Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: a6UaPY4jzqVlCONT5kqyd9kbbwrHjGi2EBgRGixmVGU=
Subject key identifier: FA:BC:3D:5A:9D:97:33:87:7B:6A:72:0A:25:17:A5:07:07:B0:87:71
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 0194BC3C078C533630EDC2F4AF5C2B87A604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: qXVG3Vww2+oBJc6RBZZ7F8SyU7XMo66mN2PezguRJO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:8c:53:36:30:ed:c2:f4:af:5c:2b:87:a6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=fabc3d5a9d9733877b6a720a2517a50707b08771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:a6:b4:7a:11:50:49:4f:77:54:97:03:b7:
a2:f4:89:71:82:1b:06:bc:de:00:54:0b:1f:ce:6b:
7d:da:a4:b7:e4:16:d0:27:ae:80:d6:86:b0:fe:73:
78:16:85:60:7f:a2:40:83:1d:7e:f5:36:6f:cf:a8:
26:a0:86:32:a6:e1:f9:24:6e:5d:e8:df:4c:26:dd:
cc:d8:33:3c:fb:5c:5c:3a:1d:85:64:2e:ce:60:50:
95:b5:d0:1c:6a:54:e5:8d:ad:5b:02:26:f6:4a:92:
cb:81:e7:5e:0b:63:7f:df:87:2b:fd:c2:3c:b8:3c:
0d:e4:ff:63:e2:c0:b7:bc:f9:3d:fa:9f:70:0b:c7:
52:3a:5b:3e:c4:d6:ce:24:2e:ed:d0:df:98:3e:94:
54:d2:13:0d:18:5e:f1:db:a6:9c:41:16:4d:ff:0c:
fc:02:35:f4:e4:79:12:2b:41:7e:67:a3:b5:6f:95:
24:e0:03:48:38:15:ce:96:46:6d:26:c6:6f:3a:33:
bc:01:da:d5:cf:93:ae:dd:7a:72:9d:bc:41:58:db:
53:2f:47:d6:eb:72:0c:b7:8d:7e:59:b1:0b:27:d7:
de:12:3d:61:27:a7:ce:c7:fe:0f:08:7d:df:10:9e:
25:51:c4:36:af:6e:17:22:2a:59:5a:08:62:e7:29:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BC:3D:5A:9D:97:33:87:7B:6A:72:0A:25:17:A5:07:07:B0:87:71
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:58:c1:af:81:b8:31:15:f7:1b:df:a2:9c:78:4f:4d:5a:b9:
59:21:56:b6:64:75:94:c6:65:a0:22:a0:f1:ea:98:44:f4:df:
7f:f4:0f:bc:fd:00:28:39:cd:2d:6c:36:b6:22:43:1f:ea:b4:
10:e0:e5:74:8c:36:aa:48:3d:11:37:16:61:bb:54:dd:4f:35:
28:d6:ad:62:cc:e9:50:21:54:df:0f:c0:1c:d0:58:b9:59:43:
04:2d:ca:49:01:39:a8:02:38:70:1c:01:5d:16:a6:7d:38:cc:
ea:0c:97:98:46:6a:f0:2c:bf:87:52:94:84:a9:85:5c:7e:ae:
1b:01:10:db:82:20:be:03:11:3c:74:e1:1f:47:ac:69:a4:b7:
53:14:49:ab:7f:7f:d1:0c:96:10:ea:58:9d:40:51:21:2b:20:
3f:e8:2e:87:c5:64:5d:36:86:d0:c7:7c:ed:89:99:52:5f:3a:
30:2b:91:0a:dc:e8:cc:33:59:c9:27:9a:9c:06:39:05:e4:bb:
cd:32:d4:b0:66:69:de:49:0e:3b:a4:8e:6f:cc:1d:a6:36:10:
fb:0c:e9:ce:67:8c:a0:0f:df:be:86:d2:78:5e:6f:4a:7c:6b:
af:d9:05:55:ba:a8:45:f2:87:0f:25:3e:5a:ce:fc:5a:02:bd:
cd:db:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:42 2025 by rpki-client