Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: Ws4sWH5zjGitZMPVsAFXttmOaV7jxobqwoTk7/fuXUY=
Subject key identifier: C8:21:30:82:2F:66:41:0D:43:FA:3E:92:70:0A:03:89:8B:5E:F6:F0
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 0194BC04CF278F51590F8D6ADAA705E2BFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 0285
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: JevwTxjfPVgPDHX6YDiPPtcC+7npsObFFAN8goicsQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:27:8f:51:59:0f:8d:6a:da:a7:05:e2:bf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=c82130822f66410d43fa3e92700a03898b5ef6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:bf:b5:1b:72:ea:83:c0:71:9e:07:2d:d1:
61:dd:b5:e4:6b:b6:bc:68:cf:7d:a8:6e:46:e9:85:
6b:5e:61:39:f5:80:b3:4b:a3:1a:7e:62:86:3e:33:
42:6c:8a:32:b6:e5:59:7f:3d:ee:77:a3:a7:cc:24:
df:33:57:2f:e1:97:6b:02:36:87:6a:b5:f7:05:c1:
fa:9c:3b:22:23:e0:3f:9d:6b:03:14:54:e9:f6:92:
3c:ac:73:79:28:a9:b7:ca:96:b2:61:2a:6d:b9:a1:
53:38:b1:f3:58:7e:7d:bb:8d:a5:58:64:ee:d9:82:
a6:bc:7e:e2:24:4c:99:24:13:f0:f2:ee:34:ef:9d:
69:10:48:c4:49:55:cd:34:9d:06:33:68:35:da:ff:
63:59:86:6c:f5:0e:a9:ac:43:30:4b:c8:b7:70:45:
a9:ce:5f:d1:ed:98:62:a4:45:2f:ab:38:e1:cb:86:
6c:de:7e:00:2d:cf:63:99:71:5a:35:54:89:0c:71:
d8:28:84:7b:fb:13:87:77:b5:fd:06:3e:e3:1c:29:
a6:24:10:57:ed:04:15:3e:c7:0d:b6:6a:1d:8a:be:
e0:4e:d3:02:8b:61:14:8b:f4:a4:fb:f5:34:e1:91:
93:80:b7:91:58:6d:8b:db:cb:29:e4:f9:9f:8a:f2:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:21:30:82:2F:66:41:0D:43:FA:3E:92:70:0A:03:89:8B:5E:F6:F0
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fe:3a:47:b6:18:c3:44:de:94:3c:d8:dd:c0:f8:8d:0a:10:
5d:45:0a:5f:ef:ef:b5:ec:91:56:5f:7b:93:fb:40:f0:a8:72:
0f:0a:ea:cb:c7:69:ab:ec:00:a6:7f:46:86:25:05:98:21:ce:
c8:92:70:1f:fe:ca:ad:a9:9c:1b:08:58:f2:16:6d:34:0a:5d:
a8:24:af:8a:ff:79:55:b7:5e:5d:e4:e6:29:4d:71:de:6e:55:
ff:c8:fa:8c:dd:28:d3:a3:dd:f6:4d:39:9c:57:ea:ac:83:20:
e1:7d:88:2e:4e:4d:23:ba:5b:6e:0b:a2:8c:7b:2c:f7:01:04:
0f:00:46:09:9d:22:0d:7b:c6:81:8f:be:c9:8a:2e:e4:54:f5:
e3:d2:93:9c:6a:26:47:53:f8:5a:ce:26:c4:9a:73:99:a3:11:
79:d0:85:d0:f5:99:c6:8f:16:7d:46:3f:c6:7e:0b:e2:a2:e2:
fc:cb:6b:64:54:be:72:3c:c3:f3:95:fa:af:c6:84:e1:ca:cf:
30:8e:b7:02:ef:d2:74:79:00:a3:94:b3:01:9b:c7:cc:32:a7:
d3:ac:03:7f:04:c6:ea:e7:a8:2e:73:07:e8:37:19:1c:af:07:
50:66:35:0f:d8:d9:a9:95:5c:81:e8:89:ec:de:02:78:fe:07:
38:37:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:50 2025 by rpki-client