Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier: LdY2/0sNYKI6KX9egCVwUAVSi7L3dNuKtbgEQlwIF+k=
Subject key identifier: 15:7B:44:90:C1:E9:E5:4E:71:77:06:61:6F:15:A2:18:CD:CA:C5:0F
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 0194BC04CA7B1870B969F59464A571606B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=)
2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: DvXIcjEtvDyh68HaCmrTS/oKIJ9+xhyyRliQvgu1c+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:7b:18:70:b9:69:f5:94:64:a5:71:60:6b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=157b4490c1e9e54e717706616f15a218cdcac50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:38:fe:31:87:09:c6:e9:12:e1:1e:8b:b4:90:
11:f0:ee:1c:3c:27:5b:c2:af:33:a9:5a:2d:cf:78:
ef:98:4c:4e:7f:13:14:50:0f:59:f1:98:21:99:8d:
7f:7d:95:af:3d:52:c7:49:17:dc:ef:58:01:0f:cd:
e5:9b:11:bf:a9:b9:67:0c:17:d2:e6:62:0a:61:99:
ba:bd:bc:7b:af:5f:1b:08:34:e2:dc:32:2c:99:1d:
d2:36:ce:2e:bc:b2:41:71:35:c9:70:b4:b2:fe:db:
95:e1:18:8c:81:11:0d:0a:e4:93:51:a5:4f:89:95:
2b:cb:32:b9:5b:51:43:bd:4f:db:c0:06:3c:82:da:
ac:e5:66:1c:c4:db:03:0c:1f:79:b8:c2:39:41:b7:
e1:f5:2e:09:03:c7:78:c6:32:bc:da:b5:73:43:7d:
c5:80:a5:67:b3:17:e8:4d:ec:da:8b:05:46:e9:66:
b0:5e:07:a3:c4:96:44:34:75:1b:12:80:f6:9c:61:
ef:46:c5:bd:29:ae:b2:db:3a:d3:39:28:f2:35:1d:
81:14:44:ba:1a:7c:8f:36:93:8e:1f:cf:e2:f7:3f:
be:c9:9d:a3:a0:40:6f:3b:55:c5:95:b8:48:dd:c2:
63:c3:9a:94:f0:6f:67:c4:df:35:cf:6f:58:95:a7:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:44:90:C1:E9:E5:4E:71:77:06:61:6F:15:A2:18:CD:CA:C5:0F
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:08:f7:7f:38:2f:d7:2f:4c:47:f0:73:03:90:3f:93:0f:12:
90:5d:31:40:da:23:ad:ed:c3:47:26:5b:c9:2e:98:f0:d4:9e:
47:4f:33:b1:f5:02:87:ca:bc:2a:a3:44:aa:1b:5f:81:0e:10:
cb:f8:bb:ef:42:4a:97:b0:2a:f2:ad:bd:af:f7:80:07:dd:da:
e2:52:28:61:d2:71:83:ed:a8:ef:62:1b:3e:12:9f:d8:52:b3:
3f:70:79:28:9c:aa:50:31:a9:f8:b3:b9:e2:bf:17:66:e1:c4:
6f:c3:0d:ee:84:a4:82:1d:ea:42:dc:d3:df:10:94:d5:78:9c:
5b:f7:2c:ba:64:d2:d6:70:5e:0a:c7:63:d7:be:1f:97:f4:aa:
5a:c3:da:a3:c3:72:32:08:8b:e7:c4:e3:ab:cc:75:99:da:4f:
d0:aa:a3:a9:04:d8:81:ba:dd:b0:44:3c:06:65:fd:d5:fa:72:
b1:dd:8e:f0:8f:39:b6:1f:d2:94:02:63:c3:e0:67:91:2d:73:
cb:33:10:07:22:90:8b:db:4b:ad:3b:50:b3:62:2b:4c:62:5d:
a8:bf:80:6a:10:11:d8:bf:8b:53:bd:8b:58:8d:4e:ff:04:44:
9d:02:7a:88:25:64:a5:78:44:e6:77:cc:b4:7b:0e:05:66:ec:
d9:8e:e8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:00 2025 by rpki-client