Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: e8ZYX/5fs3CMcoZyknJOuuGiqR62wH61dljxi10EaD4=
Subject key identifier: 4B:CE:8D:3E:BD:DC:62:16:1F:88:1E:E0:54:ED:81:F0:24:7C:39:4C
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 0194BCE0EAE31F65E82159E0DAD9088F9ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=)
2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: JplPcMPG/D+UnT7exgerJXP1SoeO7hXrFu/BWS40sJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ea:e3:1f:65:e8:21:59:e0:da:d9:08:8f:9e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=4bce8d3ebddc62161f881ee054ed81f0247c394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:5f:84:94:32:b3:4b:1c:79:5c:a2:7b:5a:
df:96:d2:9f:87:59:4f:5f:1c:a5:4f:1f:9c:f7:92:
58:6c:5e:89:bf:30:c1:82:1e:82:f8:00:2a:58:63:
40:ce:cf:c4:39:70:d7:d4:36:52:a0:6e:f8:7b:34:
33:7c:34:c2:56:4e:39:08:bb:88:b4:c9:20:9b:fd:
e3:b4:52:ea:b5:35:2f:e6:fa:3f:e9:67:1a:6a:6f:
d2:4e:51:07:07:d7:6a:23:65:20:64:bb:43:47:85:
78:07:e4:fb:65:72:ae:04:c9:aa:fd:dd:0d:7b:86:
4e:2a:c9:65:64:06:2f:06:9e:03:97:e9:02:8c:9e:
cc:9b:c6:f9:86:c3:d6:30:c0:98:44:82:91:9c:47:
fb:64:8f:71:f3:3e:28:9c:a3:0f:43:9c:b4:7f:ae:
66:bd:4b:f0:a1:a3:8b:6e:9e:13:c5:e5:41:2c:87:
cd:9e:68:6c:23:64:89:35:3a:30:be:61:f6:f3:fb:
09:a3:f3:36:97:8f:1a:94:bf:76:6b:4b:47:21:50:
82:83:9d:47:c0:42:17:c2:5c:27:c5:0c:6c:e1:9d:
77:5b:31:e0:f7:fd:12:10:a1:8b:7b:68:20:32:f5:
9f:2d:9d:82:7b:07:ca:50:9c:6e:04:81:49:d0:a7:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:8D:3E:BD:DC:62:16:1F:88:1E:E0:54:ED:81:F0:24:7C:39:4C
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:5f:9a:11:1b:ea:96:16:ea:36:d1:a4:52:e9:31:49:36:
49:e1:43:26:58:aa:fd:4b:3e:a2:0c:ba:d3:b5:a2:c8:65:0d:
07:fe:91:ed:fd:bf:0a:35:c3:6e:04:27:26:6b:48:c9:8e:7e:
b4:dc:00:b0:ba:1e:ae:b1:88:63:9d:75:a6:4b:c9:5d:cc:4d:
4b:2d:57:5b:6f:a2:88:89:93:ad:c4:15:b7:69:e4:fd:fa:b5:
f8:ae:5f:65:38:b5:de:e2:93:a4:b7:e1:79:37:1c:7c:c3:32:
01:3f:2e:a9:12:69:4b:85:da:e7:12:43:ad:64:8b:8c:4e:95:
b8:e4:7d:b8:b4:23:7c:93:e7:90:cc:05:75:d1:f4:5b:19:10:
49:d4:f4:4c:e4:ab:85:f4:ef:9a:99:9a:a3:4c:95:44:01:2c:
e1:22:0e:d4:47:43:e8:18:8c:64:96:7c:b5:f3:09:9a:ef:8b:
76:b2:34:2b:3e:fd:4e:19:22:15:79:0c:8b:46:59:55:61:15:
53:ea:38:79:76:5a:fa:9a:f4:ba:1f:d0:98:5b:1e:e0:bb:eb:
15:68:f4:a1:22:4c:1b:fb:b0:c2:76:07:89:30:d9:6f:21:fb:
29:ba:e9:26:6c:76:5e:1c:1d:cb:d8:79:4a:da:90:d8:f5:27:
fd:1d:ad:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:03 2025 by rpki-client