Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: LryumC6XjFa7AiK+wh9e8NojpTkIPSJxrmNGdQowOgA=
Subject key identifier: BC:1A:D5:09:AB:C5:E5:90:FB:CC:79:C4:A0:02:5B:F0:4A:E5:C6:CE
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 0194BC72CBF6F987A5A93500984DBF85AED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: NpI41b56HZ5h8QwV3G9MehbaLN4HpP4VJeTzoujS59k=)
2: 2LgtOWneA5YvGT4_RnemdJk10ZI.roa (hash: i3ijgdJkTo+0tXZivrTiqDYQJFUVEZ40sKvM/03kC6k=)
3: BKyeRj9qftx8WGEdxVWFVc1273A.roa (hash: nhVWVpplcnh6PS/kPe42Tn4vpV4Cv/wcOxTwDykaiQM=)
4: NyrZFNY0uejKVVI5JPC7FPtdUjc.roa (hash: F1z0p2TvKAcesacsMKTiWmQh7lfOeilS7Yll9HRgTgE=)
5: ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa (hash: M3TtUoEAKZLP5h7xNaBXjv6fTWKL5P7QGAapCue/jYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cb:f6:f9:87:a5:a9:35:00:98:4d:bf:85:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=bc1ad509abc5e590fbcc79c4a0025bf04ae5c6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:90:b1:72:07:f0:7a:e6:9f:31:6f:b8:5d:
fe:31:36:98:36:e5:59:61:9f:8f:a5:c6:e0:d6:b5:
30:ec:78:f7:b0:24:e2:c5:7c:a2:58:94:55:1d:7c:
31:a5:26:78:f0:14:03:a5:ec:1e:01:6b:6a:82:4b:
e5:6c:a2:b7:1a:45:28:78:b3:3a:b8:8f:5f:15:45:
eb:1a:23:75:db:91:3c:3a:ec:c3:c5:a5:f5:60:40:
bc:82:10:eb:1e:0b:74:0c:4d:84:d2:19:5e:30:29:
b7:be:77:36:82:ce:1d:b5:e5:09:fa:93:ee:22:a1:
82:a3:4d:c9:ab:5c:bb:a4:29:7e:3c:c5:25:71:75:
0c:42:a4:06:c9:6e:13:fc:45:53:33:a9:04:2f:8a:
1c:a4:43:4c:6e:80:1f:07:a8:fa:ba:19:35:21:55:
75:e2:5a:5e:23:3f:b1:05:c4:2f:cf:ba:c6:f2:d0:
07:ad:7a:68:be:43:04:2b:22:20:a9:bb:2f:a1:86:
a5:b4:a9:e7:08:b2:a7:89:32:18:e0:31:f4:53:18:
9d:f9:23:97:22:f2:4f:d6:45:0d:69:e3:70:89:3a:
c7:22:e9:99:b9:fb:74:50:ce:86:27:b6:b4:92:d6:
66:8a:3e:5a:f0:98:b8:f9:ef:1b:e7:c7:2b:d5:4c:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:D5:09:AB:C5:E5:90:FB:CC:79:C4:A0:02:5B:F0:4A:E5:C6:CE
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:60:0a:87:38:70:36:02:77:a9:0c:22:35:53:8a:b1:92:
62:de:b9:73:b7:64:af:f5:a4:7d:cb:ba:ed:cd:82:ea:0d:dc:
9b:12:25:eb:c8:31:86:ac:aa:50:b2:7e:bc:42:72:fe:f2:ae:
41:1e:b7:c0:f0:ab:b7:6c:99:64:d8:0f:d4:98:4a:47:d8:87:
98:51:a9:3f:58:bb:2f:66:83:1d:40:da:7b:b9:cc:50:bd:8f:
0b:9a:05:bd:b0:f9:b4:20:4f:a8:f5:37:11:78:17:be:8b:60:
66:ef:5b:4f:b8:d9:21:11:76:a2:a3:75:7a:bf:fd:c8:84:65:
eb:e5:87:35:34:5a:eb:f9:7d:03:34:5f:d7:d0:15:f0:e0:09:
d3:bc:d3:6e:76:ef:b4:d8:49:5d:8a:d1:00:be:6f:2e:e9:80:
80:40:50:67:03:19:e9:cc:63:63:0b:e4:4f:28:9f:5d:fa:d4:
a0:b0:27:57:4d:32:1e:2c:32:eb:84:27:fe:72:6f:09:97:3a:
5f:ec:5a:01:3a:cb:ae:e7:bc:9f:e5:cf:01:14:cd:c7:a0:1f:
f3:01:bc:1a:52:71:26:85:b2:c1:8d:c1:ad:90:ee:a0:01:b0:
fa:e0:87:b6:8a:60:28:2b:e6:18:ac:ce:8f:5b:da:9e:66:22:
f3:aa:ff:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:11 2025 by rpki-client