Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: UOEdQP6lKHIokt6aElVbLGKJHJ2Bd9Ifl7SflqKzejo=
Subject key identifier: C4:3E:0A:50:6A:DE:96:01:96:84:21:C6:8B:0F:AC:F7:B5:4C:98:83
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 0194BC3BC91DB79633BB06F97761865741AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: oZHwEN22pemziZMt/NmOMsjJARir3UJmVzpI7xp2b7g=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c9:1d:b7:96:33:bb:06:f9:77:61:86:57:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=c43e0a506ade9601968421c68b0facf7b54c9883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:87:8d:58:91:c3:2c:35:0e:3b:6d:4d:58:
73:2d:48:80:54:bd:39:5a:7b:1f:be:a8:7b:29:3c:
55:63:d1:ce:48:a1:f4:32:bd:f2:6d:b3:0f:35:18:
6f:94:b0:13:7e:82:8c:23:60:78:d6:f1:1c:25:b7:
35:0c:4d:6a:3e:40:3f:87:8d:87:3e:d6:54:2f:be:
6b:8c:d9:bf:a3:fb:a0:6c:f5:8b:3f:be:79:91:8a:
8b:aa:0a:d4:f3:48:4e:1e:2d:88:eb:d1:6f:7b:98:
d3:26:6f:2c:1f:13:f4:3f:6e:e8:6b:74:41:1f:be:
45:56:b5:93:71:64:a4:12:75:93:6d:50:c1:69:89:
5d:44:21:b9:ff:d7:c4:7b:9b:a7:26:69:33:d2:ec:
24:da:85:23:57:cd:63:9d:f3:fc:a7:f7:5c:6f:32:
80:08:4d:1e:54:18:9b:6d:ba:e0:75:8e:29:d5:6a:
c2:b6:b9:99:37:95:b8:a7:ac:86:78:ea:c7:ab:67:
5a:eb:88:13:b2:bf:7e:cf:3e:ed:09:6c:0b:23:4b:
00:c4:a9:7b:9e:3d:2b:9a:8e:3b:cf:34:ac:d0:63:
16:f2:64:ee:57:d5:73:71:06:cd:84:3a:bb:7d:84:
45:bf:44:00:12:65:70:43:1f:70:0c:a6:fa:07:bc:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:0A:50:6A:DE:96:01:96:84:21:C6:8B:0F:AC:F7:B5:4C:98:83
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ef:03:63:f1:e8:40:ea:b3:60:ee:a7:44:dc:79:8f:49:97:
67:ae:3e:f1:ec:b2:36:76:df:99:2b:7e:8f:a8:35:01:3f:dd:
e3:35:d7:5c:4b:3d:80:b4:ce:ec:c8:4e:53:3a:9e:23:3d:81:
92:b6:ce:ae:af:69:47:31:7a:e3:7d:95:72:c0:a9:4e:21:61:
5a:7b:c6:f0:b8:ea:63:44:6c:1c:11:c1:95:b5:f4:e4:97:3c:
ba:8a:d7:f2:22:4a:e3:c5:a5:9b:ac:5e:13:36:da:55:53:aa:
72:af:1d:a1:87:45:61:bb:ab:ad:b8:ea:d1:3d:ef:06:11:f2:
65:b8:12:47:08:40:4b:e5:5e:9e:5a:94:44:95:f1:90:f5:84:
cc:51:16:1b:45:45:f0:87:a3:88:46:85:0c:db:d9:a9:a2:0b:
f8:9c:cf:bc:cf:86:ea:f3:d3:39:e2:d7:e8:95:f3:29:61:e7:
6f:ed:48:ff:0e:6b:75:a0:9c:35:e6:21:ed:95:87:a6:b9:11:
d4:de:3c:ce:62:e7:6b:58:a2:9a:89:57:a9:3e:fb:f0:75:fb:
cd:e2:1e:1d:72:8e:05:0f:5c:39:8f:a6:78:e7:ce:55:54:b8:
94:55:0b:7e:d4:f5:c3:2f:8f:72:4c:d8:56:9c:e5:e9:51:75:
2e:52:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:52 2025 by rpki-client