Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: rg54QjIWp7QJxh9FiaCKq1F7zsT/Lya3gBmlCOfAzgE=
Subject key identifier: 22:6D:FD:00:79:AB:4D:52:B6:4A:E6:E7:50:6A:0C:1D:28:A0:08:37
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 0194BD4E76ECB0EBD54944C05B73389F78BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: ktvm1/Fm02oMyJUfaTfDds3aoW5cHgmlwYgneF+FUs8=)
2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=)
3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=)
4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:ec:b0:eb:d5:49:44:c0:5b:73:38:9f:78:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=226dfd0079ab4d52b64ae6e7506a0c1d28a00837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:88:56:64:48:6a:33:96:3b:fd:5a:ef:a8:
38:2a:fc:ed:2b:07:4b:3f:24:41:99:d5:cc:78:35:
be:0e:3d:b1:cc:1c:cc:6b:97:7a:30:da:7f:be:7c:
ee:c4:7a:79:46:a8:7d:31:ce:3b:36:94:5e:49:61:
61:c5:ba:e6:f8:42:bc:33:e7:ce:f0:e2:9a:5a:02:
99:1a:25:93:2e:5e:64:66:61:65:e4:21:5a:fa:06:
da:ca:81:46:42:fc:ee:ce:7d:96:8e:03:0a:7a:0a:
3e:fe:01:b1:01:21:c7:6c:b7:c8:d2:c6:78:61:5d:
e8:f6:25:0e:96:40:28:4c:f4:da:b9:31:88:63:a7:
d1:c5:a6:a2:c8:0f:32:5a:e8:ac:b3:a8:c5:4b:9f:
69:bd:76:42:14:ae:13:4b:66:dd:8c:08:8e:cd:23:
d8:72:b2:82:d0:03:da:70:58:9c:e0:35:b8:41:e8:
9b:6e:04:74:2b:ce:c7:e2:4c:fa:80:87:3e:86:69:
a7:e8:c6:50:19:92:a6:34:91:ae:3a:b1:a1:92:58:
32:68:07:48:88:e9:95:a4:ef:e0:72:e7:1d:96:91:
13:f8:5e:7d:73:3a:ef:cd:04:b7:1e:31:9f:53:9e:
c9:ca:0d:16:d8:70:d1:1d:2b:d1:e4:ce:61:81:97:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:FD:00:79:AB:4D:52:B6:4A:E6:E7:50:6A:0C:1D:28:A0:08:37
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:56:b6:e2:ea:68:49:31:0f:7c:85:8c:3d:f3:0b:b4:62:5c:
5b:18:e0:62:d8:38:2e:49:bb:ef:a9:ce:0e:5c:3b:40:d4:49:
38:c3:55:3b:c3:8b:7b:fa:52:a6:1f:17:f2:56:69:c9:1d:8d:
e8:ba:a4:65:fd:d6:68:0f:c3:91:11:52:d8:0c:dc:be:b7:ad:
1f:fc:1e:d3:ec:8f:9b:16:97:3e:71:a1:df:82:c9:54:d5:d1:
74:ed:c8:e2:cb:d6:f3:00:5d:d8:66:d9:57:d3:d6:e5:40:38:
39:05:1a:94:ef:7e:a7:d8:5b:5d:f5:a1:16:2b:dc:64:6d:b3:
d1:99:1b:78:c1:07:88:22:1e:5d:69:f2:5a:1f:fc:d5:9e:cb:
e5:a7:38:51:29:81:26:93:7a:4a:9a:f2:26:c5:e2:07:33:48:
89:09:fa:0b:bd:d3:ae:38:8f:a7:7c:8a:b3:a8:2e:4c:00:33:
19:43:7c:8c:c4:a7:45:07:84:65:59:c1:3f:72:78:96:97:34:
d0:ec:1f:7b:65:8d:c8:20:1a:bd:a5:01:53:9f:2c:ec:8c:8c:
3d:32:a9:bf:9d:4a:b1:7e:a6:8e:e9:2a:ef:45:b1:c0:dd:7b:
aa:bb:4e:3f:17:bc:7b:49:53:4a:be:77:84:03:bb:66:56:1c:
99:8f:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:25 2025 by rpki-client