Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File: _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier: BnVzzgsPCDaewqKoUmx7u5EbCHLEQ8inoKIyBhBTC6o=
Subject key identifier: 54:9E:40:E2:1E:D7:DC:AD:DC:A7:C0:8C:40:D3:65:96:2E:7D:B3:03
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 0194BC3C9938C29589424AEC33CE56708980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: EZTTi0DeKjOt5n50pGmAFCowsBg.roa (hash: E6d6xhT95nfb0o31mLYa+7IwZxSu5Vcz/JzrKKV4/Tw=)
2: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: jSLx8+uqY8oQ39raYL9Hg16/JOvNk8ezNgC93EV+z+A=)
3: _j56SkoPwjvw5J3-yiHS-OHaGdg.roa (hash: 8LANgZZ7cUUufNrH/hblrmKv7SFmglJPoUVHRC20Sgc=)
4: nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa (hash: HyT5REdDkPYj/vcE9InpMXDrNrWM+FwGj433uROaITI=)
5: rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa (hash: VOnvk/Pca3s41OyosIHhlUhIPKuz7htec6edKpEFyTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:99:38:c2:95:89:42:4a:ec:33:ce:56:70:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=549e40e21ed7dcaddca7c08c40d365962e7db303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:2f:a6:d5:5c:62:ad:3a:49:70:6b:92:db:
a7:c2:c2:fa:c1:42:bb:ee:98:06:6a:e8:71:5d:c0:
97:86:82:b0:b8:46:aa:4c:17:4e:9a:18:d7:38:36:
fd:11:5e:57:58:60:92:e7:e9:14:5d:e8:2c:ab:25:
b1:b1:2b:14:9b:0f:35:78:3a:1c:ad:f2:c5:fc:d3:
1a:78:e0:dd:fe:3e:d5:17:99:50:3b:0d:24:60:06:
8b:4f:fd:2d:55:85:cd:b1:bd:9c:35:72:04:c5:00:
03:bd:c5:23:30:ff:bd:fc:37:06:41:95:2e:56:4b:
a7:a7:ec:f0:cd:0b:2f:99:0f:cc:f3:d7:72:c9:64:
17:9e:59:7f:30:22:91:35:8e:b8:61:bf:80:9e:d6:
79:b3:95:6b:3e:67:37:2e:36:41:6b:7c:83:7e:c1:
aa:1a:b6:27:2a:bd:0d:21:1f:c6:81:6e:a2:11:67:
dd:dc:9b:b3:ec:49:3f:71:70:61:33:1b:50:71:c8:
da:e9:0d:93:fc:de:1a:5a:24:91:05:6a:18:ce:83:
a5:15:63:94:56:dd:ac:1e:c9:41:3e:8c:1f:79:b4:
09:fc:d6:67:24:7d:7d:60:3a:80:65:39:ed:d2:14:
26:d3:57:b6:dc:62:05:e0:c6:14:a0:4d:23:cd:61:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:40:E2:1E:D7:DC:AD:DC:A7:C0:8C:40:D3:65:96:2E:7D:B3:03
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:02:a7:e9:d2:5b:36:2d:52:26:d4:f6:d0:dd:8b:57:f6:
ed:70:be:8f:db:42:26:09:7c:be:bf:6a:88:07:d6:e9:71:8e:
0a:5c:16:f0:2e:30:08:3c:26:1c:b3:22:5e:4c:ef:fe:3f:62:
07:44:7d:01:88:b6:99:78:c8:95:0f:38:e4:45:7c:38:82:ad:
ca:f1:b6:6c:c7:86:c6:2b:ce:2f:24:b5:6b:84:11:96:a1:df:
b4:24:24:a3:1d:ea:8e:b4:6a:db:7c:e2:7e:f1:b5:99:66:e0:
55:39:16:51:74:12:14:56:55:bc:8a:1a:4d:71:6b:ee:7a:1b:
b7:7f:ba:13:2c:64:89:c7:0a:dd:7a:ab:3e:5f:67:88:13:22:
e9:ff:e8:cc:d9:84:93:32:ad:03:42:ad:6a:3a:2a:2b:e7:97:
d4:b6:e4:66:cc:ac:ae:6d:eb:0c:76:50:e8:f2:59:5f:de:b3:
02:7f:18:aa:5d:9d:11:2b:47:25:eb:1b:cc:bc:71:e8:ed:b4:
4c:53:d7:d3:c0:45:a8:04:95:38:22:92:e7:a8:80:03:31:dc:
d2:69:b8:cb:38:50:52:a4:66:5c:ec:27:8f:87:01:f9:e2:64:
6d:e5:6e:77:ee:bf:c2:76:35:a3:0d:a3:13:9d:71:70:7a:c6:
ad:e9:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:51 2025 by rpki-client