Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier: ALgHwtSdO2mOqvz+8j6uEdFoHG4a8ByOyzF55l+uD6E=
Subject key identifier: 96:44:13:A1:26:85:54:86:08:70:1F:9F:DD:2B:75:7C:CD:8F:4D:ED
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 0194BBCE64D9EE074B58E235914ED5818AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
2: 1-0HBv3Fd1KkBkj-DxZe8o1aVBLw.roa (hash: fHp5hUU8NEsF4hA+DQnUoKK+WZF2ycEP2oAVTR8mrkc=)
3: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: yZnzlOZw08bgW0WF7mLsKjMRxo8EQ0Mvwc20hhlF/eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:64:d9:ee:07:4b:58:e2:35:91:4e:d5:81:8a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=964413a12685548608701f9fdd2b757ccd8f4ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:64:17:5c:6e:69:fa:a9:69:aa:60:fe:7b:
58:c7:57:c2:58:ab:9d:8b:f8:d8:9b:98:81:03:6d:
f8:cb:b5:ee:09:81:ea:c6:c5:9a:82:f5:ba:1a:3b:
32:fd:b0:5f:a6:c5:09:91:29:ad:af:ec:e1:2e:7a:
b9:6a:24:00:00:71:ae:58:1b:f7:05:3e:41:18:c5:
45:c2:53:41:5b:31:b4:22:65:f0:23:7a:d6:ed:c9:
57:1a:18:7f:90:6a:93:e6:24:22:9d:75:c0:16:9f:
ee:9a:95:85:04:47:88:d6:c2:09:18:41:61:78:bc:
a2:7a:f1:51:a1:70:83:1c:aa:6e:4f:f7:8e:52:45:
9f:dc:81:de:cc:1d:96:85:74:1f:27:01:9f:e5:00:
a5:31:7d:09:76:02:f9:7e:3e:80:0c:9e:25:5a:54:
31:68:c8:0d:41:ec:c3:f0:b8:e8:73:0c:b2:fa:f3:
90:39:74:ba:77:a4:53:ce:15:c2:75:e5:97:12:89:
6c:5a:b3:bb:ec:8e:51:77:7a:57:ad:97:c3:12:6a:
97:b2:45:ff:47:e2:57:71:bd:c1:cf:ee:4a:62:b9:
00:c8:ed:31:1a:2d:0f:4c:11:ee:3c:13:b9:10:c1:
7f:c1:46:b0:4e:6a:1a:6f:9e:13:7d:99:04:a1:ec:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:44:13:A1:26:85:54:86:08:70:1F:9F:DD:2B:75:7C:CD:8F:4D:ED
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d1:94:f5:c5:30:b1:7e:ec:e7:39:33:05:10:35:a2:f6:d0:
8d:30:7a:18:89:cf:0e:71:2d:7f:10:7d:07:cc:c2:48:47:be:
bb:e4:95:77:f4:cc:89:0f:f0:39:f8:7f:b5:71:78:cd:21:db:
47:38:3f:ec:f5:ff:fb:ce:67:2a:84:f2:65:10:eb:7f:6b:48:
63:4a:76:dc:97:0d:4a:54:e2:e2:3b:08:78:fb:a8:ee:fb:37:
5e:6d:50:28:8a:84:e9:fc:0c:90:23:1f:67:dd:36:09:86:c5:
17:5f:0e:b8:5e:92:d5:b8:36:b2:89:d8:6d:a5:4a:fb:66:78:
f3:bf:03:54:02:00:82:76:2a:da:d1:7e:4f:98:44:27:31:c4:
6b:be:24:e2:17:88:f2:be:ae:92:9a:9f:ba:93:39:ce:08:5d:
33:72:f8:43:59:1d:11:2a:a6:36:0c:ed:1c:b2:35:5c:5c:9a:
4b:cf:90:bf:41:7a:42:80:bf:25:0c:15:4e:51:b8:9d:91:da:
ec:57:57:a6:0f:b0:19:d4:fc:88:17:be:bb:f7:bc:3a:25:0c:
80:e3:f1:eb:1e:49:91:18:1b:ff:33:4b:98:97:fe:0e:bd:d3:
c1:d9:7f:5e:df:e4:56:80:f3:07:71:42:25:84:40:aa:ff:5b:
72:01:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:30 2025 by rpki-client