Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: AK2oHJ2wO1X/Z1bFE1px3MnrENRq6rxzC2aFEtwAeIE=
Subject key identifier: 95:01:DC:7E:F2:7C:82:68:33:E3:16:10:93:21:92:1F:BD:73:0E:6F
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 0194BCA9A711F9E76359F60A77BFB29568CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: 9ccmk+y8WDiU9NAi+CVjVpngx5wce+K6y44wPdpmVWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:11:f9:e7:63:59:f6:0a:77:bf:b2:95:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=9501dc7ef27c826833e316109321921fbd730e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:48:71:1d:0f:a5:97:ec:26:29:e0:68:d4:
83:05:f7:a5:13:62:98:e5:a1:8b:92:73:8c:8f:38:
44:5d:de:3b:f1:c7:c0:a9:a0:e2:e5:a9:00:e9:ff:
1c:20:c3:b7:91:c9:81:69:1a:e2:24:8f:aa:dc:7c:
af:04:81:bd:77:72:b7:bc:c1:33:b4:bd:fb:97:16:
2e:61:0a:7f:f2:8f:8e:06:99:8d:9e:1f:51:8b:fe:
06:9e:08:31:52:74:a1:7b:9f:8f:4c:57:dc:96:ca:
f7:64:cc:b1:66:d2:38:44:8e:8f:e6:49:ba:b8:b8:
ca:9e:5c:ba:3e:45:e2:ec:22:7b:36:a7:23:6c:c6:
03:28:20:6c:13:77:ef:6a:ad:ca:d3:4f:b0:c2:9e:
ee:23:79:cc:ef:34:94:55:8c:d2:b1:aa:49:92:c4:
52:13:aa:80:b9:a0:48:7a:9c:af:1e:c5:ef:ae:4a:
55:80:d8:9b:86:9d:11:69:e8:12:f4:73:12:c7:c0:
d7:75:ed:ae:2d:c6:a0:a4:db:4c:c6:88:86:66:50:
7d:4f:6e:22:35:94:db:41:8d:c8:08:f1:4b:45:d0:
8b:72:d9:d5:b6:0b:66:55:5d:d2:2b:61:33:f1:b3:
69:8a:a5:b6:74:89:02:5c:18:20:a9:1b:6c:a9:5b:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:01:DC:7E:F2:7C:82:68:33:E3:16:10:93:21:92:1F:BD:73:0E:6F
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e9:a7:4e:31:5a:9d:4d:72:3b:9a:04:cd:cf:15:bd:4b:a5:
26:d6:6d:ba:90:17:75:57:e9:b7:cd:41:6f:ea:65:6d:91:b6:
84:6b:9b:cf:0e:5f:6f:02:43:36:5d:9c:56:70:61:b5:54:db:
b0:cb:1e:69:a6:93:05:b6:4b:d4:be:f3:9a:01:9e:55:f1:85:
a8:bf:18:39:8c:eb:66:e3:7a:af:72:90:10:75:96:c2:e0:d1:
7d:cd:ae:3a:92:69:2f:94:39:54:bc:ce:5c:1c:e7:31:cb:28:
17:ae:19:07:8b:11:38:62:84:fc:ae:8b:26:41:24:7a:7b:d1:
e8:65:ab:7d:2d:62:33:7c:3e:38:3c:96:c8:34:f1:5f:63:fd:
b0:e7:f8:a1:5a:60:12:72:8b:d1:72:db:ae:a4:0c:53:ba:8c:
88:b9:df:34:98:52:a9:b2:34:da:95:91:88:5e:0f:18:ed:9d:
a8:99:de:18:ef:2e:12:b8:ba:0f:7d:9d:d9:26:03:59:21:0b:
60:cb:09:1d:4b:81:d3:07:45:cb:c2:2d:87:69:a6:31:ce:92:
cb:af:b8:e4:9a:55:23:b9:b2:ba:2e:96:9f:c3:b3:4c:a4:c7:
17:dc:87:42:9a:b2:ef:5c:cc:cc:d0:4d:23:a7:92:92:71:f8:
94:f3:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:09 2025 by rpki-client