Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier: mTKdw5RT97b6wqas7UH/In1XCbji2D/86189JYNh6rM=
Subject key identifier: ED:33:BF:63:21:65:3A:96:B2:1C:A3:ED:BE:5F:55:CA:90:27:A4:B9
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 0194BD8576FC805422B55997D901BFB57024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: Xi3ludXFjRPk51Nd9IBRcnpw2z+vI/EvArOW5k+hVps=)
2: si7sAmrI6LhMmBgdITfIkRaacMk.roa (hash: ySGkQgyQXdPJ9MCG+8CkylC78C7W6u0+iUG1Hsa05U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:76:fc:80:54:22:b5:59:97:d9:01:bf:b5:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=ed33bf6321653a96b21ca3edbe5f55ca9027a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:b8:9c:71:a7:c9:b6:ad:bc:53:c4:e3:c0:
de:1d:a7:8d:d4:90:49:5d:d1:4e:89:d7:b5:59:7e:
a6:90:98:82:e9:28:13:8b:ff:34:88:d1:29:77:26:
fe:d3:6f:5c:92:86:fa:5b:21:34:96:d4:59:12:6c:
e0:a3:d0:d2:f3:a2:14:64:a7:24:1b:a9:5d:d4:91:
50:7b:65:92:29:71:55:d6:eb:78:40:c2:7b:82:a3:
13:c0:87:77:07:96:69:35:c0:a5:82:c6:13:fe:d6:
3f:53:2e:4d:51:65:11:53:3e:00:d9:a0:8d:57:c6:
14:26:30:62:bf:af:69:d5:82:e3:b5:6f:5d:b2:ee:
c1:97:71:21:64:1a:86:cb:6f:2b:0e:28:3e:e7:ba:
53:65:9b:40:14:61:48:3a:08:e8:f7:4c:d7:c7:f2:
1d:70:70:3c:8a:11:51:38:71:be:22:9e:77:3c:1d:
6e:8b:c8:33:f5:5d:f9:53:4b:b3:d7:33:50:8b:b9:
83:74:4d:4f:82:af:96:10:91:21:c9:56:c2:db:74:
d8:78:76:6f:f2:57:ab:90:e8:75:9b:55:fb:6a:40:
8e:ef:d0:b9:84:eb:d9:7d:72:5f:0b:34:85:ce:71:
4a:94:18:a0:4b:b7:b3:28:da:33:3e:ab:f3:54:77:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:BF:63:21:65:3A:96:B2:1C:A3:ED:BE:5F:55:CA:90:27:A4:B9
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:57:d1:93:01:08:d5:4c:99:f5:c3:0d:ee:67:27:38:4d:91:
cd:ea:67:c0:c3:5f:a3:d4:30:3f:fa:fe:8f:b6:ac:aa:66:50:
7b:53:c0:54:a8:fe:7c:e4:fc:f7:a8:c5:b8:7f:6b:4e:16:d1:
a1:01:1c:cd:9b:9f:df:67:d2:6f:7d:9d:78:f6:dc:33:87:ac:
6b:54:47:e0:3d:45:0b:08:9d:1b:3b:fb:2c:61:fc:d9:fd:1e:
a3:63:ef:3f:9f:60:07:c3:8f:5a:f7:49:7e:d3:73:36:6c:d9:
b5:2d:56:57:62:52:8e:4e:d1:e0:6d:89:e3:62:b8:81:39:09:
63:ba:cc:6a:2a:4e:89:5d:a3:1f:b4:dd:c5:66:42:6e:3c:02:
ac:60:15:62:fb:25:c1:d5:5b:64:0d:5a:c9:8d:a9:76:e5:1e:
43:d9:cd:61:99:db:36:f1:5a:ec:61:73:2d:09:34:34:30:97:
3e:dd:0f:1a:aa:c0:a2:ba:d1:a2:bf:72:40:a3:e0:40:8f:14:
55:fd:07:9b:2f:2b:44:65:02:1c:e2:2e:6b:91:b3:f1:90:dc:
47:b7:b3:ac:e4:ae:d0:2a:73:cd:32:72:bf:a6:33:ac:97:3e:
5b:2e:3e:26:80:e1:ba:1e:a6:23:a0:12:29:21:fb:e5:32:1e:
6b:d2:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:14 2025 by rpki-client