Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: Ite2nO/NhyLZslmYY8OXL0BPamt6ONPo0PjdGMvZEEk=
Subject key identifier: 02:49:1C:F4:60:F2:FC:79:87:0A:C9:D7:07:E7:EE:23:1E:5A:B6:4A
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 0194BBCDCF378BC35A53C1868F07C1BFD719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 0534
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: 3hblAUbohBwFT91IssPjV90kLNw.roa (hash: 38EdVnlMAGIlx0Mlz1graFZq4XBH6eOlqF04LdXhHB4=)
2: 3u-LFDYOPDKUR_aD9yRJMe6LFho.roa (hash: euYR+CNCm6M5QEu0e13mte8Lec7fxC8lashK6MZRo8E=)
3: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: lhJwtSIoxNcSt/yx5OfIBvOMkEsaX8UnxzL2CJhzLUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cf:37:8b:c3:5a:53:c1:86:8f:07:c1:bf:d7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=02491cf460f2fc79870ac9d707e7ee231e5ab64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:af:f2:d4:16:f4:c5:59:13:1f:31:c6:e1:
b7:2d:85:32:e4:0c:37:ba:0d:63:d7:37:28:bc:07:
fb:7f:b2:59:5d:82:cb:63:05:00:32:37:24:cb:b5:
77:f7:86:04:80:ea:5e:d2:ff:c3:88:a2:13:79:2c:
95:65:62:3e:43:08:59:41:d3:05:17:81:63:06:16:
fb:ba:90:99:62:76:dd:ae:23:c9:97:4c:ed:c3:e4:
75:24:73:84:43:5f:28:2e:eb:1d:10:f9:75:2f:41:
f2:8f:19:ec:ae:f0:0e:6e:db:b3:d9:8a:3f:e7:a1:
41:78:b0:77:6e:e4:b5:99:fb:98:fd:21:e4:96:66:
3d:5e:b1:1f:4e:5f:c8:93:29:f3:09:35:03:9f:a4:
2b:99:b7:ae:3e:18:29:70:0d:00:80:3d:d9:40:27:
51:6c:9e:fd:5b:97:39:24:11:c7:3c:75:50:9a:63:
38:1e:92:2c:9b:be:24:54:91:01:51:63:b7:d2:1b:
bd:e0:10:9d:ee:72:86:d7:18:2b:98:2e:4f:db:6b:
2e:de:3c:9a:2c:15:88:1d:0a:0a:0e:98:91:8b:e7:
da:1b:98:01:7f:51:9e:e9:ef:58:58:e7:f0:1e:7b:
16:54:b6:a6:71:21:9b:54:1e:79:4c:14:a1:cd:19:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:1C:F4:60:F2:FC:79:87:0A:C9:D7:07:E7:EE:23:1E:5A:B6:4A
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:a4:6d:69:53:5e:a5:e7:fc:78:82:d5:e3:a9:76:d3:03:
92:44:a1:56:63:6f:6f:f4:f3:94:13:75:bb:82:92:62:43:19:
24:dd:66:a3:40:48:1d:06:b9:9b:0d:b1:d5:96:c1:1c:3c:3d:
53:5c:ae:61:f6:96:35:1a:2a:ba:8e:a3:4e:21:75:c8:eb:4c:
48:61:8c:fd:e4:c6:9d:c5:5d:ec:99:30:64:e2:01:22:97:f2:
16:57:23:82:6e:16:82:82:ff:07:6e:fd:de:18:b8:6c:1b:2a:
ed:4a:7e:31:ec:b8:b4:96:eb:f6:ec:21:9d:78:5e:81:cc:21:
c2:39:9e:17:43:6c:ec:be:d7:49:67:a3:04:d7:be:bf:27:7d:
99:e5:5b:99:a4:c9:ba:9e:f1:7f:ee:d9:f7:1f:11:93:02:19:
fe:22:49:a0:76:f0:5c:38:ea:fa:62:46:87:a9:2e:38:36:57:
62:88:42:6c:2e:4c:46:54:e8:c4:8f:d4:8c:29:96:89:ce:8e:
8f:19:08:e9:54:e7:61:86:96:e1:af:0e:ed:4b:d5:2c:08:ad:
75:f2:1c:c9:66:cb:c6:18:5a:56:52:ca:3f:4c:40:c5:6b:75:
43:55:f6:89:20:33:82:7c:e3:d7:5f:d0:ac:53:43:91:fc:97:
33:50:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:33 2025 by rpki-client