Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: Eca4oigF0haqgwA9wrYzZTl/JucRUDwQswqrYuZx0ZY=
Subject key identifier: 31:0C:26:2D:9E:63:78:6B:9B:4E:06:8B:6F:41:93:22:46:FA:70:F5
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 0194BD180A7F9E33E6885601C8D3C37B816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:56 +0000
Manifest this update: Fri 31 Jan 2025 16:00:56 +0000
Manifest next update: Sat 01 Feb 2025 16:00:56 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: 7eMxiJtoawKkuEf9sQ6j3K1jDZcpGg/yArmp7ZRgt/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:0a:7f:9e:33:e6:88:56:01:c8:d3:c3:7b:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Jan 31 16:00:56 2025 GMT
Not After : Feb 1 16:00:56 2025 GMT
Subject: CN=310c262d9e63786b9b4e068b6f41932246fa70f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:6e:2f:8a:3a:ff:65:5d:f2:f1:1a:51:72:
a6:da:f8:b2:94:9f:b8:90:a9:38:db:26:ab:bd:5b:
bb:84:b8:39:00:12:8c:63:11:6a:2a:bb:45:09:96:
57:90:e9:54:a4:3b:3c:f3:41:fc:42:bd:73:e2:b5:
f7:b1:dd:dc:e7:88:14:2e:85:1d:ef:59:de:a6:a1:
73:0c:7b:49:e2:4a:df:fd:66:19:5c:e6:c0:df:5c:
26:07:2f:47:a3:30:cb:5d:15:ec:4e:0b:aa:50:47:
06:dc:6f:2e:52:0b:60:fa:0d:68:ea:7f:0d:58:a5:
7e:eb:9f:54:84:2c:ce:20:4a:11:9f:87:d6:1d:5a:
5a:fc:1d:af:e2:38:dd:03:72:4d:02:a9:69:cd:91:
c9:fc:ec:e1:48:90:82:cd:fd:3f:16:30:48:9a:df:
40:fa:e6:dd:b6:f6:bc:d8:33:1f:8f:1a:89:71:7b:
86:8b:f5:0e:49:9c:f8:75:87:cf:b7:40:14:23:33:
f7:f8:18:20:fd:f1:ac:ec:71:5a:8f:95:be:64:91:
88:d2:b9:73:a3:d0:7c:ce:24:ce:88:39:a3:06:db:
fb:79:45:43:f2:51:a3:12:d4:be:89:35:c0:fc:35:
52:02:b9:c0:59:fb:55:dd:3b:2f:c5:d6:49:7d:78:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0C:26:2D:9E:63:78:6B:9B:4E:06:8B:6F:41:93:22:46:FA:70:F5
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:a6:ff:e1:ce:47:44:a8:06:90:36:16:e2:51:8b:c1:ec:
5d:85:04:88:fc:30:42:30:32:9b:e7:4e:92:e3:a8:d7:d9:f8:
d4:ab:e5:39:6e:ec:6d:dc:25:13:b1:cc:d8:fa:c7:9a:2e:01:
e8:28:59:95:1a:1d:ce:2d:94:b5:bd:6d:12:da:24:8e:8f:8e:
da:1c:9c:f7:30:ba:5f:37:6a:85:b9:2a:86:a0:61:8b:54:91:
cb:fa:76:c5:c8:b1:93:e0:df:4b:dc:f2:71:6a:10:92:f3:11:
b8:c5:1a:ab:6e:bb:53:40:d6:d8:ee:4a:c9:9c:e7:a9:41:d0:
e1:df:e6:19:2d:78:8c:02:d0:52:dc:fe:5e:ae:f6:49:14:93:
67:b3:c4:91:cf:17:b6:29:d4:9d:45:73:67:a0:5c:f1:08:fe:
49:92:77:e6:09:3f:7a:3e:59:1d:29:c2:cf:f0:c3:52:84:d2:
60:5f:69:7a:a4:f6:c6:db:b3:c3:71:73:75:65:00:6f:3f:70:
d7:48:ff:a0:95:29:37:f6:16:85:43:d8:14:ff:82:c3:d9:ed:
3f:40:f7:99:47:23:fd:05:40:b5:3d:2d:f3:9e:da:fe:6d:09:
b5:69:73:37:51:38:ad:02:65:6a:ba:5d:a3:70:67:50:38:0d:
ac:64:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:12:05 2025 by rpki-client