Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: Dbr4rN1OI0Qj17KvrgOFKmMe9i3BX4oTaXoVWWolj9g=
Subject key identifier: 2E:57:22:7F:A9:6D:01:72:23:05:07:53:94:D2:AC:C8:35:6B:A9:57
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 0194BD17BAB036E9CFFE8B2FE421A3C652B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0AD2
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: S8umFpvITEiA8k8Shij3gwrJ/jFbA0+n7htIF47+zaQ=)
2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ba:b0:36:e9:cf:fe:8b:2f:e4:21:a3:c6:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=2e57227fa96d01722305075394d2acc8356ba957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2f:96:95:10:c8:2f:2e:6f:13:ad:1f:fc:7e:
3c:42:fb:e1:04:2c:e2:d9:83:cf:b7:6c:b4:a4:68:
21:bd:39:84:19:6e:d1:45:43:bb:18:6b:1e:b7:9f:
d1:0a:33:cf:21:88:50:db:88:e0:2d:ae:12:f8:29:
a0:3b:24:8a:f1:b4:a4:bb:8a:9c:27:76:a8:51:4c:
41:5e:10:af:c6:ff:78:71:51:49:0f:8e:56:f8:97:
4e:79:05:0d:30:f6:12:c2:6f:6d:bb:4a:86:66:e4:
27:b2:52:c8:47:7f:d4:7c:c4:84:44:f2:46:91:22:
ca:14:a0:68:1d:0b:7e:12:c4:7b:70:55:9b:df:77:
95:42:2a:59:f1:5c:35:85:df:74:00:c8:d5:09:82:
5c:91:a1:43:0a:59:43:d2:69:04:f7:b1:51:ab:42:
13:c7:b6:0e:d4:3f:7d:b8:74:bf:c1:66:a7:16:1d:
ee:64:9e:1c:26:7f:41:9a:97:6b:92:bc:e8:a6:88:
bb:67:71:f6:ac:40:f6:82:0a:4c:55:a0:ac:01:47:
95:5d:f5:63:51:31:93:58:38:a0:17:d6:0c:6d:9a:
6b:9f:a4:d1:0a:27:20:bb:d2:35:9c:74:ac:f5:89:
bc:e6:92:35:94:01:99:2e:b6:08:da:05:0f:c9:bb:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:57:22:7F:A9:6D:01:72:23:05:07:53:94:D2:AC:C8:35:6B:A9:57
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b4:16:82:08:ce:3a:3f:36:c0:0c:c2:5c:d7:02:05:8e:a8:
ca:8b:6a:81:c2:75:a8:d9:bf:6f:f4:f4:7b:ff:28:f1:22:be:
aa:7c:d4:60:4f:0a:cb:f2:8b:d6:40:79:6d:6d:5e:ed:42:25:
06:ae:48:86:38:ab:51:39:8f:05:99:bd:57:72:ac:1f:a6:90:
3a:da:9c:36:88:84:35:d7:6f:c5:f8:11:14:9b:ae:8f:d6:2a:
43:dc:dc:4c:31:14:0b:12:42:5f:40:ef:5a:4b:02:fd:80:7b:
b0:45:b6:7f:b0:1b:01:0a:26:6e:df:8d:2e:ee:f3:21:97:df:
fb:ea:db:bf:43:90:07:2f:b2:70:33:4b:ce:22:dc:8d:80:26:
05:06:7d:f5:b1:55:dc:3a:77:23:7c:b6:36:b1:b3:a1:19:fb:
2c:61:c8:fa:6f:cd:7b:2c:fc:29:c5:05:ba:15:c6:2f:72:f8:
9c:72:25:c6:a4:9b:26:22:32:e6:e7:de:8d:1d:57:34:e0:e9:
42:2f:79:3b:1a:4b:fb:be:ba:0d:6f:50:36:55:d8:35:0f:5a:
a9:c0:7d:3e:8b:63:94:4f:d8:fb:0a:7d:7c:9a:08:a2:24:03:
88:1c:cf:2f:df:00:54:90:fa:8c:05:6c:3f:f2:8d:9c:59:af:
db:8b:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:53 2025 by rpki-client