Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier: RnuN1wwRvy/fNZl3h1Kh4V7Vby4TKiOKACfAITVxM9k=
Subject key identifier: 14:B8:D9:23:34:C5:52:D2:13:27:BF:CF:4B:C6:43:57:22:B3:71:85
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 0194BD856C4F52DF97C18A79692CD760FB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: L6BmwALeicC8VgFsadJhZLZOhdw.roa (hash: jlbIuI51ox4C1wny8/EXm0XGuTxyG7RmZ5JEvI5tNCo=)
2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: amcF3IzjjJg9VYS0qg33li6ZnEWIZs9pqyTu1GVdX6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:4f:52:df:97:c1:8a:79:69:2c:d7:60:fb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=14b8d92334c552d21327bfcf4bc6435722b37185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:3a:85:e3:67:b0:35:3f:6d:c7:86:33:14:
0f:e4:f0:bb:dc:f5:b7:92:ca:dc:93:14:fd:4a:40:
90:a7:ae:7f:25:d9:57:01:9f:82:38:c0:33:88:a0:
61:4c:95:09:88:83:8a:c8:62:50:56:4b:df:2b:c3:
69:f2:20:c0:54:ab:7e:b1:95:db:e7:f5:21:c0:f6:
d6:b2:65:91:d2:98:e2:a8:37:14:64:47:3c:cd:2f:
df:31:d7:82:18:33:a9:d5:6e:dc:3a:e2:9e:25:20:
99:33:0f:c8:40:66:fb:55:de:76:a4:85:72:3e:34:
39:f8:ca:bb:1f:57:e2:7a:7a:11:fc:28:e6:25:a6:
77:62:18:de:c6:80:f8:72:6e:e8:87:50:8a:c4:82:
0b:70:d7:1d:48:ab:c7:41:df:e4:4b:90:87:6c:66:
78:9a:33:42:5f:1b:dc:9c:9b:5c:2d:c1:8b:0d:e5:
dd:af:92:93:5d:5d:cb:8e:d2:1c:50:55:94:47:f4:
91:0b:0f:82:01:9f:77:da:5d:6a:73:de:59:a8:a6:
36:06:bd:60:f9:ee:94:cb:5d:71:7e:3b:9c:ae:3b:
ae:05:d9:ae:5d:49:8d:5c:a4:3d:d2:90:ba:89:85:
c0:53:08:38:5a:4e:09:68:ae:f1:34:6c:8a:41:05:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:D9:23:34:C5:52:D2:13:27:BF:CF:4B:C6:43:57:22:B3:71:85
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1f:88:85:63:52:03:51:a2:06:29:2f:5d:eb:72:cb:d2:3c:
c0:6b:67:64:1b:42:83:15:58:41:44:9a:9f:1d:11:38:33:63:
0c:87:fc:e7:e1:42:64:30:53:5c:1a:08:3d:d3:06:56:2d:77:
be:7c:bf:c7:9b:3d:36:b1:ff:cc:e3:2c:61:11:ab:6b:a7:0d:
e5:bd:d9:fc:45:fe:44:7e:13:5b:90:8c:89:24:b8:d9:c2:4e:
3d:a0:b4:5e:54:2c:bb:43:e0:a5:f4:51:58:04:6c:5b:51:b1:
41:4d:8b:9d:66:07:0f:fe:49:0d:c6:a9:18:c5:73:7e:09:b1:
f3:c5:f5:c4:8e:5c:66:e6:00:a4:15:10:f5:81:3b:36:76:8f:
6c:01:63:3a:fc:24:bc:5f:c0:7b:2f:ab:85:48:dd:9c:d9:50:
06:bf:38:56:08:03:ff:39:01:ee:a0:55:8c:f5:1b:b3:1f:6f:
e7:0d:fd:4b:31:e3:56:98:4d:9b:ad:4b:6a:5b:9e:e1:eb:ab:
4b:85:dc:51:de:c8:1a:ff:d4:b9:f9:cc:73:ee:13:61:4d:99:
b6:6a:28:d9:2b:cf:2c:e3:fb:e9:41:bf:a8:5b:05:0f:cf:92:
3f:fe:ed:3a:1c:9b:f4:09:d8:63:86:61:5d:80:f9:ab:8f:cf:
c3:26:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:15 2025 by rpki-client