Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: Xch4yrS6lCI2/jq4ijSM1lJ0I6nM7a2VLZau8DO632c=
Subject key identifier: 04:55:98:38:26:35:F9:A7:F0:82:91:A7:BF:4C:6E:ED:6F:82:1E:9F
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 0194BCAA300492F3018AA1EAF3A50DE47990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0867
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: L3ADA1l9TFsww+BL4lypcq560gRPr8U3CS8iR+XSzXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:04:92:f3:01:8a:a1:ea:f3:a5:0d:e4:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=045598382635f9a7f08291a7bf4c6eed6f821e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:2c:73:ed:b8:7d:50:a2:5f:08:96:f8:d8:
1b:dc:62:2e:7c:be:06:d9:e7:84:eb:53:6f:99:96:
73:83:d3:b5:8c:b1:db:04:70:53:83:4c:3b:a7:52:
f5:29:d9:fd:8f:7a:bc:17:2e:b9:49:2b:92:17:f9:
c6:77:e8:df:6b:32:58:d7:40:28:30:be:e2:d8:16:
4b:c7:ba:65:4f:86:8b:e0:81:69:49:00:10:51:87:
df:8b:51:22:f1:cf:84:89:4b:33:fe:5f:54:7f:9b:
18:f1:19:31:ca:5a:ad:2a:f4:19:79:94:50:f3:50:
5c:0e:19:bc:4c:fc:89:4d:cf:79:0b:84:27:25:53:
52:09:57:42:ac:1c:f6:fa:7f:4b:ec:6f:64:47:12:
23:ed:82:fb:63:2c:d5:92:68:a1:fa:6c:1b:77:37:
bb:71:eb:36:fa:31:1a:dd:27:95:c8:42:07:f6:77:
5e:42:b7:33:a5:7c:d3:00:ce:8e:d4:7b:52:f0:f8:
08:c8:6c:13:8a:dc:3c:eb:f3:f2:e6:72:22:b6:15:
03:ce:4e:67:84:63:0d:32:7e:0a:2d:0f:3c:31:64:
fe:5b:82:bf:36:51:7a:a0:b0:a8:e4:d1:d7:00:c4:
81:ed:20:d3:3f:06:e3:32:10:f9:3e:62:89:d6:d6:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:98:38:26:35:F9:A7:F0:82:91:A7:BF:4C:6E:ED:6F:82:1E:9F
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:71:b9:91:02:d0:5a:a5:8d:da:9a:19:b0:12:5d:5f:7b:91:
9d:95:69:aa:1b:7a:84:4c:07:e4:6a:e9:41:b5:d2:88:78:9b:
64:8e:6c:aa:a9:0a:04:67:1a:5d:0e:2b:76:aa:53:4c:cf:a3:
75:6c:99:1e:ea:b2:f4:7c:44:dd:c3:ca:0c:05:39:53:c5:d0:
84:71:6c:02:08:9a:bb:a7:a6:7e:12:78:c2:5c:d2:f4:a0:83:
9f:8c:14:a2:92:47:69:c5:ff:04:99:43:65:0f:3f:99:e4:25:
e2:f0:9a:1e:60:8a:74:63:1c:5f:66:00:74:63:1b:98:5c:77:
b1:c4:75:a2:2f:16:96:68:52:8e:2c:6b:a1:a0:0f:46:cd:ed:
b0:1c:ab:17:b9:10:8e:30:eb:eb:00:11:39:24:7a:77:7f:e5:
e5:33:63:4b:8c:74:79:f3:a5:62:14:f0:15:41:35:94:68:cc:
70:db:ea:66:89:40:1b:46:39:8d:46:1b:37:97:73:82:20:1f:
a1:22:8d:50:4e:a2:d5:6e:43:94:ad:39:aa:9c:51:b1:d0:cd:
62:d0:ed:4e:aa:5b:5f:17:30:eb:66:f6:49:22:e4:af:fc:08:
22:11:2b:b1:46:f4:1b:ae:df:e3:ae:ed:d7:e1:ce:27:da:17:
55:c5:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:25 2025 by rpki-client