
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: FKKdyS/5eTei5tVjaJfYG7s/uj7Y1nm7FVfjyMpMq8A=
Subject key identifier: 3E:DF:12:F4:3B:45:08:27:DB:84:52:FB:61:A3:63:2C:FA:6D:94:73
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 0194BD8581178B9D84BDAFC2A6966D831A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 91
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: 1-LEezNtaqjy169gIk46UkSGODnI.roa (hash: FRFupvefU0HUQnLO8y2fwT4i2INskAlpIVZPmaI9wtE=)
2: IrF-9wkj7eNtv0srLfHPyI1GtTA.roa (hash: mAMlIob8u84HdQAxB78nZwUMGcefLJXlEaHY1RBkM0I=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: UaVeZw/A0bovgay9tCdXY+HK+zO+j3ndQk5u1dJCyhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:81:17:8b:9d:84:bd:af:c2:a6:96:6d:83:1a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=3edf12f43b450827db8452fb61a3632cfa6d9473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:82:80:3d:14:ab:df:50:a5:e4:80:1c:0b:
b6:76:20:3d:58:77:49:4e:51:58:48:9a:d3:ae:c8:
db:3d:cd:e7:60:f3:04:a4:d4:c6:cd:2b:23:0e:1d:
1f:c9:84:c1:68:06:ce:cc:08:5e:22:a6:3b:ef:a1:
43:cd:39:69:6a:6d:72:49:e2:f9:4f:c2:a9:39:fa:
b1:77:31:76:75:6c:1e:7a:1d:55:99:6c:e7:dd:a7:
75:0c:85:f8:fe:e5:8c:89:24:80:c3:12:6b:2d:36:
53:45:23:ae:e3:d7:28:87:82:03:a8:27:a4:32:34:
85:ac:70:1f:9a:90:20:ee:6d:b2:d4:af:d2:cf:b9:
10:c4:a7:19:76:60:88:e4:6e:8b:bf:c2:a3:60:62:
a8:b5:22:fa:25:df:73:1c:c6:84:17:44:43:42:ba:
0e:e5:db:e5:7f:48:93:fc:9a:b2:ef:a9:d1:ea:f5:
c8:f2:4e:8a:0e:5e:91:a3:0c:72:b0:94:73:19:28:
e7:fd:ab:83:3c:3e:11:27:99:6b:a8:58:9f:01:6a:
97:1e:9f:22:16:5e:1f:93:b8:8c:91:ea:4a:b9:be:
7a:e3:44:a0:25:27:98:fd:81:fb:dc:c4:2b:85:e8:
0c:4d:45:95:7f:3e:66:24:5c:e8:de:f0:b5:72:7b:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:12:F4:3B:45:08:27:DB:84:52:FB:61:A3:63:2C:FA:6D:94:73
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ab:b9:4d:81:17:fc:14:d5:d7:f2:38:68:2c:56:33:f8:99:
b1:bc:de:39:86:ef:ef:87:cb:b1:5a:c1:ba:f9:8c:00:d1:8b:
7b:84:af:95:1b:d0:8a:ca:eb:85:1e:fc:83:f3:3d:fc:0e:66:
cc:61:0c:1e:23:c6:31:7d:47:2e:62:f9:ac:e0:e4:78:59:96:
e2:a5:d9:be:db:e0:6a:d7:12:64:ef:db:70:77:13:c1:f7:e1:
fe:1a:02:51:b3:b0:51:3d:65:0c:1e:73:38:30:b4:c2:58:98:
19:a9:4b:83:bf:0d:c8:a8:57:fc:63:5d:10:47:5d:a8:dd:ef:
bb:b9:15:20:22:92:91:01:71:92:8c:6b:8e:cc:1e:55:02:9c:
45:1b:10:8b:20:48:6e:a9:9e:c5:0c:1b:81:b9:1e:8b:be:cd:
bc:f4:59:95:ad:aa:40:40:7a:f7:99:a4:5f:9b:64:3b:04:5f:
ff:69:61:0d:05:66:eb:50:06:6c:bc:ad:7d:0d:67:0a:5e:2c:
31:dd:6d:0a:c4:a1:b7:9b:d5:95:c1:54:63:d0:89:ee:e3:c6:
c9:6b:ae:9a:76:c5:e3:d9:f5:13:23:d0:a2:fc:5e:cf:ce:69:
26:c6:1b:54:12:07:71:40:bb:41:14:c6:d1:67:be:0b:7e:1f:
fb:26:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:48 2025 by rpki-client