Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: 8VWq1mYRbhzen6nzhTJM1Qdpodo9qEDVaCahwV4dNwY=
Subject key identifier: AF:D7:2E:5A:E8:32:EA:1B:3E:C6:AE:FF:58:06:7B:0C:6B:1B:EF:E4
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 0194BC7307413313368C8FE0C2C5DF46462E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: _-ujCkb2AK4IkutlVxIW61CZKcg.roa (hash: ZnHaosgaFt/JXW9m08DluSmRz1C9FDWxKl8XbDANYsM=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: TcsDMwWsttXUtZ9rhuEGIBceSk/ZnfcBHEXwuzoNIkc=)
3: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:41:33:13:36:8c:8f:e0:c2:c5:df:46:46:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=afd72e5ae832ea1b3ec6aeff58067b0c6b1befe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:09:2e:ee:38:20:07:fe:dd:a8:d4:82:04:
a9:58:84:e5:be:2f:7d:3a:31:a6:f0:2d:9e:05:57:
14:03:52:cf:9a:a5:81:96:fe:dc:b1:83:7c:e3:42:
66:ca:43:2b:e0:41:39:2b:f7:0d:48:83:2a:fd:8b:
ee:97:29:a3:1e:4c:7d:ce:a3:9b:eb:ba:31:eb:90:
d4:1a:1a:69:e1:48:43:89:08:9b:4d:39:a9:8d:9e:
a0:71:43:45:44:32:3f:3a:a3:1b:bf:e6:4d:97:6b:
a7:9e:91:43:42:3c:ef:4b:aa:57:3f:0e:ae:e8:3f:
67:2d:76:fc:a1:90:4b:c6:9e:61:eb:eb:1b:a8:a9:
5d:84:67:1e:42:d4:2c:9b:2a:cc:96:4f:d5:25:28:
4a:e7:e7:d6:ca:42:bd:98:53:ee:ec:0f:2e:99:2d:
5d:2f:00:ca:f8:40:fd:09:d7:4f:2f:dd:f2:2e:a3:
28:be:17:7f:3c:fb:1c:b8:e7:a0:01:a9:7d:a7:09:
10:ec:49:f9:22:fc:72:3b:11:e2:fe:52:2f:e0:c7:
2e:7a:16:26:06:4c:27:7a:81:66:e1:8b:e6:37:61:
a7:c9:81:77:ed:d4:dd:d4:63:1e:28:c8:f7:cc:fa:
5b:70:b1:fa:ed:59:45:23:4d:ac:ae:cd:7a:d9:fc:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:2E:5A:E8:32:EA:1B:3E:C6:AE:FF:58:06:7B:0C:6B:1B:EF:E4
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5c:28:4d:14:88:f9:7f:a5:79:04:e0:8c:f8:26:16:86:3c:
8c:48:7c:50:19:78:05:1d:a4:16:7f:c5:30:8d:fe:10:f3:6b:
3a:be:bd:f6:cc:da:ee:f0:53:d3:3f:03:13:ee:7b:d0:f5:d4:
c9:4e:a0:5a:db:6a:1f:b7:0c:f3:68:91:69:56:e8:3e:cc:e3:
b0:05:85:db:70:d6:b0:ee:ad:50:c1:0f:de:12:74:2e:eb:16:
bf:b0:ea:55:64:f8:c8:10:b4:41:59:e6:5e:92:8f:60:7a:13:
92:18:72:db:73:13:32:57:67:61:10:47:52:b0:82:75:3b:36:
c2:0c:ac:36:78:52:ac:b9:a4:9c:99:df:c8:a9:a4:c1:96:41:
d9:b0:ad:19:cf:df:3c:73:20:e7:be:f7:2c:e4:1f:04:93:75:
09:81:8d:c6:81:6a:09:ad:6b:3b:a1:ef:e1:ff:de:7b:74:81:
f6:f0:ee:80:64:b5:5b:a9:0e:74:5e:0d:d2:62:4e:7c:8a:e2:
d5:a6:22:3f:a3:95:a6:4b:c8:28:56:7a:ed:c7:ea:c1:75:dd:
34:2f:ff:b5:c1:f0:28:9f:a5:0c:d3:5d:bf:20:6e:47:76:09:
95:4e:61:48:cb:ac:5e:8b:20:c9:ba:81:2c:e3:eb:50:32:7e:
55:b4:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:06 2025 by rpki-client