Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: a1sSDdxYEIlDM6bHu6q+V2YkbBQcquIWdLZrCwT2cyg=
Subject key identifier: 60:85:E1:3D:4B:D2:9A:B6:FB:64:CE:59:67:51:D5:A5:58:5D:B1:B9
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 0194BC73112541CAB5279612BCD1A43BA029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: V+kK1/DuusR0w7XjEtx0I9k8Htq+zumL6fa9Sm827M4=)
2: Zgc-Bdhjlke2w_tfXyl3MsEipXc.roa (hash: AT2c0Spo4PZ85IGMZHOrkZHuumaXr6MO49zGUuv4CxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:11:25:41:ca:b5:27:96:12:bc:d1:a4:3b:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=6085e13d4bd29ab6fb64ce596751d5a5585db1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:d7:07:16:ac:44:f0:f8:f4:3a:36:3d:83:
9d:34:96:f8:f1:ba:f6:1f:df:d8:46:6e:62:d3:85:
4c:ee:4b:04:12:e0:36:0d:1a:44:e3:0e:cc:45:60:
70:59:97:2d:0b:60:8a:12:4b:4c:56:bd:55:8d:fc:
ec:c1:ba:2a:1d:f0:d0:40:96:eb:f6:39:e5:a7:b2:
f9:15:77:a5:9b:7b:64:31:d2:9e:cb:27:1c:ea:d6:
ad:62:0d:c2:65:c8:18:dc:18:1a:4e:2f:5d:60:18:
bb:b4:33:40:09:b0:15:84:a7:12:23:9a:83:f7:ff:
e0:85:6a:9a:49:14:98:b7:12:f9:dd:de:69:bb:bb:
e5:84:96:3c:02:32:ca:3c:2b:95:a4:eb:f9:1f:cc:
ce:ec:25:48:5f:d0:96:d5:de:71:ce:c8:70:48:17:
9d:e7:cb:cc:92:e5:98:33:dd:a7:2b:4e:9e:69:00:
32:37:7a:e4:59:1b:b5:2f:ac:95:b7:78:37:2f:a1:
4f:be:fc:ce:7a:a9:a3:0b:7b:cd:05:8f:8b:79:9c:
01:cc:17:a4:8a:09:34:f7:27:fb:c6:92:f7:a7:bc:
1f:79:06:32:f8:73:39:8e:ed:58:c8:fc:4d:89:05:
24:50:ab:57:40:bf:3c:d2:aa:06:01:a5:40:45:fc:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:E1:3D:4B:D2:9A:B6:FB:64:CE:59:67:51:D5:A5:58:5D:B1:B9
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e7:ff:45:fe:f7:17:a3:46:0e:f8:c1:cc:d0:b2:28:58:5d:
3d:03:97:1a:49:80:91:57:bc:d5:3e:5f:9a:ae:fe:9e:e3:b1:
ee:22:a6:c6:0c:2b:90:c0:ac:2c:3e:8f:ae:76:a3:6f:bc:dd:
fe:b8:00:e4:fc:53:96:17:38:c1:4f:f0:69:30:7f:6b:3c:e6:
74:d4:83:e4:93:eb:4e:62:8f:ee:1e:f7:9c:ee:03:de:1e:6d:
b5:ff:fe:46:c2:30:72:80:41:d3:74:13:0a:84:50:2f:be:c2:
38:10:0c:22:6a:90:49:27:1e:ec:aa:57:57:ed:8a:df:de:df:
08:a8:94:14:b5:b9:91:82:c7:f5:f0:0c:14:8a:9b:b0:0e:77:
de:76:b9:ce:67:bb:86:66:25:e4:32:3d:9b:1f:5f:0a:c2:e0:
a9:95:04:98:89:6c:23:14:da:13:cf:9c:9c:0a:69:f0:0b:f8:
ab:0d:59:3e:c2:f1:6f:9e:ae:c3:3c:e9:7e:a6:a4:26:cc:5c:
b7:c2:ea:a2:88:a2:9a:82:50:ff:6e:72:ab:77:1e:4e:d0:86:
f7:ae:f3:75:70:78:55:94:30:31:39:43:53:cb:a1:4b:20:cb:
ed:01:35:dd:76:6d:27:17:59:bb:fd:26:c6:94:b6:0d:b3:fb:
37:32:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:13 2025 by rpki-client