Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: //orq4ihYpthL+mumRJUjnMqBZLKvy5OO40nJab9hgk=
Subject key identifier: 06:C9:A5:EF:DF:B3:AA:03:2C:69:82:D5:13:BB:97:5E:56:B8:9F:81
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 0194BC72AC844F575E90B6EB23B69B508381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: Dzy69qr1wcUCYsFghZlQmIi/HLtfV9X8VhjVxAijA3o=)
2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:84:4f:57:5e:90:b6:eb:23:b6:9b:50:83:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=06c9a5efdfb3aa032c6982d513bb975e56b89f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:3d:18:b5:ea:95:e4:af:d6:59:27:22:ac:
79:76:5b:cb:68:be:d3:38:e3:94:b4:61:64:ed:7e:
e7:0c:5b:64:53:53:64:0e:85:8e:1d:1b:82:e1:dd:
fd:e2:1f:2c:7c:99:5d:d3:ad:df:46:de:97:45:5d:
0b:ea:a9:7f:fd:45:de:d9:16:a5:d8:e4:bb:5d:55:
f7:6d:49:4b:f8:8e:71:5b:97:23:12:6a:be:03:e7:
55:29:c5:b9:f4:70:23:84:35:f8:63:11:ee:c1:2e:
f2:00:f0:a6:21:76:4b:29:ec:46:2c:2c:8d:2f:92:
73:ae:d7:5e:c0:cf:70:3e:21:6b:99:30:77:e0:d2:
ea:a6:38:ad:71:bf:5b:ca:3e:9d:c1:cb:29:69:c3:
9a:8d:00:3b:dd:61:39:5b:f5:d0:55:19:df:13:73:
42:73:c0:0d:ea:58:e5:b7:cf:bc:02:5b:57:0b:bd:
fc:02:77:62:bc:b0:25:44:c1:c9:d1:8f:20:af:c2:
bb:e1:80:46:62:e6:6b:0a:d0:8a:97:93:63:d4:d1:
fc:ad:c1:44:57:5c:39:f9:46:9c:c9:88:cf:64:2e:
cf:08:8c:6a:94:1d:c9:ac:87:c1:87:45:4f:d9:0b:
92:09:51:e2:19:ad:32:b3:50:b2:9c:5d:0c:7a:40:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:A5:EF:DF:B3:AA:03:2C:69:82:D5:13:BB:97:5E:56:B8:9F:81
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2f:54:2d:33:1a:d0:63:79:e7:33:6d:7f:2f:e2:48:ce:25:
74:f9:09:35:02:c1:1a:97:f7:94:6d:70:bc:d3:cf:ed:1a:a6:
52:8c:ac:43:e8:df:31:65:9f:17:a0:f7:9d:ff:0e:8a:b6:ad:
56:05:5d:92:18:90:03:82:d0:3e:ea:84:2e:d8:7e:1a:ae:84:
f6:a1:ce:85:35:26:c2:e0:af:29:e7:d8:9a:b5:3f:64:73:13:
38:a1:8c:83:63:27:a9:82:4f:20:03:aa:40:fb:14:1e:8e:d2:
fc:9e:31:9a:5a:6b:65:97:76:db:0b:65:e0:24:0f:eb:e1:6c:
35:c1:43:c2:22:53:08:30:1d:b3:d4:4c:6a:dd:3c:1c:e9:9e:
79:d0:a0:bf:fe:1e:58:b1:5a:dc:93:d2:20:26:97:ca:aa:4d:
2c:3c:dc:11:61:f6:d9:2a:08:9d:9e:32:50:e9:f1:d2:69:5d:
4c:ca:48:d3:85:a9:db:2f:90:4b:f4:fd:8a:e5:c4:ba:ee:51:
73:ad:2e:5b:9a:a3:e4:6f:3c:86:29:b2:31:d1:3d:96:c9:fa:
03:cb:2a:fb:ab:8a:fb:23:75:17:03:41:f6:9d:ee:7e:2e:57:
76:32:de:4e:25:14:b4:66:28:36:e2:2a:72:1b:88:9b:e1:6b:
9b:d6:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:24 2025 by rpki-client