Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: HCyQ8hlarRN5zYcYYPvWiaPZ5PENl413K+w3w1EmlLs=
Subject key identifier: AF:8F:CA:5C:AD:4A:2E:20:D8:2E:87:1F:1F:A2:58:1C:55:B3:2D:CB
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 0194BC72858B20C905F80BF1A7E777399DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: 8FaV9Xmp/ANVg1PalewCkfPcfv4NwSDNtESAjIpSj2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:85:8b:20:c9:05:f8:0b:f1:a7:e7:77:39:9d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=af8fca5cad4a2e20d82e871f1fa2581c55b32dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:96:fb:53:d5:07:c2:27:bb:6e:e5:50:21:c4:
dc:9e:4e:20:85:98:b4:f2:8b:52:a7:30:cd:35:45:
d5:3d:da:fb:df:48:3d:ea:01:93:6e:cf:73:52:54:
26:b0:d9:e1:06:ff:28:2e:01:7f:32:4f:9b:df:dd:
bb:6b:ad:85:7e:da:67:60:8c:0f:18:56:12:79:55:
fc:1f:83:fc:51:30:36:ba:08:b3:37:24:70:1d:d5:
48:2e:87:76:c0:5f:f6:21:e7:42:f8:9b:b9:71:fd:
5b:9d:d1:bd:2b:01:a5:47:92:c2:36:9c:fc:db:8c:
3d:3a:62:f7:e1:f3:63:07:da:1a:4d:55:d5:19:29:
8f:83:21:10:33:a5:e8:6b:4e:24:5c:84:b9:3a:87:
fe:10:a5:1e:b3:8f:d2:a2:64:cf:0c:8f:76:b9:bd:
73:de:23:a5:19:f6:64:75:06:35:e3:0e:19:9a:2b:
54:0d:c2:c4:f1:fa:dd:6f:c6:6c:64:02:b3:8e:d6:
7c:46:01:cc:0f:f7:cf:40:06:b5:27:61:42:62:16:
1b:69:41:39:79:95:dd:b2:d9:97:45:88:8d:06:2e:
1a:78:a9:64:ae:32:f6:eb:4a:3c:c4:16:ec:20:af:
a9:41:72:33:65:85:86:24:1b:25:93:82:d0:1c:8b:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:CA:5C:AD:4A:2E:20:D8:2E:87:1F:1F:A2:58:1C:55:B3:2D:CB
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:04:2c:58:ca:08:86:92:24:bb:ee:5f:f0:d8:3d:04:33:e2:
47:05:2b:94:13:03:45:ed:5b:a9:86:72:bc:73:66:9e:70:06:
49:d9:22:e9:c7:bd:0f:86:b9:a0:8a:b2:94:5a:93:bd:f7:1e:
94:fe:d8:9e:96:4b:ab:df:b3:30:40:72:37:c2:1b:e7:e3:5a:
20:fb:89:e4:d4:d4:7a:27:25:b1:2d:cb:8c:6e:4e:ff:ea:4a:
75:fd:9e:a9:b4:bc:5f:e2:0d:91:c7:81:3d:c1:88:1f:c1:2e:
93:5b:ee:3a:9b:b8:11:00:cc:65:6c:25:c4:34:b3:b6:e9:f4:
00:e2:5b:7d:7d:b5:ba:dd:20:71:2c:ca:39:a0:73:79:9c:13:
c9:61:2e:8e:fd:19:33:82:d5:70:ae:2d:92:fb:4d:f9:9d:bf:
e7:49:58:b3:8d:15:9c:a3:a1:00:0f:90:6c:8d:0f:17:1f:8c:
5d:73:df:4c:48:6b:d8:93:9d:98:e6:8f:75:36:37:64:e6:ba:
f6:b3:8e:65:f2:79:7e:09:b1:7f:01:04:a3:20:32:9e:c8:c3:
52:6e:5d:21:4b:35:89:41:2b:29:ba:1e:ff:c3:6e:10:83:eb:
84:0a:fc:11:dd:c9:cd:32:2f:19:f6:61:11:c4:73:4c:1f:a9:
65:26:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:53 2025 by rpki-client