Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: uhIKjik9iBDRG1e+TunMsW63I48n+I8xdwip9Y/k4zw=
Subject key identifier: 51:2C:6D:E6:48:3D:53:87:26:83:98:A5:B6:8F:F1:57:28:45:C8:2C
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 0194BCA9E1A78E7B864C379246203E847DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: 39/zqxckB52gVUyIJPCsZPtEBbqDJuCx64rp9wCDb7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e1:a7:8e:7b:86:4c:37:92:46:20:3e:84:7d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=512c6de6483d5387268398a5b68ff1572845c82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:43:b8:1b:79:9f:cf:b0:6d:cf:12:3c:28:
dc:46:b4:ad:96:c2:13:01:c5:cf:88:39:3b:da:fc:
11:f2:12:82:06:62:7e:48:50:95:99:d2:2a:12:d6:
43:d8:88:b4:10:87:cd:58:01:5f:fa:25:95:82:1d:
cc:9e:d6:94:78:6d:59:49:e2:29:25:cc:f7:e0:1c:
09:59:cc:1a:1d:d8:2e:46:df:da:c8:54:86:cc:59:
ad:20:a1:24:73:aa:12:d3:09:84:f8:b1:cf:27:17:
44:ef:3a:8d:8c:a1:c0:9b:26:be:5d:ca:c7:70:bc:
3c:a8:96:51:08:df:54:64:84:e3:78:2d:36:ca:a2:
c6:af:93:db:0e:07:12:ab:49:ed:27:17:38:08:57:
b0:dc:b4:c2:bf:9a:6f:42:f1:4e:35:18:20:35:d6:
3f:c1:f2:30:57:d6:04:20:79:a9:b6:45:46:10:14:
88:cd:2e:f9:6c:e8:54:20:28:24:42:10:ba:5d:63:
04:4c:5f:62:8f:be:a2:2f:31:43:ec:8c:30:fb:14:
6e:05:aa:d1:18:87:7c:86:0d:bc:49:7a:3f:07:c1:
2f:2c:6e:a3:22:2e:96:a1:35:4a:f5:74:59:d6:c2:
01:dd:a6:15:42:ce:33:90:c5:85:78:4a:b1:fc:8a:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:6D:E6:48:3D:53:87:26:83:98:A5:B6:8F:F1:57:28:45:C8:2C
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f1:4c:1c:06:5f:01:c4:c8:9d:c4:c6:cf:00:9f:b0:05:0d:
f0:d3:ed:dd:eb:27:a7:71:3f:99:c5:0e:03:63:c9:e2:6d:9f:
f1:b3:b7:16:65:26:44:0f:71:e3:98:aa:d9:01:fe:88:d5:ea:
72:b7:0a:9b:01:43:f2:1b:6f:cf:8d:15:77:93:77:b1:a5:20:
bf:62:28:43:82:ef:ba:8c:79:ef:2a:cb:4a:6d:29:77:88:2f:
f6:7d:46:4f:5d:d2:97:c4:bc:fa:ee:dc:91:c8:35:03:b3:4d:
16:55:c4:9d:ca:95:dc:af:83:cf:ed:02:80:3f:10:20:64:98:
9f:47:88:52:07:97:d2:48:45:de:64:f1:c5:1b:a6:fc:29:b3:
fd:49:71:42:56:c8:84:72:b1:e1:a1:f2:a1:0b:2f:29:e8:9d:
92:aa:90:3e:ae:3e:cc:3e:9d:6a:b4:ff:0f:f9:d1:9e:fa:a3:
28:f4:ab:45:ed:b4:dd:8e:93:ad:93:39:1a:1b:78:82:f8:95:
5b:18:bf:68:f6:41:56:d3:b1:8e:97:4b:b7:36:5d:ef:11:a0:
83:e7:4f:07:6e:06:58:81:07:50:0b:5f:13:4a:9d:67:a3:93:
7d:70:d1:8a:57:94:ba:47:34:3c:0f:6a:a4:0c:0b:b3:60:35:
eb:17:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:31 2025 by rpki-client