Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier: r9RvjjYZvIEatiYQDef3ZevchliDJTPFnE/dgi8k2O8=
Subject key identifier: C1:1F:9D:40:4D:35:68:EA:87:3C:8A:75:A7:56:E0:72:D6:37:82:BE
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial: 0194BC04E3D828A7B2BA8D0825D386887919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=)
2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: 6dnJGiiA419A6BP794j4/iR3yy0sh6koBbrU/E6r6uk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e3:d8:28:a7:b2:ba:8d:08:25:d3:86:88:79:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=c11f9d404d3568ea873c8a75a756e072d63782be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:b9:c0:eb:07:bd:f2:a0:39:e6:d6:08:7f:
0b:41:4e:33:89:7c:0d:7a:df:be:06:71:81:30:c4:
eb:80:d0:24:ea:41:9b:88:83:9f:34:04:e3:ef:e0:
ad:5e:11:fd:c5:10:1f:7a:8a:a5:62:53:d9:bd:29:
89:ab:ed:a9:b4:3e:64:24:f1:bb:e4:cb:72:a4:81:
af:4c:4f:2b:50:7c:73:8c:21:fd:19:09:31:b3:5f:
8c:fc:f9:0b:a6:7c:ca:16:93:d9:f3:13:5b:8f:d0:
a3:28:6a:fb:6d:06:6b:f8:71:ed:0e:92:72:37:64:
76:28:4e:98:9e:7a:cf:7a:78:1e:25:bc:f6:77:2b:
c9:97:9e:01:ea:ca:9e:e9:c0:dd:81:43:c7:8a:85:
73:dc:60:39:0c:2e:15:e8:73:23:02:65:47:6d:06:
42:fd:c5:fc:c4:d7:0a:b3:3d:7f:20:fd:0c:b2:4f:
f0:e8:61:4b:6e:dc:55:85:47:c0:47:fb:d0:4b:ad:
88:cc:96:44:da:46:41:ed:d6:15:b0:88:f3:db:fd:
27:79:48:f8:9a:6d:6c:98:cf:4d:7d:78:34:2a:d0:
91:1a:e2:75:c7:33:75:6f:73:d7:18:bc:0d:cb:0d:
da:8c:34:8f:7c:14:de:0b:46:d9:f6:21:3f:d0:ee:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:9D:40:4D:35:68:EA:87:3C:8A:75:A7:56:E0:72:D6:37:82:BE
X509v3 Authority Key Identifier:
keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:ed:9d:5d:6d:ca:38:16:3b:08:75:32:e6:18:73:cf:97:
72:58:b1:ae:58:bb:78:6d:c6:71:fd:5e:3e:d9:55:81:68:aa:
0d:36:de:9a:8e:76:7d:74:53:ec:f2:ab:31:d1:e6:04:75:17:
ab:4f:90:61:78:30:fd:b1:f1:8b:06:18:74:f9:7e:db:39:fb:
3b:61:5c:7f:ed:d4:04:21:43:24:b1:55:77:6e:b3:92:f7:d4:
dd:84:f1:a6:57:33:fc:44:dc:bc:0c:3b:c7:03:da:e1:e1:a5:
5a:ee:4e:70:2d:12:3c:09:00:ea:5c:37:d9:34:b5:1c:bd:f8:
2a:0f:e8:ed:d8:57:9c:f1:5a:19:0f:be:37:cc:a6:d0:e0:b0:
7a:32:6a:4a:aa:5c:46:97:83:71:f4:55:4c:e4:40:a8:5c:87:
ce:52:78:d3:27:90:e1:37:de:fc:86:ea:72:39:02:3f:7a:2c:
94:84:fa:56:e2:2e:47:b2:97:52:e7:32:52:6e:23:04:b1:ea:
23:e0:75:2c:36:80:0f:f4:ac:e0:3d:e2:c3:01:54:98:e9:10:
08:28:10:10:4c:39:1c:f4:f8:91:9b:97:06:74:44:26:f7:b2:
a5:f3:5c:0a:5c:ab:68:07:ef:f5:ef:64:3a:a8:1f:65:9d:4f:
fd:8a:b3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:31 2025 by rpki-client