Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: lKkOItZLP24aCTOExq+CQeTlVVEP/TK1mZIL9p288i0=
Subject key identifier: 62:B8:9D:77:A2:7B:BD:76:62:1C:D4:FF:0D:40:C3:54:B9:0A:98:C1
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 0194BCE0B933B92EF8D9266D88CBAFFE729C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=)
2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: 00BzBVI90+UtHW+WKhOLSgPfclo5wiyomUHaz0YMShA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b9:33:b9:2e:f8:d9:26:6d:88:cb:af:fe:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=62b89d77a27bbd76621cd4ff0d40c354b90a98c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:cd:95:fe:62:ec:52:a7:45:26:e0:3d:a0:
81:de:38:90:74:f8:09:a9:d1:45:c3:87:2f:9d:da:
d9:28:90:7c:d0:72:f4:bb:89:0b:c3:60:0f:b0:03:
ea:03:59:0f:ea:60:7b:24:f0:5c:b8:3d:63:3d:39:
1f:a5:ed:46:f2:f4:7a:85:f5:5d:d8:41:39:db:d5:
d8:aa:51:e3:ee:7c:84:9b:10:5f:0e:a8:0d:9c:8a:
78:59:99:97:7e:9d:ea:42:d6:c8:ac:99:09:19:c6:
ce:3f:99:df:9f:5c:18:e5:d9:e8:b1:2a:31:1d:ab:
6e:cf:f9:2a:86:f8:fa:8e:33:af:14:2d:31:70:0d:
1e:d5:64:b9:d7:8f:e0:c4:77:6a:30:7b:87:94:6d:
92:f0:74:90:04:81:2c:ed:a9:d5:eb:fc:54:92:ce:
d2:32:05:e7:6c:84:0e:11:2f:67:9e:05:a7:e3:d9:
38:a5:57:63:53:36:24:03:a4:e3:66:50:0b:b1:1c:
5c:c0:5a:9f:67:4b:95:5e:93:72:88:0d:24:f8:95:
ca:a9:7b:87:f2:b5:29:85:a1:ec:c3:49:cf:86:f4:
90:7c:38:45:0d:81:2d:a0:7c:98:53:29:63:20:2c:
70:ac:a5:7a:3e:ff:92:65:c9:bf:1d:c8:52:80:9a:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B8:9D:77:A2:7B:BD:76:62:1C:D4:FF:0D:40:C3:54:B9:0A:98:C1
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ce:ae:dc:cc:e8:bf:aa:46:1a:49:db:f8:87:e5:65:cb:6f:
49:ab:64:95:12:3f:b0:84:21:b6:b8:5d:36:9d:67:cb:f0:44:
8d:5e:27:bd:fb:5c:fd:4b:2d:91:a2:cc:84:f5:32:ce:4b:39:
3c:ae:3e:c4:93:c5:b0:6b:e2:bc:9b:97:f9:8c:a9:be:ce:d7:
62:33:e7:eb:6f:2c:a6:98:60:66:26:ac:ce:d8:f0:c1:be:de:
de:88:7e:b7:8b:1f:56:fe:9a:58:31:19:fb:74:b2:9c:89:92:
de:0e:a0:2b:fd:fa:0a:5e:df:f8:cb:51:ea:0a:94:0a:1c:cf:
71:5e:15:76:09:b9:d9:61:c3:68:4d:fa:e8:96:b3:89:65:bf:
f8:a6:e0:d9:9a:58:90:0c:a4:39:04:ed:b7:9c:96:76:2c:f4:
bc:51:5b:1c:a1:e1:9e:be:3c:85:7b:ec:ab:bd:35:3c:ef:aa:
db:e4:0d:d7:7b:6d:7b:62:93:fb:21:fc:18:e5:47:53:fe:34:
80:c5:2a:41:3a:5d:7a:66:cc:48:30:fc:fd:ea:5b:05:dd:20:
47:b3:5c:71:2b:a5:70:0c:20:90:6b:1e:8f:d5:2a:ab:9b:15:
fb:9b:7f:04:b8:67:d4:0a:55:54:a2:e8:7e:82:8a:85:21:19:
63:99:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:17 2025 by rpki-client