Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier: bqs/XwPfjUGXLIrF6c7iGnyBLuvtLNALwIGjpveU6Sk=
Subject key identifier: 95:E2:A5:B6:36:FB:DD:70:AA:02:47:05:E9:8C:0C:D3:4B:03:C7:F8
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 0194BC04AABF55033557D16892D73265A816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: 1B9VZrY9Z8BW2F4v4361xL4o98JPzSrtPUrLpS7Wc/0=)
4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:aa:bf:55:03:35:57:d1:68:92:d7:32:65:a8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=95e2a5b636fbdd70aa024705e98c0cd34b03c7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:73:56:9e:9f:e5:9f:af:ae:c0:c9:1c:3b:
f1:2a:39:c7:aa:3e:97:02:70:7f:7f:db:08:24:37:
13:e2:fe:32:b0:cf:e2:27:26:0b:ab:bf:99:96:9a:
22:dc:5d:5c:5e:07:18:f4:cd:af:88:5a:6a:0d:ee:
fd:96:26:2d:38:dd:08:85:dd:30:9d:0a:e7:6e:2e:
4b:0b:e9:fc:86:fa:0e:8f:f7:b6:26:99:4f:bd:0b:
ce:8b:5e:6d:7e:6c:cb:3a:ee:fd:fc:f9:6e:9f:a0:
a6:c5:ad:23:81:68:af:ac:55:67:60:24:b1:cf:c9:
ab:9a:0a:44:09:b9:a9:9d:3e:67:bc:35:03:9a:e6:
67:68:59:30:f5:e6:ab:3a:40:3b:4d:8a:20:96:aa:
d6:95:37:23:4b:e4:6d:96:bb:b4:c8:dd:3c:e2:56:
ec:1f:c3:7a:9e:f9:42:ca:90:a4:b0:b9:89:b9:6c:
20:9e:68:c6:76:e1:c9:4d:59:bf:ce:c3:03:89:93:
17:3a:7c:e6:92:c5:9a:f5:9f:69:41:61:4a:83:73:
01:2d:6b:93:aa:ed:24:4b:05:b9:48:92:f6:03:47:
c5:7a:42:f6:63:d1:92:e4:30:1c:4a:b7:b2:d6:87:
75:18:86:09:cf:e3:9e:46:74:2f:38:25:ab:ab:1f:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:A5:B6:36:FB:DD:70:AA:02:47:05:E9:8C:0C:D3:4B:03:C7:F8
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:2b:c3:54:6c:95:e4:0f:2a:6f:fa:de:3c:21:77:ce:d6:
fd:68:b5:f3:42:ba:f9:2f:12:b4:7c:a6:48:13:e2:9e:6a:21:
91:60:5a:6f:2a:d2:eb:d5:e3:73:b9:59:d7:e3:f0:12:ca:b7:
b6:45:7b:61:76:d3:cf:57:c4:9b:0a:b1:2b:a9:f6:8a:18:99:
ab:a6:63:19:5a:85:7c:c4:09:58:59:35:1d:79:1c:9d:fb:54:
e5:fc:a6:65:ba:36:09:75:e0:fc:15:a3:ea:83:84:5d:a8:73:
43:50:ed:f4:99:4f:8c:6d:7e:76:f6:2c:a5:eb:39:a3:25:30:
40:3d:e8:27:1c:a2:99:ac:ca:b7:1b:4d:51:19:9a:93:b6:77:
a5:59:bd:78:4e:19:a3:57:2a:e4:b7:09:7f:49:7c:88:93:a7:
3d:45:72:d4:3d:99:b0:df:d7:17:ef:b2:76:82:57:6c:11:4f:
7f:f7:2b:b8:62:f3:70:64:43:fa:22:18:c5:1c:cc:77:2a:46:
5b:d1:48:0e:16:6b:81:e8:97:cf:d9:aa:0d:da:c8:56:21:41:
ba:f3:6e:86:14:87:9f:f9:69:cd:33:9a:dd:1f:3d:3c:7d:a7:
d1:51:c8:41:8d:00:f4:38:00:d4:0c:fd:a2:d2:98:0a:81:77:
76:c6:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:49 2025 by rpki-client