:43:c9:79:9c:57:88:1f:e5:f7:96:
49:ae:b3:ff:eb:1c:ad:ef:c1:fc:16:2f:d3:20:ce:f6:9e:ff:
11:a3:32:e0:58:e4:b5:77:2e:35:a6:c4:33:9a:13:1a:6a:5d:
83:1c:98:26:0f:8e:d2:86:3f:26:25:1b:50:fc:36:44:8e:e0:
4b:92:66:78:47:3c:9b:3a:fa:df:36:fb:3e:69:46:f3:54:e1:
a7:54:4c:ff:66:0b:98:b5:68:60:64:87:d7:8b:73:9b:cc:40:
97:a5:90:3f:e4:89:f6:1b:3a:c5:b5:d0:8b:c5:ea:01:15:a5:
8c:e3:40:58:a1:cd:bc:a3:d8:c7:a6:a6:be:58:be:9c:bc:9b:
2d:a9:e4:2d:fb:ef:d7:9f:82:37:8c:54:eb:10:b3:09:bc:4e:
24:fd:30:c7:3e:d6:84:e0:a4:4c:a1:a7:88:29:27:9e:94:14:
a8:ce:80:a6:47:92:59:05:e5:93:83:f4:f4:ab:f1:68:bd:cc:
7c:4e:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:02 2025 by rpki-client