Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: EHkw5nxcOlBYcb3hJpZTcZ3S+r3cMC/4mt88a7F/yPw=
Subject key identifier: 3C:8B:82:8B:D2:AD:DF:23:ED:8F:D7:03:78:88:31:5B:16:A0:26:B9
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 0194BC050CAA01B6EB1BD70E0843A966629D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: IE67f2cW8ALozUbge38J8ve6tn4KnVofnaq7ySUBiFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0c:aa:01:b6:eb:1b:d7:0e:08:43:a9:66:62:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=3c8b828bd2addf23ed8fd7037888315b16a026b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:f5:55:8b:7c:bd:ee:ed:e8:9a:c5:5f:d7:
1a:47:37:74:bb:64:6a:b5:33:c8:cc:59:6d:67:a7:
27:5f:46:5c:47:dc:4d:f6:29:60:af:59:ca:0b:c5:
1b:a1:78:2d:26:ea:1c:4a:24:e9:b5:00:ea:5b:0d:
9c:a1:d2:fc:9b:36:8e:7b:35:82:d8:7f:05:fc:4e:
3a:93:68:23:4d:15:a2:66:bb:04:70:fe:83:43:0b:
6f:c3:b7:1c:a3:58:7e:48:f8:02:91:69:de:31:d8:
5d:f6:06:53:9e:a5:1e:de:00:b6:27:66:fa:66:ad:
9f:96:d3:95:60:45:d7:7c:cb:49:77:26:88:ad:c9:
99:5f:a9:eb:11:c0:32:9e:e9:15:80:90:26:e6:40:
9b:a7:80:28:e8:3b:dd:07:a9:44:db:d8:9d:de:47:
98:ab:f6:f1:7b:2e:f3:d3:04:81:e7:c0:af:4b:4d:
24:95:3e:75:b3:18:a0:23:3f:6d:77:62:08:1f:9a:
6b:0d:90:06:3f:80:39:9d:07:13:c5:b9:3c:e6:42:
cd:14:28:a3:ae:2e:a0:80:7e:de:c2:8e:6c:84:48:
db:fb:40:82:65:f5:13:65:2e:e3:ed:0f:a0:ac:01:
cb:94:56:42:05:1e:6b:6a:2b:f7:95:67:ae:39:41:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:82:8B:D2:AD:DF:23:ED:8F:D7:03:78:88:31:5B:16:A0:26:B9
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:4e:86:1d:e5:37:1f:1b:3f:46:65:8b:f3:02:93:ae:34:c1:
83:35:ab:c1:3b:79:9b:0e:db:7a:ee:92:94:09:7e:4a:06:00:
59:1e:5f:2e:9c:c9:29:6f:cd:ec:ee:07:0b:7c:5f:51:54:3b:
3c:50:d8:ea:1c:bf:81:81:4f:65:dd:bd:e3:7d:15:b5:f1:98:
93:cf:01:f2:30:f9:08:bd:ed:1d:03:31:9b:93:34:db:2b:da:
1d:8f:17:7e:88:5d:de:ea:be:db:be:38:ba:4a:b3:18:ba:ab:
5c:7d:7b:67:ff:e4:0c:2d:2f:44:a1:35:f3:2d:40:37:51:58:
1a:57:ea:1e:59:d4:22:07:6e:45:d2:32:2d:67:79:b5:a6:b1:
a7:f6:fa:64:15:42:1e:8a:24:45:3e:6e:d0:69:4c:a7:c8:ed:
27:7f:a2:e4:4a:38:74:f2:aa:46:33:10:b7:03:1a:a6:07:4e:
0b:7c:1f:62:7b:6e:08:fe:55:58:dc:dc:f3:f4:ea:e6:6b:a9:
ab:63:59:9f:2a:56:a8:85:22:ad:47:36:66:18:67:48:83:d0:
f7:cc:57:53:d8:50:9c:c6:f5:af:b1:99:50:f9:41:13:48:87:
e0:ce:95:49:76:21:be:6e:aa:3d:ae:b2:d0:ca:e7:93:98:2f:
a9:4e:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:59 2025 by rpki-client