Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: WjA5HoRnGWxfLUWrExBEKFsaF1x9Wmrz1CtxqFGFEBg=
Subject key identifier: 67:C8:FF:FB:A0:17:3D:4D:B9:A9:86:51:A8:79:63:E0:4A:AD:74:BB
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 0194BD4E6227A833A864BCBECF8807E587F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 140E
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 1pDvZiuSWLhx-92O6KDv3xsMTOQ.roa (hash: sR9Re4LpEGUmEdWfCRVo4ttWGl2TY8E5Ay1QWsq/ZLE=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: aWTkzZ3W3RLfBxqMmwXRgxnwL74Zf9gz7uSNbgQQRLQ=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:27:a8:33:a8:64:bc:be:cf:88:07:e5:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=67c8fffba0173d4db9a98651a87963e04aad74bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:b0:2d:3f:f3:0c:65:a3:47:fa:ff:a4:df:
cd:25:31:2c:50:74:76:8e:dd:43:92:cf:11:a8:60:
f8:36:79:56:1c:03:13:77:8f:b0:e2:92:9b:a5:a5:
f0:51:ad:dc:35:94:12:16:f4:8c:1c:83:30:11:07:
cc:f6:9c:fe:0e:08:a1:6d:05:d9:31:b1:62:e8:ff:
58:e4:3b:f2:1b:28:5b:7c:7e:4b:5c:ea:50:df:e5:
d9:02:0f:5d:9b:95:b0:08:93:d9:fe:0f:25:12:96:
7d:85:5f:79:8b:7d:c2:79:db:7c:42:51:6e:dc:66:
dc:e8:a7:3e:19:1e:03:54:0b:7b:40:dc:bb:e5:c0:
da:4e:2f:d0:4d:5a:7b:e1:3c:41:c2:f7:09:c3:33:
16:ba:67:20:2e:b4:52:51:db:4e:d5:2d:f1:31:ed:
ee:58:29:cf:f8:9c:be:0d:00:eb:7d:72:af:25:87:
a7:67:76:f1:83:81:56:53:c6:4d:63:11:a1:c0:c6:
48:e2:0c:09:18:e7:5e:96:a5:db:4a:81:c8:33:74:
15:60:2b:fa:bd:9e:4a:6b:58:60:c9:70:da:59:74:
f9:04:5c:45:0a:32:2a:51:92:d4:32:57:df:87:7a:
c8:01:50:1c:7a:5a:a5:ff:cd:f8:9a:6b:4a:84:6f:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:FF:FB:A0:17:3D:4D:B9:A9:86:51:A8:79:63:E0:4A:AD:74:BB
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:48:59:85:06:21:98:38:85:09:b1:dd:56:19:25:a5:57:af:
bf:a3:18:60:14:f0:20:dd:35:b1:eb:d4:3d:fb:13:e0:3c:20:
bf:54:e0:6e:9d:9f:9f:73:16:cb:ab:9f:19:72:8d:33:bb:73:
a7:d4:58:c9:f9:1a:16:e8:b8:1a:4a:9d:79:46:ef:46:41:70:
5d:3e:8d:f2:77:2b:a1:11:c8:31:5b:1f:f3:5e:62:24:3c:eb:
76:e5:ca:47:48:09:21:96:e3:ea:4d:d4:9d:16:fb:d4:03:12:
c8:54:23:fc:df:bc:19:4f:ec:3b:59:82:c5:11:5d:6e:61:fb:
70:ac:87:7d:e9:5c:91:36:5a:4d:70:51:2e:10:40:c9:65:a2:
24:d8:24:a0:d3:6c:88:47:87:bc:b7:2d:3a:44:1f:6e:3e:4d:
a5:72:19:3a:39:18:6d:ae:e2:e4:a7:43:b0:2b:56:9c:78:b1:
c2:bc:0a:cf:02:07:c9:15:58:92:3e:8a:d2:c4:26:ce:3e:d0:
32:3d:1a:e5:8d:48:a5:14:42:bb:03:8b:0d:e8:81:6f:c8:17:
f7:84:96:19:0b:32:f8:75:98:ef:23:7b:22:4e:23:b2:b7:7a:
1f:8e:9a:d1:17:ee:df:98:b0:cb:e1:a2:4b:10:ac:4c:54:66:
43:f1:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:01 2025 by rpki-client