Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier: aMHEMBJaj/x5UgSZaue0L/bPm26IXFtdHilKbH5ULcs=
Subject key identifier: 05:3E:F2:38:73:23:22:C8:C9:2E:4F:90:D3:AD:4E:4B:14:7D:47:85
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial: 0194BC04F3F574EB23B0EF5C3557438FC5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: fb1/nFgfrfGX51ilJ+XXghElgFxwKhxLhbzIvBh3esI=)
2: 8gpUYfd4xy8o_wmWfSNkNDy2_OE.roa (hash: n+5VQVseGoz16dlqFM33ratLsBElZcuYMUs0aQixM7A=)
3: KvUgwFDesmmHdbQCB_8uiMG2VLI.roa (hash: 94Nl+dMUXzEaS7KEnLvYRCdKdh74NZfRDzZx3rRkfuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f3:f5:74:eb:23:b0:ef:5c:35:57:43:8f:c5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=053ef238732322c8c92e4f90d3ad4e4b147d4785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:e4:ca:9a:e5:35:e8:ea:76:af:f7:ce:3f:
e2:89:11:36:7c:65:31:02:a8:68:77:ae:a4:2a:98:
27:f9:a8:fe:74:20:7d:31:e3:02:be:11:95:25:65:
91:ca:3c:8c:82:f6:d0:69:b1:4a:2b:4c:32:1f:f9:
af:35:2f:71:4c:0a:cd:12:ba:80:e8:b5:ff:59:d6:
98:4e:1d:fd:18:d2:78:4d:cb:9e:ec:91:11:50:3e:
91:89:d4:02:3c:df:49:52:c7:7f:70:a8:f3:59:9d:
ac:eb:c6:da:d7:a6:15:a3:5f:3d:2a:80:11:ac:30:
94:a0:6d:fe:56:b2:5a:e0:d4:7f:20:31:5a:32:fb:
a3:f1:13:35:88:d8:72:9c:67:94:7a:7d:45:4f:33:
38:f9:2f:56:e3:09:b1:09:70:ff:80:1d:18:6a:f1:
79:69:28:cb:a2:fe:22:84:0a:e4:e1:2a:03:a5:6c:
a7:be:19:01:1a:56:95:3b:07:87:0c:51:39:c5:7c:
cf:d9:50:2d:64:f0:c7:a8:74:d4:b7:d8:78:56:77:
a6:38:67:59:1c:4b:73:75:a0:19:7d:ba:7c:2f:8f:
09:90:55:d4:9f:4c:86:d8:6f:87:85:4b:68:38:e6:
21:bd:e3:7f:a5:22:f6:4a:d4:90:2a:57:47:67:fc:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:F2:38:73:23:22:C8:C9:2E:4F:90:D3:AD:4E:4B:14:7D:47:85
X509v3 Authority Key Identifier:
keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:c0:65:5f:41:90:d2:0f:e1:1b:18:80:d6:eb:97:f6:3a:91:
5f:b6:bd:da:d6:fc:4b:7a:27:cc:42:fe:7a:df:90:15:9c:23:
1b:b6:77:62:2b:57:63:54:22:f5:87:cb:b6:71:ac:2a:69:0a:
cb:6f:71:eb:0c:4b:04:d4:b3:e9:1b:a8:09:b4:4c:01:eb:9d:
da:91:2a:e9:0e:30:cc:a6:73:f2:5d:43:b5:54:66:17:7f:38:
ae:58:a0:d5:5b:06:84:0d:18:fe:ac:02:db:5c:3b:69:dd:b9:
b0:c4:bd:86:68:c4:2f:c0:2b:82:af:fb:f4:0b:5c:21:49:1c:
29:f7:ce:2b:1b:fa:91:60:76:3f:b6:4c:da:78:81:ed:d7:99:
fb:b6:0c:5b:e7:37:93:7f:52:7f:87:bd:05:ae:bf:dc:30:e2:
bf:2e:72:8c:c7:98:33:12:b6:21:a9:11:1c:96:34:0b:6c:b4:
0e:e3:ba:79:aa:b9:9d:bc:5c:a0:2f:28:74:d9:08:d1:f4:78:
11:f4:4f:92:bb:a5:aa:d1:64:8a:6b:08:1a:49:d7:08:7d:19:
bd:c1:9e:dd:02:29:7e:2a:c3:f3:41:d2:66:da:12:45:4f:d1:
cd:19:d6:0e:ae:01:58:95:1f:64:35:49:c9:ea:28:7e:79:bd:
9a:a8:0a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:08 2025 by rpki-client