Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: zzuy656Hp1AVrgdCY+wKjdbccn17bAXU4SzZD4Nww1c=
Subject key identifier: 90:13:A5:0A:BC:ED:7F:6E:3B:09:12:DD:34:03:37:10:AA:A0:C3:F9
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 0194BBCE524F0FEDF7232443FE6B2EAFC6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 135A
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: V6+SQGWkhTykzJrXJIYnFNwM06N37qAlj8/mNIAxiQk=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:4f:0f:ed:f7:23:24:43:fe:6b:2e:af:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=9013a50abced7f6e3b0912dd34033710aaa0c3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:38:ff:2c:41:fe:ea:87:c5:31:34:7b:9c:
25:91:f6:50:fe:66:fa:49:45:65:8c:ba:60:d6:6a:
d8:e2:a8:46:fa:a9:83:ba:48:aa:6e:a0:28:09:da:
e9:4b:fd:28:bd:9d:77:30:f8:76:fb:83:6d:04:d0:
55:07:29:26:34:6d:c9:23:b3:4b:e9:e0:7d:1d:75:
17:31:77:52:51:71:a5:7a:f3:2b:b4:e9:bd:c2:39:
c7:7a:01:1c:ae:fc:78:ec:02:83:60:60:bc:10:7c:
2f:7d:4e:92:e8:2d:aa:8d:97:61:5a:98:44:69:f1:
82:4d:10:f7:30:3e:86:8c:d9:22:28:75:13:ad:38:
f0:15:d7:bc:9c:30:9f:72:9f:38:3f:fd:c1:7e:e9:
b5:49:e7:12:ef:2c:06:67:f0:3a:2a:0e:0f:57:c8:
41:9b:06:77:24:5e:4a:9c:90:77:1d:48:67:4f:e8:
c9:ee:28:6b:c3:42:c4:0a:b0:e6:61:db:2e:78:c8:
fd:3d:e0:aa:19:1b:fb:9b:75:2a:22:d3:2a:f4:f5:
c0:a2:bd:89:e4:4d:72:0d:1b:0f:90:63:c1:ad:7b:
31:6f:91:ec:6d:17:12:76:c7:28:42:98:f8:e8:52:
b8:27:48:ff:ab:55:fb:21:4b:8a:94:bb:5e:d5:f8:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:A5:0A:BC:ED:7F:6E:3B:09:12:DD:34:03:37:10:AA:A0:C3:F9
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0d:36:ae:63:aa:58:04:49:07:ac:e9:c1:a5:1f:28:7d:d8:
fd:ca:f6:44:14:61:d5:df:e5:9b:96:0b:d6:c5:e8:4b:d6:54:
4b:c0:2c:51:b5:cb:0f:3e:6a:6d:60:b7:66:6b:ec:6d:d6:ff:
fc:7e:21:a4:15:43:92:4a:e2:2f:77:db:e0:df:51:3e:f9:d7:
c1:72:6d:18:dd:96:be:6b:92:30:9d:d5:d1:b1:65:f1:77:92:
cb:e5:19:d5:f0:a8:12:9f:ac:32:31:54:f6:41:1e:37:0a:b1:
a6:8b:d5:d1:fa:b9:9b:81:e9:ef:b8:79:9a:bf:45:3c:de:34:
03:2d:34:e1:b9:e8:10:1a:81:f6:2b:cd:1d:06:81:93:18:e1:
41:c7:10:dd:22:42:b3:d5:20:1a:ab:68:43:ec:a7:2c:b8:d9:
02:21:89:34:9b:1e:ae:4c:b4:94:7a:26:41:89:aa:fe:49:30:
28:4d:e8:f5:c7:4b:b3:1d:42:84:95:37:68:12:07:e6:3a:a7:
ca:08:4c:37:98:b7:e5:e3:ab:08:09:b9:39:32:d3:ab:d1:cb:
11:fb:ea:46:f3:63:94:4c:60:c3:4b:29:77:6c:b0:7e:da:e2:
0f:b1:01:d4:1c:70:e7:20:d3:c2:1f:1a:ae:b5:fa:c5:38:02:
36:46:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:57 2025 by rpki-client