Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: neuVSkuhTZ+nZfTiaKg7e/EDThTAW1jUhj+sYM4jbZQ=
Subject key identifier: 5C:4A:C8:76:CE:47:50:4E:71:B2:30:22:16:8A:22:40:19:95:85:F7
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 0194BBCE65DCFF815612ED1CE0D984ADE2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: QQDojmPluINFv7dGMzRCy41jA48+ld6wUO/22foRzrM=)
2: xOrZrnnNO1wW9p4s49S_LuX8hPc.roa (hash: hZIiC9kkNV8eJaOx5V1jcu1tdvVz3yuRCZDhua0CV0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:65:dc:ff:81:56:12:ed:1c:e0:d9:84:ad:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=5c4ac876ce47504e71b23022168a2240199585f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:28:bd:1a:24:58:d9:2f:2a:25:71:6d:e0:
9c:c4:48:b7:96:5a:c5:97:90:a7:0c:7b:f5:cd:36:
d1:36:94:58:92:40:d1:5a:da:0a:90:35:6e:64:78:
f6:06:8a:5d:9e:5f:02:3b:6d:ef:76:e0:8f:0d:f9:
9b:4d:22:48:1e:c0:7c:a9:e9:56:be:fb:da:0d:be:
2a:3f:b5:9a:2a:e7:d0:61:af:5e:b4:a2:f8:ad:8f:
8f:49:b2:08:2c:67:55:64:60:4f:c2:bf:09:47:ef:
e2:db:c2:60:37:b5:c4:13:07:c8:96:2b:bd:47:09:
56:7c:ab:3f:af:d8:2e:bd:50:c4:1d:c5:63:93:2d:
dc:11:cd:3a:63:b8:18:c0:39:9a:7c:69:3e:31:44:
9f:87:3a:5b:9e:55:c2:49:23:6d:55:bc:1a:ab:bb:
76:77:eb:6c:d4:1f:c3:21:26:85:5a:d9:1c:33:f7:
6a:8c:1d:84:2b:9e:cd:06:96:80:29:94:05:de:e2:
04:31:94:17:46:21:d9:2e:da:4e:c8:8b:75:d2:90:
32:94:11:6a:df:01:44:4c:01:a1:20:e2:0a:d1:f7:
22:8c:0f:79:54:ac:b3:5c:6d:33:86:b0:c3:b5:08:
8b:2e:ee:66:2c:ea:93:e0:a7:0b:72:26:bf:d0:21:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:C8:76:CE:47:50:4E:71:B2:30:22:16:8A:22:40:19:95:85:F7
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:59:53:d8:35:4b:48:62:f0:25:3b:84:27:52:a2:d4:c9:55:
65:a6:8a:29:dd:2a:66:24:f1:7d:46:5a:36:6e:11:7a:10:19:
e6:03:05:f1:a4:aa:82:5a:5a:93:ff:a7:6b:2b:ec:d9:97:31:
d6:5b:0f:e7:1d:c5:93:0f:26:27:27:4e:b1:23:94:66:a8:6a:
13:12:71:eb:a7:2a:62:51:72:de:24:a1:b3:c3:ba:3d:41:16:
db:7b:ce:be:67:9e:82:02:95:39:dc:0d:d4:4e:80:84:5e:7a:
11:8b:e9:fb:53:5d:46:5a:17:e3:2c:bf:5f:1e:56:65:7e:38:
e5:91:13:3c:f7:78:ce:86:00:a5:22:29:43:9f:b3:8a:76:2d:
5e:d7:4c:d8:19:f9:a1:c6:e3:e9:80:fa:89:d8:4d:7c:86:f7:
ac:b1:dc:e3:81:9c:c0:97:eb:2b:9d:57:10:5e:9f:38:97:f0:
d5:2c:16:5d:37:17:be:03:4c:78:b1:f8:3f:56:83:12:ae:29:
83:90:65:2b:d7:eb:37:e8:ad:e2:3b:f3:94:7d:48:dd:28:fd:
c7:6d:91:ce:36:85:ab:dd:d0:85:99:29:9d:c8:c7:67:bf:62:
77:66:57:90:3b:be:53:05:25:32:ed:c5:d3:73:92:18:df:4a:
b9:f2:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:23:43 2025 by rpki-client