Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: J2vHX1Q0VNeD5y4cwb4brJ4cX84GXbFckFEBRxgNWq0=
Subject key identifier: 55:33:68:4C:C3:31:EA:70:93:BB:5A:E2:42:81:31:06:15:B6:F5:D0
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 0194BD857548F849289ADFEA4EDB1D7A0638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: 78Vgp/W23WjpaM4oHBd639uhZCnJ3c9uySqptH6tvFk=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:75:48:f8:49:28:9a:df:ea:4e:db:1d:7a:06:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=5533684cc331ea7093bb5ae24281310615b6f5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:a0:93:83:c6:d9:0a:cc:59:97:98:90:a5:
9b:5d:5d:bb:4a:5f:0f:e8:fe:fd:4c:3c:88:b3:13:
55:7a:ed:6e:47:c4:0c:df:54:12:30:ae:81:6f:16:
81:6b:f5:6d:d8:28:7b:86:d6:0c:a6:dd:54:f5:cf:
2c:f5:94:24:32:dc:8d:99:dd:b9:d5:c7:cc:8e:25:
2b:b4:67:e2:11:92:7d:77:1d:9a:9c:58:9f:5d:d5:
03:4a:81:94:6e:9b:29:09:14:97:79:ba:8f:4b:c7:
32:ef:50:66:40:67:90:2f:df:ea:97:ce:5f:c5:9c:
bb:02:cb:5e:e4:9f:dc:0f:a5:8d:ad:d4:c4:74:99:
52:d3:55:8e:cc:71:12:9d:33:d5:08:1f:e2:15:dc:
94:c5:79:54:b2:fe:99:ec:3e:e5:17:c9:1b:7c:b3:
cf:0f:fd:d3:28:0e:72:74:33:7f:9c:d6:b5:42:0d:
69:71:75:f5:5c:70:37:97:3e:7d:a8:af:54:4c:44:
08:bd:28:b0:21:19:67:de:79:35:39:26:6e:9e:be:
ef:37:f4:4f:76:4c:99:1f:d5:80:70:3d:cc:39:20:
e2:77:3a:ac:78:1e:26:b3:f5:66:cc:90:c8:55:d6:
dc:20:18:65:a8:fd:ce:79:fc:99:09:80:cb:00:32:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:68:4C:C3:31:EA:70:93:BB:5A:E2:42:81:31:06:15:B6:F5:D0
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:08:25:a4:b0:d6:f4:af:65:7a:2e:25:da:7d:a2:3c:e7:90:
75:7b:34:c7:92:5e:8d:ca:1f:d9:f5:01:54:1c:e5:0f:37:99:
a9:fa:c9:5a:fe:67:98:53:04:2f:b1:57:64:43:33:8d:fa:44:
b8:6c:ab:7e:f5:24:2e:1e:46:20:3d:9b:75:63:42:b5:b7:00:
ea:24:44:57:85:8c:60:fc:f4:0b:7c:24:4d:72:33:2c:92:25:
e8:48:d9:9f:0e:83:27:7e:75:7f:5c:5e:f9:84:c2:db:c0:6a:
16:2f:8b:84:b8:f0:05:fe:9c:f5:fc:08:76:50:41:7f:f1:96:
99:cd:8b:00:d0:6d:49:d1:ae:7e:11:83:1b:32:b9:aa:b2:82:
ac:82:bb:1d:e5:70:e9:ea:ea:e0:05:f3:68:e8:4f:ad:5c:fc:
8b:40:14:f0:97:bd:34:e4:d9:32:87:c1:3d:99:98:d4:c4:25:
6e:95:94:bc:a0:24:be:1e:47:67:79:4d:b1:6d:2e:2f:44:49:
12:12:68:38:7c:0a:68:96:be:04:c0:85:64:19:8b:27:24:1f:
0d:5e:f2:da:cb:81:14:22:34:4d:32:04:31:46:8f:81:04:37:
b4:1a:54:ee:8f:b5:90:3e:1d:6e:37:02:48:19:0f:d7:42:af:
3e:31:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:08 2025 by rpki-client