Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: Pvqwy513ZVvtAr9WMnEbGn9OPgWAya7B5/vOC3iZax0=
Subject key identifier: 76:4C:20:A8:CD:C1:86:C2:80:40:96:BA:53:E8:E7:71:9A:33:6D:C9
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 0194BD852A19492A9C38D066EE2D832FD11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: AqGUbGJsGdDOdKXJcr5qyH/oybpmL/6AnyZe/QGvllI=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2a:19:49:2a:9c:38:d0:66:ee:2d:83:2f:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=764c20a8cdc186c2804096ba53e8e7719a336dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:73:7b:d1:39:e8:b4:56:32:72:c2:67:93:
39:a3:6f:c8:eb:43:a7:20:60:81:c3:23:87:ec:f3:
53:af:08:c1:f7:de:95:3f:db:e6:a3:23:da:58:1d:
21:61:e0:87:65:85:70:64:2e:e1:4e:61:93:4c:3d:
23:65:d1:d0:5b:9a:ba:9f:04:dd:cd:fd:5d:d6:2b:
28:9a:98:7b:33:c3:01:21:37:2a:13:5a:a4:c7:64:
dd:bb:d0:7c:a7:fe:62:a7:f6:50:0a:74:c3:13:13:
1d:74:2d:1a:5b:d5:cd:46:16:d9:eb:bb:12:80:fa:
d5:10:ee:cc:9c:9a:4f:c5:d1:3a:8a:ed:92:ad:6f:
f2:ed:f2:2c:4c:4c:fe:26:45:0c:c7:b7:77:d4:c5:
e3:06:80:d3:db:29:fe:3e:22:7b:53:bc:f8:a1:fe:
13:ba:68:55:ef:a3:3a:28:67:28:77:e5:3d:c4:99:
9d:fd:3d:e4:38:3c:09:65:ac:ee:fb:3c:41:1f:2e:
47:21:91:5c:79:30:81:c9:e8:0f:dd:0a:45:7e:27:
44:4c:33:04:e6:64:a8:d8:4d:f7:99:b5:45:53:76:
ca:ab:43:33:5d:1f:da:f5:6e:05:54:c7:25:b5:62:
53:2f:74:39:76:df:9c:79:b4:9c:b4:27:86:d8:9b:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:20:A8:CD:C1:86:C2:80:40:96:BA:53:E8:E7:71:9A:33:6D:C9
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7c:0b:2c:d4:35:c7:1e:04:ed:02:97:eb:de:2d:fd:0a:5e:
3f:c0:c8:af:dc:f0:1b:0c:64:69:e2:09:11:60:26:8f:1c:ef:
f8:24:2e:88:52:27:6c:d3:d6:45:cd:e8:b6:b6:a9:e7:73:c9:
d8:2f:6a:c6:18:30:89:12:d1:b6:99:9d:90:b1:29:32:2d:de:
a8:bb:92:4c:12:66:18:59:e7:11:26:ab:c5:21:d4:27:7e:f2:
33:ec:08:c9:fa:84:61:c0:a0:53:88:86:8f:d1:96:f7:bc:52:
0a:fa:f0:22:17:6a:42:ea:1f:d0:20:5c:1d:61:c8:53:91:8b:
91:32:ad:b4:01:35:e4:29:d0:c3:7a:d9:10:ce:bf:1a:26:a1:
6b:03:27:8d:89:27:0a:2a:24:39:1e:b7:98:86:fc:0c:d4:4c:
c1:ab:e1:23:fb:58:7f:d2:f9:26:64:21:2f:72:a8:96:3d:e1:
b6:49:e1:ff:bb:8a:82:75:12:3a:c6:2e:ff:81:6e:e0:7f:4a:
5d:7e:02:79:83:6e:d9:99:c2:26:af:82:12:44:4c:7b:ba:fd:
48:b9:d7:eb:c9:2f:30:12:46:12:71:ba:d4:0f:88:ad:19:cb:
f4:e2:2f:c1:b2:86:70:a8:ae:4a:e0:f1:d0:f8:f0:e5:9d:75:
b1:2c:c2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:51 2025 by rpki-client