Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: BEUuFiDpSt5IJzRhM1h1M4EddVoUVa0YnQ5tTBC7FrE=
Subject key identifier: AD:AF:AA:06:02:85:09:AF:C6:50:09:9E:1C:91:E2:83:C5:42:E4:8E
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 0194BD4E7B59DF66C10A0D2E04C20C31B44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: jTRnxraTB2N0zu0KhIwpwOiFAdW1EkmbJKImkI9K2xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:59:df:66:c1:0a:0d:2e:04:c2:0c:31:b4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=adafaa06028509afc650099e1c91e283c542e48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:08:51:25:50:c5:41:34:57:89:0d:59:34:
2c:de:62:35:e1:de:ae:7b:db:02:11:57:02:99:81:
c8:d7:26:57:2b:f7:d8:74:84:47:e8:ca:dc:39:18:
30:8f:ee:f8:2c:45:2f:f6:ed:32:d3:05:6c:67:72:
50:82:86:75:3c:f3:d2:10:f6:ac:c6:78:95:e4:52:
25:5e:a1:26:9c:d2:a7:01:6f:be:b7:3a:50:f2:e1:
64:87:2d:a3:ab:88:0a:8f:5c:6b:d0:10:8e:20:c1:
f9:d1:33:2d:2e:f5:04:6e:f4:cd:5f:5e:40:59:ee:
cf:ee:e3:4e:0f:d0:6c:43:c0:8f:78:6f:d6:80:f8:
9f:f5:f3:10:8d:c0:cf:9d:f8:2c:29:f5:d9:4a:e5:
fb:90:33:85:99:6b:55:e9:ac:43:3e:f6:dd:3c:12:
29:c8:26:cb:b5:bf:1c:7d:13:cc:d6:60:b9:a3:08:
c5:ee:55:8c:4d:da:2b:e3:f1:a5:fa:21:45:49:3a:
ae:b5:6a:cb:a8:85:98:45:99:36:3a:e7:fe:1b:ad:
4f:53:84:d0:ce:04:ae:45:27:a8:6a:a2:b0:37:82:
8f:27:b5:fc:4c:30:2f:da:f3:c4:e0:e3:b7:c7:a1:
94:71:32:5e:7a:0d:64:c5:fe:fa:b4:0a:55:86:fc:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AF:AA:06:02:85:09:AF:C6:50:09:9E:1C:91:E2:83:C5:42:E4:8E
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ad:2f:b7:0a:bb:86:4f:ee:a7:39:b6:30:a1:1c:6b:9d:71:
50:ff:bf:6f:71:cf:a6:26:4a:4b:1b:24:7b:40:b9:f8:9a:b0:
a1:d4:05:12:6a:11:87:2b:45:c7:08:c5:5b:68:4a:f9:ff:16:
a6:b0:69:d1:e3:c8:af:7d:d8:a2:25:3f:3a:20:c8:a6:dc:c2:
89:1c:bc:0c:24:d1:cd:2f:b7:be:de:cc:bb:45:fb:f8:84:18:
cd:94:b4:6b:f6:2b:df:d5:3e:e1:44:4a:ed:2d:7a:2e:ea:e1:
e0:be:37:01:2e:95:44:32:3c:82:c5:b2:36:d6:37:83:38:00:
fa:e5:7d:03:c3:8e:42:ab:51:62:ff:74:c6:f1:67:62:06:2f:
81:8f:fb:b1:be:b1:ff:0a:85:ac:4e:c0:be:f8:03:2f:d6:0d:
c1:78:62:b0:f6:66:db:b5:a6:20:9d:d1:3e:64:4c:64:92:2d:
1d:c9:df:ea:c9:b5:a8:9e:7f:69:ff:73:11:87:ab:a7:3b:0f:
b4:da:c6:f9:eb:4b:5c:4b:c0:db:b6:34:b3:5c:76:32:e6:71:
5e:03:87:51:27:05:7f:b0:41:d0:cb:88:36:07:de:d9:fa:e2:
40:8e:3a:8a:5e:ef:ec:e2:af:e5:f3:ca:bc:f1:72:c6:d9:21:
52:ef:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:57 2025 by rpki-client