
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: NcNHRLRwrS3RUV1sHIKSrGozuFk5/i/DXeFvowQI9N4=
Subject key identifier: 67:1E:0F:5E:55:23:82:7E:83:BE:B2:F2:E6:66:AB:75:1A:D2:A8:2A
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 0194BD17A77756DFDC32AAA8AD0368B95A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: 1lgeXOknyqhjCKolADbOKUykOg0zj0F5DocppqQ1+P8=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:77:56:df:dc:32:aa:a8:ad:03:68:b9:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=671e0f5e5523827e83beb2f2e666ab751ad2a82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:d2:7f:23:36:17:36:ad:3a:bc:45:fe:6d:
f1:87:78:c6:e0:85:7e:78:18:f5:06:f0:5e:60:08:
1a:3f:86:ec:58:62:90:4a:0b:a0:c4:c9:22:d6:7e:
dc:b5:33:6d:47:e6:3b:2a:cf:8e:22:e9:f9:6d:98:
8c:48:60:7d:e0:8f:75:19:a3:1b:90:23:a0:f5:31:
42:9b:bc:08:fd:83:bf:99:08:86:77:cf:28:22:f8:
eb:f2:60:19:8f:94:a2:23:4b:9b:80:1d:c5:f5:09:
18:bf:9d:28:a9:ef:f1:54:bb:87:35:1a:eb:24:b1:
f4:81:ef:89:bc:d8:63:07:c0:d2:cf:8f:26:a7:f3:
db:7d:3b:1b:e9:59:f0:bd:22:06:e9:45:2d:19:28:
81:5b:0f:34:9f:ba:d3:a8:b7:19:1c:96:53:e5:ca:
3b:0a:89:49:63:0c:1f:38:83:04:ba:cb:fb:49:ef:
19:25:db:3e:ad:fb:e8:e9:26:e9:a0:4c:1f:48:d3:
8b:65:0b:a1:e0:48:63:da:d9:f9:87:17:4c:23:3c:
9d:3c:6c:3f:22:9a:e5:3c:53:f2:b2:ac:11:1a:04:
ef:d3:80:a5:6a:f3:9d:6b:12:cb:ac:95:0b:6c:cb:
6a:1a:c3:eb:f8:7b:c2:e0:ba:7b:5f:e2:a1:1f:4c:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1E:0F:5E:55:23:82:7E:83:BE:B2:F2:E6:66:AB:75:1A:D2:A8:2A
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c9:32:a7:04:96:c0:b8:de:9d:64:38:d4:12:d9:eb:9a:6f:
37:6b:73:54:d6:ae:ed:3b:2d:d2:13:69:44:ca:ac:7f:75:d1:
8b:c2:04:ac:89:8d:26:f4:f6:54:b3:a7:9c:ca:49:db:84:24:
71:90:7d:3a:df:3c:b4:c6:d8:d6:d7:26:56:3d:94:8f:0e:30:
74:b3:85:b4:60:3c:95:d2:52:9b:29:b4:3a:42:7d:0f:cf:31:
cc:22:92:56:5c:11:31:62:2a:24:e1:62:f0:ef:a0:74:8a:8e:
66:f5:8f:6d:14:df:4f:5b:73:74:01:36:a1:eb:21:fa:b8:87:
6b:1a:41:34:fd:4d:3f:7b:1f:18:3c:89:f1:90:25:23:9e:cf:
8b:ae:ba:b8:fd:8c:8c:d8:8a:aa:6f:8e:a6:a0:e6:95:43:53:
c8:28:b4:77:f3:f7:9a:35:ea:1a:ce:c5:ce:f2:62:a5:73:af:
fe:07:51:e3:99:06:63:80:46:6d:6f:e2:32:ea:e1:3c:51:f0:
c5:a5:c2:d7:dc:10:dc:0e:6f:5f:7f:b4:ce:d7:c9:0d:27:4d:
a2:f9:47:2a:40:98:1e:80:fb:ad:78:a0:05:e4:24:b2:bb:71:
f6:d1:35:4e:d5:20:72:5b:bc:35:1b:73:03:2a:5b:59:cd:05:
93:a0:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client