Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File: r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier: /xkkgRCFzLFViZbtUctYvinih0w3SBVvogKJZtYHxn8=
Subject key identifier: 4E:D5:5D:A4:C6:DB:11:AB:D1:2D:4D:74:02:E0:2B:37:B4:80:87:17
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial: 0194BD85B7B71C96F384F2E87170F0C23296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number: 0452
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 4FPxHmFFi8FhwJTxhTVfGxLgeb0.roa (hash: DAkyKbIc/vzHYQCVTOxWR8OPdTTpNjZGMzs7QrhE8O8=)
2: SXZ4OC3uEKLZlrHZHhNw8-yQgxA.roa (hash: vNMGO/V+wM2poBogoxX0G2VxJUoeVSJS0RUp9B01dCc=)
3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: NoYxrByaHRnpmtv3+PJOB8vG5o/zvWJQcq4XFksfLb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b7:b7:1c:96:f3:84:f2:e8:71:70:f0:c2:32:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=4ed55da4c6db11abd12d4d7402e02b37b4808717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:7c:a1:81:e4:87:29:84:25:98:18:ab:bf:
1d:dd:b5:01:0a:3d:c1:8c:b8:20:cf:6d:31:54:ee:
7f:82:46:3a:c0:5f:1f:81:5b:37:1d:09:c6:6d:15:
b4:e0:e9:40:5d:f4:dd:eb:bf:92:85:8a:70:9c:b0:
4e:14:6a:17:37:98:c9:d8:8c:a8:d7:67:78:1b:08:
4a:1b:25:06:10:dd:20:3f:3e:22:0d:a7:43:13:bd:
ae:45:86:a9:8c:f0:f3:cc:05:e9:81:22:8b:8d:7a:
d5:7d:3d:fd:3a:06:27:c3:0a:b5:93:4d:42:75:6b:
10:30:29:29:75:0d:15:7d:19:90:e5:05:dc:6a:bf:
ac:0b:cc:d8:22:20:ce:52:7c:20:dc:fb:c5:42:97:
19:84:d9:a4:2e:aa:da:fe:12:ad:ed:b6:ba:ee:2c:
93:eb:74:2b:77:8e:0e:0f:ee:b3:8f:6a:af:06:14:
0c:d2:98:19:4e:0a:31:b3:8a:00:0a:3c:f8:bc:42:
80:85:91:bd:3b:74:8f:0a:3a:e4:f4:41:cc:9e:30:
fc:bd:ec:9b:73:d0:a0:13:bf:6b:ab:ee:dc:3f:ff:
57:53:0d:6c:a0:e5:cf:0a:06:d4:c5:c8:bf:9e:24:
1c:c5:bb:fa:0b:20:88:ea:28:c7:ab:78:e0:c9:12:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D5:5D:A4:C6:DB:11:AB:D1:2D:4D:74:02:E0:2B:37:B4:80:87:17
X509v3 Authority Key Identifier:
keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:55:28:3b:f2:4b:c5:14:5b:f3:03:ee:53:ac:4e:58:03:d5:
0c:0e:61:91:af:46:07:72:ad:7a:d1:ec:ad:62:a4:fe:e4:f5:
ed:a1:49:b2:a6:c4:ee:5f:96:bf:f3:39:89:53:4e:50:d2:28:
98:97:de:6a:4f:30:a0:d4:c8:a9:e6:51:93:c3:79:99:8e:2d:
e5:d9:82:2a:af:de:7d:ed:51:c9:ef:67:66:0f:f9:7c:ca:b6:
41:70:e2:6c:d8:a7:10:9f:94:dc:73:0c:56:2b:c2:77:08:59:
8e:28:65:81:1f:8d:1f:42:ed:17:99:04:c4:8e:dd:cb:e0:c4:
55:60:aa:9a:47:54:c0:d1:ab:af:47:28:09:9a:c7:8e:a7:f9:
59:e7:57:a2:d3:30:db:2e:ee:23:f9:74:ce:97:ad:4a:2a:46:
de:06:e2:2a:77:9d:e2:3b:02:34:29:1b:6b:dd:96:5c:20:18:
7b:cb:73:43:e2:9f:9d:49:42:08:5e:5f:42:a3:6b:da:9f:d5:
55:d6:d3:58:92:6a:5b:a2:c8:b9:13:da:0a:4e:46:2f:ba:83:
a9:4b:63:67:b8:05:01:10:ac:f5:b9:35:f9:6e:11:23:50:39:
1b:b8:91:6f:b3:99:2e:03:32:8d:90:e5:4f:ba:54:9e:aa:fa:
00:77:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:16 2025 by rpki-client