Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: JodRxmjs9AOAGCTlu1sCzy/Drv152uiaN6tgthMzFbs=
Subject key identifier: F4:A4:27:7D:E0:7A:EF:32:CA:30:02:E5:43:C7:12:CD:38:E4:9D:56
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 0194BCAA09C7BBAEB25B33216857AF4F5A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 117F
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: 8+4UkwyRLTwG67Ma4XwiPW7YcBC6G+tdH+I+BFgvkr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:c7:bb:ae:b2:5b:33:21:68:57:af:4f:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=f4a4277de07aef32ca3002e543c712cd38e49d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:c0:68:17:bb:c1:07:3c:15:07:40:e6:71:
69:23:93:12:b8:0d:21:52:5a:4a:8c:8c:57:7f:ef:
83:09:57:d8:f5:e2:58:9a:30:01:40:f6:71:9d:88:
10:5f:d9:64:d1:c0:41:dc:96:1b:de:29:5c:c8:56:
97:d4:8e:8d:56:04:af:14:6c:b2:ee:0b:22:09:6b:
37:25:67:97:7b:b9:00:46:4b:f1:6a:7f:34:99:d3:
c8:d4:70:e5:ad:46:68:b9:d3:5a:ee:c7:1b:f1:25:
7a:21:86:22:d6:52:61:ea:c2:a4:01:87:9d:6d:a6:
23:dd:e4:61:19:eb:3e:bb:ff:ac:69:ec:b1:8e:bd:
53:76:ca:a8:3a:7f:54:d8:70:f9:d0:1b:6d:ad:e6:
27:0d:67:b0:28:b4:12:f4:9f:3b:08:86:a9:30:de:
01:04:ed:db:cf:7a:27:45:60:d7:44:08:23:0d:eb:
0c:fc:b1:a4:27:43:3d:3d:f9:11:2c:da:f9:b8:4d:
a1:78:9e:54:38:a3:d6:86:7b:95:ec:bb:81:f0:68:
6d:40:27:cc:1a:c9:19:9c:e7:b9:55:8a:26:b8:71:
0a:03:d3:a6:42:e0:d1:ed:1c:a8:08:73:18:9b:d7:
15:ff:ef:85:bc:a8:74:c8:c3:d5:3d:b1:58:37:d1:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:27:7D:E0:7A:EF:32:CA:30:02:E5:43:C7:12:CD:38:E4:9D:56
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:46:04:84:1e:16:7e:91:52:79:1e:31:b2:1c:0d:30:ec:9b:
ac:d6:34:f6:ae:97:f1:7b:15:40:a1:94:f8:bf:d3:1d:f6:78:
0a:19:b2:7b:b6:42:d4:37:61:19:d1:61:12:a1:3b:2d:aa:26:
fe:e7:7a:9a:8a:9d:ff:3a:31:7c:3f:40:26:8c:04:a2:bc:04:
20:f9:01:f2:44:ea:5a:96:0e:1f:28:6b:a0:60:f8:e2:55:5c:
5b:16:2f:db:df:d7:a4:e5:3d:f0:1d:33:fd:76:e8:2c:71:84:
14:75:39:c4:f4:bf:7c:b9:02:86:a6:08:bd:a5:9e:d8:88:a8:
e7:54:ba:57:de:02:9a:46:03:13:cd:73:68:bf:0c:01:a4:6c:
de:39:ce:91:6b:3a:cd:dc:35:d3:0f:47:76:fd:3c:37:7e:73:
bd:f7:f4:9a:16:5e:0c:30:3a:16:9e:00:4c:41:b2:cf:a6:7b:
e9:74:8c:49:fa:6b:69:06:66:3f:27:57:10:1a:cf:15:4c:1d:
e5:fc:c9:56:1e:93:71:04:51:23:e1:e9:74:21:23:80:98:6a:
f0:d5:22:69:bd:25:f6:da:17:6d:b1:9a:1b:e8:0b:17:5a:19:
08:c0:d6:a8:03:c2:1d:41:ba:4e:b1:63:a9:2f:37:f1:66:76:
14:c8:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:56 2025 by rpki-client