Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: 0LahBb1siJ2UGAKxG46G7uR2Lu8qLU2B6HBgKY7rUJI=
Subject key identifier: 22:90:0E:CB:E8:08:DA:3D:D9:D1:29:28:58:48:B1:5C:48:AD:CE:E2
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 0194BC3CAFF05CF05E11EA3293698ADAE9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: 3dNTBtZcGpOL1r8rdajEkTWHrM41gG1GuPFr+a3PDKA=)
2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:af:f0:5c:f0:5e:11:ea:32:93:69:8a:da:e9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=22900ecbe808da3dd9d129285848b15c48adcee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:30:b1:63:75:85:6e:0b:42:b6:fb:11:36:8f:
cf:c3:39:40:dc:a8:35:cb:5d:40:00:18:df:b2:94:
86:6c:98:61:31:4d:af:3d:df:66:93:ff:10:77:c9:
fe:9f:c2:b1:bc:d9:33:c4:64:75:94:10:ae:d2:64:
c7:40:62:77:74:34:74:58:94:09:49:c0:4a:b0:87:
72:53:0c:bd:e8:f0:5e:a6:d8:f7:1d:8e:97:6f:50:
bd:68:39:5e:96:a8:3c:ce:09:a8:6b:36:c0:19:62:
45:de:f6:cc:31:18:be:86:c5:32:20:7a:ef:b3:85:
d4:26:13:56:0b:de:60:44:fd:f9:88:2b:e4:ee:dd:
88:d9:c9:a8:d5:5c:a5:dd:01:c3:72:b9:e3:fa:7a:
e2:54:94:f1:7d:bf:4c:91:b8:c8:ec:34:2a:bf:27:
42:b2:66:ac:63:87:0d:fc:5e:3e:85:b7:6c:45:44:
32:4f:cb:f5:3a:a4:61:7a:7c:dc:5c:0e:65:4e:cc:
c0:69:37:1e:74:85:c7:e5:9c:d8:5a:09:89:1f:d0:
8c:7b:7a:01:03:bc:7d:3b:9e:d4:0e:7d:c7:5e:2b:
1a:82:6d:24:bd:7a:e9:b7:e8:cd:3e:1e:89:84:6b:
92:b9:52:40:dd:94:99:9b:14:7d:bf:8a:18:65:5c:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:90:0E:CB:E8:08:DA:3D:D9:D1:29:28:58:48:B1:5C:48:AD:CE:E2
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a3:a2:7e:c4:77:20:7c:c3:f9:62:6d:56:9e:1c:71:f6:55:
b5:89:b4:ac:57:a6:10:11:df:15:87:5b:87:1a:e5:f8:b0:4b:
39:c5:2e:9a:7c:f0:00:8c:79:c6:60:20:5b:32:8e:40:8a:c9:
6d:48:c8:5e:8e:c6:db:6d:64:cf:d9:5a:ba:5a:61:81:87:c7:
04:f9:a3:6e:00:43:12:7e:eb:65:31:b9:30:1d:39:b1:73:96:
99:d4:66:eb:22:26:97:50:48:ce:b5:28:51:f6:2a:c5:82:df:
cd:e3:8f:be:ba:5c:69:01:b0:8f:0d:65:d4:6d:00:57:9d:28:
48:6c:aa:03:32:f0:0a:79:e7:10:e9:e0:5f:09:0b:cc:0f:6f:
8e:b4:e4:bc:6d:91:5b:61:bb:d2:5a:ea:e2:d8:8c:01:31:97:
0d:d6:67:1f:4a:51:5e:37:80:40:f8:54:b4:82:70:94:25:0a:
fa:cc:ff:f8:e4:d5:17:12:51:76:40:dc:d6:1c:97:2c:38:80:
8a:12:fc:22:22:d5:87:f9:5e:8f:72:88:89:69:62:65:6e:01:
1a:9a:73:08:ac:6a:24:bc:60:06:22:6d:f9:b8:87:10:dc:62:
f3:27:6e:50:97:1f:b8:65:ee:da:d4:48:c7:05:47:c2:5a:24:
23:8b:80:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:23 2025 by rpki-client