Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File: dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier: wpZ1PAZYtEFOWVfWL7ytClXltuZLkD7scyQo+js/g7A=
Subject key identifier: 2B:79:9F:0D:FF:6C:2B:06:33:78:50:2E:DC:1E:7E:5F:2F:21:79:61
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 0194BBCE9F72AD1D6F1AFA225AE094D4F75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: 0gep-REqlULawvS-x4T-wK7S7GA.roa (hash: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=)
2: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: aRj7RklxLHc+QA6LOvWHcEeC4tMNQKcAjam4nao0V3s=)
3: q2GHYUm5i3WhdcmmiHRV7dHQc3c.roa (hash: LL/KUGJFOPET+WFhYf5RZ0NrlCKJmdTDtHdJCTBDBnI=)
4: wN2TdkfIPR3J0gvl0DtgYNB7D9w.roa (hash: NqvC6VGS3DEUxOPhIZWiZLcfYzHuOJ6bd3D616XpZos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:72:ad:1d:6f:1a:fa:22:5a:e0:94:d4:f7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=2b799f0dff6c2b063378502edc1e7e5f2f217961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:a2:93:63:39:44:3f:34:aa:dd:61:02:53:
f2:1f:1e:f8:bd:9d:a1:69:8d:7e:83:61:34:9d:b5:
d1:50:e8:7d:ec:6e:b5:f4:8c:72:f6:2d:f1:96:f2:
f4:11:49:45:be:9e:79:b8:ae:f3:88:f4:1f:2b:4d:
5c:2d:e0:f5:33:ce:92:e4:fc:06:c8:8d:f9:9d:2e:
e0:30:17:a1:d1:ed:fc:3d:fc:8a:e1:fe:eb:36:8d:
f4:e8:82:32:36:95:da:a1:4f:f7:50:0e:27:ec:47:
16:68:d7:a3:98:0d:3a:7e:5a:58:b6:d9:c4:1b:bd:
0d:db:6e:be:bc:75:d5:a3:c0:97:c9:c5:86:b4:ab:
44:36:23:fa:d5:33:2d:7e:84:da:80:1c:88:c2:a3:
b6:02:04:14:82:65:ff:a6:cb:ac:7d:d0:c3:94:af:
cd:9f:88:1c:43:8c:3a:df:17:b7:5e:a4:57:88:7b:
47:b5:32:6f:4a:d2:2e:74:bc:1d:b1:31:39:c4:fe:
44:ad:03:d1:06:af:f8:70:a0:56:0f:06:0d:15:09:
ff:f4:c8:fa:8b:70:21:65:7d:a8:0d:7c:ce:21:84:
bc:b1:bb:98:6f:39:ff:a9:86:65:fd:79:b1:9e:76:
97:b3:48:b2:1b:55:b9:61:0f:8b:94:c3:78:76:90:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:79:9F:0D:FF:6C:2B:06:33:78:50:2E:DC:1E:7E:5F:2F:21:79:61
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:51:88:dd:43:41:62:fb:c7:96:f4:7d:4a:82:42:ad:af:fe:
5c:74:9a:23:a8:c9:47:67:72:53:21:0b:e8:70:bc:ca:ef:40:
25:d7:ef:ad:1e:f9:81:f7:cd:19:47:de:ac:46:96:35:b4:f2:
74:82:09:65:23:cd:29:d0:f0:5c:2f:77:ec:60:f4:26:5f:fc:
c5:d6:4c:11:ec:7b:b0:79:25:ff:0f:7e:c0:75:c6:60:b4:a8:
31:be:1e:d2:96:4e:83:70:b3:1f:43:4f:3f:00:25:31:a6:7f:
be:75:41:ec:e9:48:5b:fe:0f:b6:b7:3b:c4:7c:f3:ba:90:55:
43:a3:2d:78:78:30:cd:b8:d1:33:47:be:ae:1b:88:bc:61:80:
8c:00:79:b6:48:c2:4a:e8:03:d4:f9:8f:b5:2f:78:26:a5:59:
45:1d:4b:87:c3:b6:cc:9a:b0:f1:0b:e3:55:2b:60:bf:c0:43:
43:16:a3:47:96:29:59:1e:40:2d:57:9f:95:df:03:65:5c:a6:
34:52:6b:db:7d:f2:68:5b:93:1b:b3:c4:af:1b:f0:1b:30:bd:
80:48:c5:e0:75:08:f5:f8:d7:9b:6b:c8:3b:ff:42:c4:4f:04:
8b:a6:f7:90:28:20:9a:af:52:8b:eb:d3:83:37:d9:58:db:c1:
94:42:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:51 2025 by rpki-client