
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File: RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier: wAXpYMh5AsQ5eqSdLxUFuKycue2iHVLu02n/qlh5vTA=
Subject key identifier: 72:96:E2:0C:F5:CA:6A:73:7A:36:EE:F1:34:2B:B4:E8:5D:C3:7E:D1
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer: /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial: 0194BC04F6D1BCCF3C7645DCD339820F5B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number: 1400
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: sj3dEwBudavLaa8jCmN+ohCXINfl5j/1zt4FJKKCLOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f6:d1:bc:cf:3c:76:45:dc:d3:39:82:0f:5b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=7296e20cf5ca6a737a36eef1342bb4e85dc37ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:d3:b2:1c:82:42:f3:95:24:cd:af:bb:c3:
b6:dd:e0:47:77:7d:ec:59:64:dc:dc:f1:44:07:06:
b6:59:df:ab:e9:2b:14:bb:d4:3a:1d:65:1f:7b:72:
81:63:24:8c:e5:7a:6c:fa:01:13:be:8e:60:f2:b7:
0b:05:0e:a3:5e:1b:60:6b:7b:be:a0:e5:20:54:19:
95:f6:e3:4c:2a:f8:69:b6:eb:63:36:dc:a9:c2:0e:
98:22:03:e9:59:e3:e8:c3:1c:75:d6:bb:9e:20:32:
fa:81:ad:38:0d:ed:c5:1c:1e:e7:55:fb:9a:12:0a:
4a:c7:9f:dd:05:d3:40:58:b0:e9:6e:dc:24:c5:01:
4f:b3:da:b7:33:84:fd:49:8f:7d:ef:31:d5:2e:ed:
c0:77:97:8a:e5:8e:7c:86:7f:ee:f8:7d:0e:a1:cf:
8e:74:42:2b:66:34:fb:f9:39:dc:6c:7e:aa:32:bf:
09:0c:1c:22:70:55:c3:29:11:df:e2:70:de:92:9d:
50:30:2b:55:a6:30:e2:e0:03:a9:18:bc:65:c8:76:
f9:e8:10:06:3a:74:ea:a8:c8:7d:58:da:bd:f9:68:
59:e5:bb:20:1e:b5:76:b5:1b:46:63:03:af:49:b3:
90:6d:04:1d:7d:c8:01:ca:fd:87:40:5f:ce:42:45:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:96:E2:0C:F5:CA:6A:73:7A:36:EE:F1:34:2B:B4:E8:5D:C3:7E:D1
X509v3 Authority Key Identifier:
keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:e8:e4:2d:d3:96:6c:f2:0b:ac:19:e8:5d:7c:6f:6b:1d:
4e:62:2d:78:5b:f2:3d:1f:cb:43:07:e1:0d:c6:e7:05:b7:10:
e7:45:8c:32:43:f3:8c:0a:af:6d:05:65:b5:71:9c:10:12:c4:
5c:32:48:e5:90:e6:4b:cb:a8:86:66:81:d5:94:51:aa:a7:29:
73:8e:b2:6d:22:24:78:a6:32:a7:e0:a1:95:06:79:e4:66:26:
57:5d:35:25:61:4b:e1:04:37:57:bd:95:ff:39:98:c9:bf:33:
6a:30:78:f2:f3:29:c0:7b:a9:e0:0f:c7:9f:52:02:2c:3b:c9:
0f:96:18:47:d6:d5:2d:df:3d:88:6a:60:e3:64:50:c2:1d:f1:
f3:46:20:e1:de:3e:70:c7:bf:3e:34:b8:ee:92:c1:c6:ef:41:
2a:b5:88:d0:a8:95:a2:e2:f6:02:4a:6f:cc:c6:a7:a5:48:95:
4f:c4:1c:27:c3:28:b7:c7:13:24:48:88:b3:91:36:6b:c3:e5:
94:4c:18:8a:53:d6:38:85:e3:4e:ca:36:34:37:e2:2d:3f:5e:
b1:6b:13:30:f7:25:e1:d8:cc:a9:db:6d:dd:28:f6:a6:3d:18:
03:3d:1d:5d:b0:d3:40:71:96:8a:15:93:47:42:a0:02:df:4c:
68:1b:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:31 2025 by rpki-client